Privacy policy

1. Who we are

Benjamin Albertelli EI, established in France, is responsible for the personal data processed to operate OMAE. This policy explains the web application’s current data practices. Contact Benjamin Albertelli EI at app.omae@gmail.com. Postal address: Not available.

2. What we collect

Account information includes your account identifier, name, email, sign-in methods, confirmed adult eligibility and preferences. Clerk handles authentication and verification. OMAE does not ask you to send your password or verification code to support.

Project information includes your uploaded room photographs, design settings, notes, generated images, project names, favorites and generation history. Operational information includes job status, technical errors, usage and credit records. Payment information includes Stripe customer and transaction identifiers, subscription status, invoices and credit activity; card details are handled by Stripe rather than stored as full card numbers by OMAE.

3. Your photos and AI processing

Original photos and results are private by default. The application checks account ownership before serving private files and uses restricted storage and temporary access links where appropriate. Do not include sensitive documents, people or identifying details in room photos or notes.

To produce a design, relevant photos and settings are sent to OpenAI for analysis and to Google’s Gemini API for image generation. Service providers process data under their applicable terms and account arrangements. OMAE does not publish your photos as examples or sell your room photos. We do not claim that every provider deletes all processing records immediately when an OMAE project is deleted.

Technical generation traces retain the internal prompt template and its version, model identifiers, response identifiers, timestamps and usage. These traces do not copy your photos, personal notes or the generated room plan. Exporting or sharing a result is initiated by you; an export that includes an original photo is labeled before sharing.

4. Why we use data

We process account, project and billing data to perform the service you request and manage your contract. We process necessary security and reliability information for our legitimate interests in preventing abuse, investigating failures and protecting users. We retain records where a legal obligation applies. Where consent is the appropriate basis, you can withdraw it without affecting processing that was lawful before withdrawal.

Result emails are controlled in Settings → Notifications. Browser alerts require your browser permission and the corresponding preference. Optional tips and commercial emails have a separate preference, off by default. Commercial campaigns are not currently active. A result-notification preference is not a subscription to marketing emails.

5. Service providers and international processing

OMAE uses Clerk for identity, Stripe for payments, Supabase for database storage, Cloudflare R2 for private files, Trigger.dev for background jobs, Resend for result emails, OpenAI and Google for AI processing, and the configured hosting provider identified in the Legal notice. Providers receive information needed for their role; not every provider receives your photos.

Data may be processed outside your country, including in the United States. Where required by applicable data protection law, international transfers must be covered by an appropriate legal mechanism and safeguards. Contact us for information about the arrangements applicable to your data. We may also disclose information when legally required or necessary to address fraud, security incidents or legal claims.

6. Retention and deletion

We keep active account and project data to provide your saved work. Ending a subscription alone does not delete paid results or credits. Deleting a project blocks access and triggers removal of its associated private files. Account deletion starts deletion of associated projects, preferences and identity data, with retries for interrupted operations.

Deletion is not necessarily instantaneous: temporary upload links, running jobs, provider retention and backup cycles may require additional time. Abandoned temporary uploads are cleaned separately. Minimal security, technical spending, billing and accounting records may remain for their applicable purpose or legal retention period; they are not used to keep serving deleted photos. Contact us if you need the retention information applicable to a particular record.

7. Your choices and rights

You can edit account details and notification choices, delete projects and request account deletion in Settings. You may also contact app.omae@gmail.com to request access, correction, erasure, portability, restriction or objection where applicable. We may verify your identity before acting. Legal obligations may limit erasure of some records.

Because OMAE is operated from France, applicable GDPR rights are not removed by targeting US customers. You may complain to the French data protection authority, the CNIL, or another competent authority. Additional rights may apply in your US state; contact us to exercise applicable rights. We do not sell personal information or share it for cross-context behavioral advertising.

OMAE is restricted to adults aged 18 and over. If you believe a minor has provided information, contact us so we can investigate and take appropriate action. Changes to this policy will be identified by the revision date, with appropriate notice of material changes.