Legal · Privacy

Privacy Policy

Last updated: 9 July 2026

This Privacy Policy explains how Ruangmu (“Ruangmu”, “we”, “us”), handles personal data across our marketing website, our client dashboard, and the room-visualizer widget that our business clients embed on their own websites.

It covers two groups: (1) business clients who create a Ruangmu account, and (2) customers who use a client’s embedded widget to preview products in a room. Where a customer uses a client’s widget, that business is the primary controller of the customer’s data and Ruangmu processes it on their behalf.

1.Who we are

Ruangmu is a self-serve room-visualizer service. For any privacy question or request, contact us at hello@ruangmu.com.

2.Information we collect

From business clients when you create and use an account:

  • Account details: your name, business name, email address, and a securely hashed password.
  • Catalog content: your product data and the swatch/product images and logos you upload.
  • Configuration: your widget settings, plan, and subscription status.
  • Billing information: processed by our payment provider; we do not store full card details.
  • Support and other communications you send us.

From customers when you use a client’s embedded widget:

  • Room photos you upload (or a sample room you select) — used to generate a preview (see section 3).
  • Contact details you choose to submit through a lead form (such as your name and phone, email, or WhatsApp).
  • Usage events, such as which products you preview or tap, to produce analytics for the business.

Automatically, for everyone: essential cookies, server logs, and a pseudonymous visitor identifier derived from your IP address and browser. That identifier is used only to count unique visitors — it is not used to personally identify you.

3.AI processing of uploaded photos

When a customer uploads a room photo (or selects a sample room) and chooses a product, that image together with the product’s reference image is sent to Google’s Gemini AI service to generate the preview.

Uploaded room photos are processed transiently to create the preview and are not retained by us afterwards. The generated preview images are stored (cached) so they can be shown again without re-generating.

Previews are AI-generated approximations and may not exactly match the real product’s colour, texture, scale or finish.

4.How we use information

  • To provide and operate the service, including generating room previews.
  • To deliver captured leads and usage analytics to the business client whose widget was used.
  • To send transactional emails such as account welcome and password-reset messages.
  • To process subscriptions and payments.
  • To secure the service, prevent abuse and fraud, and comply with legal obligations.

5.How we share information

  • With the business client: customer leads and aggregated analytics are shared with the business whose widget generated them.
  • With service providers (subprocessors) who help us run the service: Google (Gemini AI, Cloud Storage, and hosting), Resend (transactional email), our payment provider, and our database/hosting providers — each only for the purpose of providing the service.
  • For legal reasons: where required by law, regulation, or valid legal process.
  • In a business transfer: as part of a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal data.

6.International data transfers

Some of our service providers (for example Google) may process data on servers located outside your country, including outside Indonesia. Where this happens, we rely on the safeguards those providers offer for cross-border transfers.

7.How long we keep information

  • Uploaded room photos: not retained after the preview is generated.
  • Generated previews: kept while the relevant client account is active; regenerable cached copies may be purged periodically.
  • Leads: retained and delivered to the business client, who then controls their retention.
  • Account and catalog data: kept while your account is active and as required for legal, tax, or accounting purposes.
  • After account closure: we delete or anonymise personal account data and catalog content we no longer need to provide the service, except where we must keep limited records (for example billing, tax, fraud prevention, or legal claims) for a longer period.

8.Closing or deleting your account

If you are a business client and want to close or delete your Ruangmu account, email us at hello@ruangmu.com from the address registered on the account (or contact us in another way we can reasonably verify). There is no in-product delete button yet; support handles these requests.

We will process verified closure requests within a reasonable time, disable access to the dashboard and public visualizer for that account, and delete or anonymise associated personal data and catalog content as described above, except where retention is required by law or legitimate operational needs.

Customers who used a client’s widget and want their lead or personal data removed should contact that business first; they control that data. You may also contact us at hello@ruangmu.com and we will help where we can.

9.Your rights

Depending on your location and applicable law — including Indonesia’s Personal Data Protection Law and, where relevant, the GDPR — you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent.

To exercise these rights — including asking us to delete personal data or close a client account — contact us at hello@ruangmu.com. If you are a customer who used a business’s widget, you may also need to contact that business directly, as they control the data collected through their widget.

10.Cookies

We use only essential cookies — for example, the session cookie that keeps you signed in to the client dashboard. The widget uses the minimal browser storage needed to function. We do not use third-party advertising or cross-site tracking cookies.

11.How we protect information

We protect data with measures including hashed passwords, encrypted transport (HTTPS), and access-controlled private storage for images. No method of transmission or storage is completely secure, but we work to protect your information and respond to incidents responsibly.

12.Children

Ruangmu is a business tool and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13.Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above, and for material changes we will provide a more prominent notice where appropriate.

14.Contact us

Questions or requests about this policy or your data can be sent to hello@ruangmu.com.

Room previews shown in the Ruangmu widget are AI-generated and for visualization only; actual product appearance may vary.