Privacy Policy

roomtreatment.diy is built and run by Ferenc Deli Szilagyi, an independent developer based in Hungary. This page explains what we collect when you use the site, why we collect it, and what you can do about it. We have tried to keep it plain. If anything here is unclear, write to us at contact@roomtreatment.diy.

Who we are

For the purposes of data-protection law, the data controller is Ferenc Deli Szilagyi, an individual based in Hungary. You can reach us about anything in this policy at contact@roomtreatment.diy.

What we collect

• Account information. Your email address, and a securely hashed password when you create an account.
• Your designs. The rooms, dimensions, and treatment layouts you create and save.
• Usage data. How you interact with the site (the features you use, where you run into trouble), collected through PostHog so we can improve the product.
• Technical data. Your IP address, browser type, and basic request logs, kept for security and debugging.
• Payment information. When you buy a paid plan, payments are handled by Stripe. We do not see or store full card numbers.

Cookies and analytics

We use a single essential cookie (jwt) to keep you signed in. It is strictly necessary for the site to work, and it is not used for advertising or cross-site tracking.

We also use PostHog, a product-analytics tool, to understand how the site is used so we can make it better. PostHog may set cookies or use your browser’s local storage to do this. We do not use advertising networks, and we do not sell your data. You can limit analytics by turning on “Do Not Track” or by blocking cookies in your browser.

How we use your information

• To provide and operate the simulator and your workspace.
• To authenticate you and keep your saved rooms with your account.
• To understand usage and improve the service.
• To process payments for paid plans.
• To respond when you contact us, and to keep the service secure.
• To comply with legal obligations.

We do not sell your personal information.

Who we share it with

We share data only with service providers who process it on our behalf to run the service:

• Supabase — our database and authentication backend.
• Contabo — the European VPS that hosts the application.
• Stripe — payment processing for paid plans.
• PostHog — product analytics.

These providers process data only to provide their service to us. We may also disclose information where the law requires it.

How long we keep it

We keep your account data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep certain records (for example, payment records) for legal or accounting reasons.

Your rights

You can ask us to access, correct, delete, or export your data, and to restrict or object to certain processing. If you are in the EU, EEA, or UK, these rights are granted by the GDPR. If you are in California, you have rights under the CCPA and CPRA, including the right to know and to delete, and we confirm that we do not sell your personal information. To exercise any of these, email contact@roomtreatment.diy. You also have the right to complain to your local data-protection authority; in Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

International transfers

Our servers are located in the European Union. If you use the service from outside the EU (for example, from the United States), your information is sent to and stored on our servers in the EU. Some of our processors, such as Stripe and PostHog, may process data in the United States; where that happens, we rely on the safeguards and data-processing terms those providers maintain as part of their own compliance programmes.

Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and hashed passwords. No method of storage or transmission is perfectly secure, so we cannot promise absolute security.

Children

The service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will remove it.

Changes to this policy

We may update this policy as the service changes. When we do, we will revise the “last updated” date above, and for material changes we will email account holders.

Contact

Questions about this policy or your data: contact@roomtreatment.diy.