Privacy Policy

Information we collect

Account information

• Your email address and your Rome address (for example, name@romeos.cc).
• A hash of your password, if you set one before Rome Cloud retired password sign-in. Rome Cloud no longer reads it.
• Your name, and your profile picture if the provider shares one, when you sign in with Google or Microsoft.
• The devices you sign in on, and a push notification token if you turn on notifications in the Rome mobile app.
• Your settings, invite codes you redeem, and messages you send us for support.

Billing information

Stripe processes payments for paid plans and credits. We receive your plan, subscription status, payment status, and transaction references. We do not receive or store your full card number.

Content in your Rome

Your Rome stores the messages and instructions you give it, the files you add, the apps and tools it builds, the results of the actions it takes, and what it saves as memory. On your own computer, this content is stored on that computer. On a hosted Rome, it is stored on the server we run for you in the region you choose.

Connected accounts

When you connect a service to Rome through Rome Cloud, such as GitHub, Slack, Shopify, or Google, Rome Cloud stores the OAuth tokens the service issues, encrypted. It also stores the permissions you granted and the connected account’s identifier, name, and email address. Rome Cloud passes a copy of the tokens to your Rome, which uses them to call the service when you or your agents ask it to.

Some other integrations in Rome run through an integration provider, which holds the credentials for those connections and relays the requests your Rome makes to them.

Email to your Rome address

Your Rome can send and receive email at its Rome address. An email provider handles that mail for us and delivers incoming messages to your Rome.

Messages between agents

Your Rome, a ChatGPT account you connect to Rome Cloud, and agents in accounts you link with can send each other messages through Rome Cloud. Rome Cloud stores each message’s text and attached data, whether your Rome runs on your own computer or is hosted, and deletes it seven days after it was sent.

Usage and technical information

We collect IP addresses, browser and device details, request logs, and error reports. Your Rome reports usage events to Rome Cloud, such as which features ran, how long they took, model names, and token counts. These events do not contain your prompts, your agents’ outputs, or your contacts. When you use Rome credits, we record each request’s model, token counts, and cost for billing.

A hosted Rome also sends us diagnostic logs, traces, and metrics, which we keep for 30 days to find and fix problems. They are meant to record what the software did, not your content, but a log message can include part of it, such as an error returned by a connected service.

When your Rome sends you a push notification, the notification includes a short summary of the message, and it is delivered through Apple’s or Google’s push service.

The Rome OS app for Shopify

The Rome OS app connects a Shopify store to the merchant’s Rome, so the merchant’s agents can manage products, inventory, and orders on the merchant’s instructions.

What Rome Cloud stores

When a merchant connects a store, Rome Cloud stores:

• an encrypted OAuth access token and refresh token for the store,
• the store’s myshopify.com domain and the store’s name,
• the store owner’s email address, as Shopify reports it, and
• the permissions granted and the time the store was connected.

When a merchant installs the app from Shopify, the store is connected before the merchant signs in to Rome Cloud. Until the merchant’s Rome takes the connection, Rome Cloud holds the same information, encrypted, for up to 30 minutes, or up to a day while the merchant sets up a Rome, and then deletes it.

Rome Cloud does not keep its own copy of the store’s customers, orders, or products. When the merchant’s Rome uses Rome credits, store data in a model request passes through Rome Cloud on its way to Microsoft Azure without being stored. Rome Cloud stores store data only when it appears in messages between agents, which it deletes after seven days, or in a hosted Rome’s diagnostic logs, which it deletes after 30 days. When the app is uninstalled, Rome Cloud keeps a record of the store’s domain and the time of the uninstall, so it can process Shopify’s deletion request for that store. The record holds nothing else about the store.

Permissions the app requests

How store data is used

The merchant’s Rome holds a copy of the store’s token. It calls the Shopify Admin API only when the merchant, or an agent acting on the merchant’s instructions, asks it to. Data that an agent reads from the store can be kept in that Rome’s conversation history. For example, order details can include a customer’s name, email address, and shipping address. That history stays in the merchant’s Rome, on the merchant’s computer or hosted Rome, under the merchant’s control. To do a task, Rome sends the relevant store data to the AI model the merchant’s Rome uses. A hosted Rome’s diagnostic logs can include parts of it, as described under Usage and technical information.

We use store data only to do what the merchant asks. We do not sell it, use it for advertising, or use it to train AI models. For the store’s customer data, we act as the merchant’s processor under the data processing terms in our Terms of Service.

How long store data is kept

• Rome Cloud deletes the store’s grant, meaning its tokens and connection record, when the merchant disconnects Shopify or uninstalls the app.
• Order and other store data that an agent reads stays in the Rome’s conversation history until the merchant deletes it or closes their Rome. When a merchant closes a hosted Rome, we delete it, including that history, within 30 days. On the merchant’s own computer, the merchant deletes it.

Disconnecting, uninstalling, and deletion

• Disconnecting Shopify in your Rome Cloud account settings deletes Rome Cloud’s copy of the token and asks Shopify to revoke it, which uninstalls the app from the store. The copy in your Rome stops working once the token is revoked. If Shopify cannot be reached at that moment, the app can stay installed. Uninstalling it from your Shopify admin always removes its access.
• Uninstalling the app from your Shopify admin also revokes the token. Shopify then notifies Rome Cloud, and Rome Cloud deletes its records of that store’s connection right away.
• Shopify sends a store deletion request (shop/redact) 48 hours after an uninstall. Rome Cloud deletes any of that store’s connection records that remain when it receives it.
• Rome Cloud keeps no customer records of its own, so it acknowledges Shopify’s customer data requests (customers/data_request) and customer deletion requests (customers/redact) without searching for the customer. Details of that customer can still be in the merchant’s Rome, in messages between agents for up to seven days, and in a hosted Rome’s diagnostic logs for up to 30 days. The merchant can delete those conversations or the hosted Rome. To find or delete a customer’s data in the places Rome Cloud holds it, the merchant can contact us at yunfan@romeos.io.
• A merchant can ask us to delete any other Rome data about them at yunfan@romeos.io.

