Introduction

We are EXXE DIJITAL TEKNOLOJI ANONIM SIRKETI (Ruma AI, we, us, the Services). Safeguarding your privacy is integral to our mission. This policy applies to everyone who interacts with our app, including visitors, registered users, and anyone else who accesses our services (referred to collectively as "Users"). Under the General Data Protection Regulation (GDPR), EXXE DIJITAL TEKNOLOJI ANONIM SIRKETI acts as the data controller for the information we collect, unless specified otherwise in this document.

This Privacy Policy outlines how we handle the information you share with us when using our Ruma AI services. It covers the collection, processing, storage, and sharing of your data, as well as the rights and choices you have over your personal information. In addition, this Privacy Policy outlines what security measures we take to safeguard your information and how to contact us if you have any queries or complaints about the contents of this Privacy Policy.

This Privacy Policy must be read in conjunction with the Terms of Service (the "Terms") which can be found at https://ruma.design/terms-and-conditions. Together, they form a legally binding agreement between you and EXXE DIJITAL TEKNOLOJI ANONIM SIRKETI, so please read them carefully. By continuing to use our services, you confirm that you have carefully reviewed this policy, understand its contents, and agree to the terms described herein. If you do not agree with any part of this policy, we kindly ask that you refrain from using our services.

1. Data We Collect and Why

(i) Information Automatically Collected When You Use the Services

(ii) Information and Content You Provide

(iii) Data Collected from Third Parties

(iv) Device Permission

We gather information from the mobile devices you use to access our Services, including data generated by these devices, based on the permissions you authorize. To enable our Services functionality, the service requires access to your device's media library and microphone for content processing. These permissions are strictly limited to delivering the specified features and can be modified or revoked at any time through your device settings:

(vi) Architectural Design Data Collection

Your Design Data is rendered in memory as Base64 and then cleared immediately afterwards. All Personal Information is stored on your device. When you use our apps, we collect the information that you provide us directly: Architectural Designs. We may collect the architectural designs that you create with our application, including empty rooms, furnished rooms, or exterior designs. Please note, you won’t be able to upload content from your camera roll unless we can access your device’s camera. To erase this data, simply delete the app; this action is irreversible. In order to enhance our services and AI models, we may occasionally retain anonymized data, without any links to your identity, as a necessary part of our service delivery.Should you decide to remove the app and any photos generated by it, you can do so by deleting the app. Please be aware that all deletion actions are permanent and cannot be undone once confirmed. Your account or specific models, all associated information will be permanently purged from our system, ensuring your complete data removal.

2. How We Use Your Data

Beyond the purposes above, we process data to:

3. Data Sharing and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the nature of the data and the purpose for which it is processed.

You have the right to request the deletion of your personal information at any time. Upon receiving a valid request, we will delete your data unless we are required to retain it for legal, regulatory, or operational reasons. To submit a deletion request, please contact us at [email protected]

4. Data Security

We prioritize the security of your personal information and have implemented robust measures to protect it from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• (i) Encryption: We use industry-standard encryption protocols to secure data during transmission and storage.
• (ii) Access Controls: Access to your personal information is restricted to authorized personnel only, based on the principle of least privilege.
• (iii) Regular Audits: We conduct periodic security assessments and audits to identify and address potential vulnerabilities.
• (iv) Incident Response: In the event of a security incident, we have established procedures to quickly respond, mitigate risks, and notify affected users as required by law.

While we take every reasonable step to protect your data, no system is entirely immune to risks. We encourage you to take proactive measures, such as using strong passwords and keeping your login credentials confidential, to further safeguard your information.

By using our services, you acknowledge that data security is a shared responsibility, and we are committed to working with you to maintain a secure environment.

5. Age Limitation

Our services are not intended for individuals under the age of 13, and we do not intentionally collect personal data from children. If we become aware that a child under 13 has provided us with personal information, we will take appropriate steps to delete it in compliance with applicable laws, including the Children's Online Privacy Protection Act (COPPA).

For residents of the European Economic Area, the minimum age to use our services is 16, unless parental consent is provided as required by local regulations. If you believe that a child has submitted personal data to us, please contact us at [email protected] We encourage parents and legal guardians to monitor their children's online activities and take an active role in enforcing this policy.

6. Data Transfers

Our services operate globally, and your personal data may be transferred to, processed, and stored at our company's operating offices and any other locations where the parties involved in data processing are based. These locations may have data protection laws that differ from those in your jurisdiction. By using our services and submitting your personal information, you acknowledge and consent to such transfers, including to jurisdictions that may not provide the same level of data protection as your home country.

We take appropriate measures to ensure that your data remains protected in accordance with this Privacy Policy and applicable laws. When transferring personal data outside the European Economic Area (EEA), Switzerland, or the UK, we rely on legally recognized transfer mechanisms, such as the European Commission's adequacy decisions or Standard Contractual Clauses (SCCs), along with the UK Data Transfer Addendum where applicable.

7. Data Subjects' Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

8. Third-Party Websites

Our services may include links to third-party websites or services that are not operated by us. We do not control or assume responsibility for the content, privacy policies, or practices of any third-party websites, applications, or services. Any interactions with such third parties, including the provision of your personal information, are solely at your own risk.

We strongly recommend that you review the privacy policies of any third-party websites you visit, as their data handling practices may differ from ours. For your convenience, we have provided links to the privacy policies of certain third-party websites in Appendix A and Appendix B.

9. Changes to the Privacy Policy

We may update this Privacy Policy periodically to reflect changes in laws, our data practices, or our services. If we make significant changes, we will provide notice in accordance with legal requirements, which may include posting a prominent notice on our services or contacting you through available communication channels.

We encourage you to review this Privacy Policy regularly. Your continued use of our services after any updates confirms your acceptance of the revised Policy.

APPENDIX A: Advertising Networks & Partners

We may share cookie data with third-party advertisers to deliver relevant ads, and these partners use non-identifiable data for targeted campaigns. However, we are not responsible for the privacy practices or content of third-party services. For more information on their services and privacy options, including opt-out choices, please refer to their respective policies.

APPENDIX B: Integrated AI Models

To enhance the quality of our AI-generated services, we may share certain information (content that users upload to use AI features) with the following third-party service providers. For more details on their services and privacy options, please refer to their respective websites and privacy policies.