Decofy Privacy Policy

1. Introduction

Thank you for choosing Decofy, an AI-powered interior-design platform owned and operated by SERENDIPITY ONE INC ("we," "our," "us"). Protecting your privacy is fundamental to our mission. This Privacy Policy explains what information we collect, how we use and share it, the choices you have, and the safeguards we employ.

2. Scope & Product Overview

This Policy applies to every interface listed below (collectively the "Service"). Unless a future channel provides its own privacy notice, it is covered by this document.

3. Information We Collect

Permissions on Mobile Apps

We request OS-level permissions only when you invoke the related feature and you may revoke them at any time:

• Camera / Photo Library – capture or select a room photo.
• Microphone – optional voice notes saved to chat.
• Push Notifications – notify you when a render or product list is ready.
• Network State – pause uploads on cellular if you enable "Wi-Fi only".

4. How We Use Information

We process data to:

1. Provide the Service – generate design previews, retrieve product images, maintain chat context, fulfil purchases, and deliver support.
2. Improve & Personalise – train and tune models (only with opt-in), recommend products, and perform A/B tests.
3. Communicate – send transactional e-mails, service announcements, and marketing messages (opt-out at any time).
4. Ensure Security & Integrity – detect fraud, abuse, or violations of our Terms, and protect users.
5. Comply With Law – satisfy legal obligations and respond to lawful requests.

5. AI Content, Training & Service Providers

On-Demand Generation

Your images and prompts are processed solely to create the requested output and maintain conversation context.

Model Improvement

We do not use your images or personal data to train public models unless you explicitly opt-in ("Help improve Decofy").

Human Review

A security-cleared team may inspect the minimum data set required for debugging or quality assessment, under encryption and audit.

AI Service Providers

To deliver advanced AI features we share your input and generated output only as necessary with the following vendors under strict data-processing terms:

Your personal information, including any facial-keypoint data, is never used by these providers to train their general models.

6. How We Share Information

7. Cookies & Tracking Technologies

We employ cookies, web beacons, and similar tech. Essential cookies are required for authentication; analytics and advertising cookies load only after you give consent via our Cookie banner.

8. Data Retention

9. Your Rights & Choices

Depending on your region you may access, correct, delete, port, or restrict processing of your data. Submit any request via [email protected] or in-app Data Controls.

Residents of California, Colorado, Connecticut, Utah, Virginia and other U.S. states can exercise additional rights described in our U.S. State Privacy Addendum.

10. Security & Incident Response

We employ TLS in transit, AES-256 at rest, zero-trust segmentation, regular penetration tests, RBAC, and a bug-bounty program.

If a breach likely to result in harm occurs, we will notify regulators and affected users within 72 hours or sooner where required.

11. International Transfers

Data may be processed in Canada, the United States, and the European Union. Transfers rely on adequacy decisions, Standard Contractual Clauses, and encryption in transit and at rest.

12. Children's Privacy

You must be at least 13 years old (or the age of digital consent in your country, whichever is higher) to create a Decofy account. Users under 18 need parental permission.

13. Third-Party Links

We are not responsible for third-party privacy practices. Review their policies before submitting data.

14. Changes to This Policy

We may update this Policy; material changes will be announced at least 7 days in advance.

15. Contact Us

16. Supplemental Notice for California & Other U.S. Residents

We do not sell or share personal information for cross-context behavioural advertising. Exercise rights or submit a Do Not Sell/Share request via decofy.ai/ccpa-request or the in-app toggle.