How we use information

We use personal information to:

• create your account, sign you in, and keep your account secure,
• run your hosted Rome and connect your Rome to the services you choose,
• carry out the tasks you ask your Rome to do,
• process payments and track credit use,
• answer support requests and send you service messages,
• measure how Rome is used, and find and fix problems, and
• meet legal obligations and prevent fraud and abuse.

AI models

Your Rome sends the information a task needs to the AI model it uses. That can include your instructions, earlier messages, saved memory, file contents, and data read from connected services. If you use Rome credits, the request goes through Rome Cloud to Microsoft’s Azure OpenAI Service. If you use your own AI provider account or API key, the request goes to that provider under your agreement with them.

We do not use your content, data from your connected accounts, or Shopify store data to train AI models.

Google user data

When you sign in with Google, Rome Cloud asks Google for your basic profile: your Google account identifier, email address, name, and profile picture (the openid, email, and profile permissions). You can also connect Google to your Rome through Rome Cloud. That connection asks for the same three permissions, and Rome Cloud stores its tokens encrypted and passes a copy to your Rome, as described under Connected accounts. We use this information only to create your account, sign you in, identify the connected Google account, and show your name and picture in Rome.

Rome’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models. If a Rome feature later asks for more Google permissions, Google’s consent screen will list them, and we will update this policy first.

You can remove Rome’s access at any time from your Google Account connections.

How we share information

We do not sell personal information, and we do not share it for advertising.

We share personal information only:

• With service providers that run parts of Rome for us, and only as they need to. They provide hosting, databases, file storage, network services, AI models, payments, email, integrations, usage analytics, push notifications, diagnostic logs, and feature rollout. They include Microsoft Azure for AI models paid with Rome credits and Google Analytics for usage analytics. The current list is in our Terms of Service.
• With services you direct Rome to use. When your Rome sends an email, posts a message, or updates a store, the information goes to that service and its recipients.
• Publicly, when you choose to. Apps you publish to the Rome App Store appear under your publisher handle, and reviews you post appear with your display name or a masked email address. Anyone can see them.
• For legal reasons, when needed to comply with the law, respond to lawful requests, or protect the rights and safety of our users, the public, or us.
• In a business transfer, such as a merger or acquisition, under this policy’s protections.

Cookies and analytics

Rome Cloud sets a session cookie to keep you signed in, and the website stores your theme choice in your browser. You can block or delete cookies in your browser settings, but you will need the session cookie to sign in.

The romeos.cc website uses Google Analytics to count visits and see which pages people use. Google Analytics sets its own cookies to tell visits apart. Rome’s own interface, on a hosted Rome and in the Rome desktop app, also sends Google Analytics page views, with the page address, and events when you open an app or a widget renders. We use these to measure how Rome is used and to find hosted Romes that have gone unused, so we can stop them. Rome has no setting to turn these analytics off today. Blocking Google Analytics in your browser stops them on the website and on a hosted Rome.

Retention and deletion

• Account information is kept until you delete your account. Apps you published to the Rome App Store, and your publisher handle, stay published after you delete your account unless you ask us to remove them. Webhook events waiting to be delivered to your Rome can also remain in the delivery queue.
• Connected-account tokens are kept until you disconnect the service or delete your account. Shopify connections are also deleted when the app is uninstalled, as described above. If a service revokes a token on its side, the token stops working, but Rome Cloud keeps its stored copy until one of those happens.
• Content in your Rome is kept until you delete it or close your Rome. When you delete a hosted Rome, we delete its server and the content on it within 30 days.
• Billing records are kept as long as tax and accounting law requires.
• Messages between agents are kept for seven days.
• Diagnostic logs, traces, and metrics from hosted Romes are kept for 30 days. Other logs and usage records are kept for as long as we need them to run, secure, and improve Rome.

You can delete your account in your Rome Cloud account settings. Deleting your account disconnects your connected services and asks each service to revoke its tokens. You can also ask us to delete your data at yunfan@romeos.io.

Your choices and rights

You can choose which services to connect, disconnect them at any time, and delete your account. You can also ask us to give you a copy of your personal information, correct it, or delete it. Depending on where you live, you may have other rights, such as the right to object to or restrict processing, to move your data, or to appeal a decision we make about your request.

To make a request, email yunfan@romeos.io. We may need to confirm your identity before we act on it, and we will respond within the time the law requires. We will not treat you differently for exercising your rights.

If you are in the European Economic Area or the United Kingdom, we process personal information to perform our contract with you, for our legitimate interests in running and securing Rome, to comply with the law, and with your consent where we ask for it. You can also complain to your local data protection authority.

Security

Connections from your browser and apps to romeos.cc and to your hosted Rome’s address use TLS, and Rome’s calls to connected services such as Shopify use HTTPS. Rome Cloud’s database encrypts data at rest, and Rome Cloud also encrypts each OAuth token before storing it. No system is completely secure, so we cannot guarantee the security of your information.

International transfers

Amantru is based in the United States, and Rome Cloud processes account information there. A hosted Rome runs in the region you choose. Our service providers may process information in other countries, which may have data protection laws different from yours.

Children

Rome is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us at yunfan@romeos.io and we will delete it.

Changes to this policy

We will update this page when our practices change, and change the “Last updated” date above. If a change materially affects how we use your information, we will tell you by email or in Rome before it takes effect.

Contact us

Amantru, Inc.
Email: yunfan@romeos.io