Privacy Policy

Version 1.0 · Effective 29 July 2026

This policy explains how Canvas Media Limited (NZBN 9429050291939), trading as Rooam ("we", "us"), handles personal information for the Rooam app, the rooam.app website, and our photography service. We follow the Privacy Act 2020. Rooam is a business tool for real-estate professionals; most information we handle is about our customers, though property photos can incidentally include other people.

1. What we collect. Account details (your name, email address and any profile details you add); the photos you upload and the edited versions we produce, plus your selections and edit outcomes; the property address for each shoot — if you allow location access we suggest it from where you're standing, and those coordinates are processed on your phone rather than sent to us; payment information (handled by Stripe — we never see your full card number, only the card brand and last four digits, plus your billing records); how the app and site are used, including device information and the analytics described in section 8; bug reports you choose to send — your description, a screenshot of the screen you were reporting from, technical logs with credentials removed, and a list of recent screens and actions; and messages you exchange with us.

2. How we use it. To provide the service (select, enhance, edit, store and deliver your photos); to handle billing and support; to keep the service secure and prevent misuse; to improve the service, including training our own image-quality models; to meet legal obligations; and, only with your consent, to send marketing.

How our model training works. We improve Rooam by learning from before-and-after image pairs — what a photo looked like when you uploaded it, and the enhancement or edit our system produced. Our models learn general image-quality and editing patterns (framing, lighting, colour, cleanup); they are not used to identify, profile, or learn about any person. People who happen to appear in a property photo are of no interest to us, and we separate training material from your account identity.

No sale. We don't sell your personal information to third parties for their own marketing or advertising. If the Rooam business is restructured, merged, or acquired, your information may pass to the successor as part of that business and stays covered by a policy at least as protective as this one.

3. Who we share it with. We use trusted providers to run the service and share information with them only to provide it, under contractual and technical safeguards: cloud hosting and storage, AI image-processing providers, Stripe (payments), analytics and bug-reporting tools, and our email provider. Some providers process information outside New Zealand (including the United States, Australia and Europe); where information leaves New Zealand we take reasonable steps, as IPP 12 of the Privacy Act requires, to keep it protected by comparable safeguards.

4. Property photos — other people. Our customers are real-estate professionals who arrange photography with the property owner. The agent is responsible for the consents needed for the photography and its use. If you're an owner or occupier with a question, your agent is the fastest route; you can also contact us at hello@rooam.app and we'll respond as the Act requires.

5. How long we keep it, and deleting it. We keep your account and project content for as long as we need it to run and improve Rooam. You can delete your account and its content at any time — using "Delete account" in the app, or by emailing hello@rooam.app — and we'll remove it from the live service, including any stored training copies linked to your account. What survives deletion: (1) billing and transaction records the law requires us to hold, for tax; and (2) what our trained models have already learned — they learn general editing patterns and don't store or reproduce your photos.

6. Security. We work to protect your information using measures such as encryption in transit, access controls on our systems, short-lived links for photo delivery, and server-side management of secrets. No online service can promise perfect security, but if a privacy breach is likely to cause serious harm we'll notify the Office of the Privacy Commissioner and affected people, as the Privacy Act 2020 requires.

7. Your rights. You can ask to access or correct the personal information we hold, or to delete it (subject to legal retention). Contact our Privacy Officer at hello@rooam.app; we respond within 20 working days. If you're not satisfied you can contact the Office of the Privacy Commissioner (privacy.org.nz).

8. Cookies, analytics and bug reports. Our website uses essential sign-in and session storage, and we don't use advertising or cross-site tracking cookies — the only non-essential tooling is the analytics described here. In the app and on the site we use product analytics (PostHog) to understand usage and fix problems: screens and pages viewed, actions taken — including the text of buttons and labels you tap, which can include details like a property address — feature usage, errors, performance timings and device information, linked to your account so we can investigate problems you report. The app does not record your screen as you use it. On the website, some sessions are recorded as session replay to help us diagnose problems; replay is configured so that typed text is masked and images are replaced with placeholders. If you report a problem in the app, your report (via Shake, our bug-reporting tool) includes your description, a screenshot of the screen you were reporting from — shown to you in the report before you send it — technical logs with credentials removed, and a list of recent screens and actions. Nothing is sent until you choose to submit. If you'd like your account excluded from analytics or session replay, email hello@rooam.app and we'll opt you out.

9. Children. The service is for business use by people 18 and over. We don't knowingly collect information from children.

10. Changes and contact. We may update this policy; material changes will be notified in the app or by email. Privacy Officer — Canvas Media Limited (trading as Rooam), Level 2, 83 Victoria Street, Christchurch Central, Christchurch 8013, New Zealand · hello@rooam.app.