ROMY is a personal styling service operated by ROMY ("ROMY", "we", "us"). This policy explains what we collect when you use ROMY, why we collect it, and what we will never do with it.
If you have a question about anything here, write to us at leah@byromy.co — a person reads it.
We collect four kinds of information, and you provide all of it deliberately. We do not buy data about you from third parties.
| What | Why we need it |
|---|---|
| Account details | Your name and email address, so you can sign in and we can reach you about your account. |
| Your conversation | The answers you give during ROMY's guided conversation — about your life, your routines, your wardrobe and how you want to feel in your clothes. This is the heart of the service; it is what makes a recommendation personal rather than generic. |
| Wardrobe & preferences | Pieces you tell us you own, sizes and fit notes, budget, brands you love and brands you'd rather we never suggest. |
| Connected accounts | If — and only if — you choose to connect Pinterest, the boards and pins on your own account. See section 3. |
We also keep basic technical records needed to run a website securely, such as server logs. We do not use advertising trackers or third-party analytics that follow you across other sites.
Connecting Pinterest is optional. ROMY works without it; it simply understands your taste faster with it.
When you choose to connect, you are taken to Pinterest's own sign-in and consent screen. You approve the connection there — we never see or store your Pinterest password. Pinterest then gives us an access token limited to the permissions you approved.
user_accounts:read), so we can show you which account is connected.boards:read), so you can see what ROMY is reading and how your inspiration is organised.pins:read), including their images and colours.One thing: we build your private taste profile — a moodboard of your own saved imagery, plus the recurring colours, textures and silhouettes we notice across your boards. That profile is shown back to you inside your account, and it filters the clothing ROMY recommends, so you get pieces consistent with what you already love rather than whatever is trending.
You can disconnect Pinterest from your ROMY settings at any time. When you do, we delete the access token and the Pinterest-derived imagery in your taste profile. You can also revoke ROMY's access from Pinterest's own settings, which stops any further access immediately. Our use of Pinterest data complies with the Pinterest Developer Guidelines and API Terms of Service.
We do not make decisions with legal or similarly significant effects about you using automated processing.
ROMY uses AI to interpret your answers, write its responses, and assemble your taste profile. To do that, the relevant parts of your conversation and profile are sent to our AI provider for processing and are returned to us as ROMY's reply.
Your content is not used to train AI models — not ours, and not our provider's. Our provider processes your data on our instructions to deliver the service and for no independent purpose of their own.
We do not sell your personal information, and we do not share it with advertisers or data brokers. We share it only with service providers who help us run ROMY, each bound to use it solely for that purpose:
| Provider | Role |
|---|---|
| Supabase | Database and secure storage of your profile and connection tokens. |
| Anthropic | AI processing of conversation and profile content, as described in section 5. |
| Our hosting provider | Serving the ROMY website. |
We may also disclose information if the law requires it, or to protect the rights and safety of our members and our service. If ROMY is ever involved in a merger or acquisition, we will tell you before your information becomes subject to a different privacy policy.
We keep your profile for as long as your account is open, because it is the service — a wardrobe built over years is worth more than one built over a week.
Connections to ROMY are encrypted in transit (HTTPS), and data is encrypted at rest by our database provider. Access tokens for connected accounts are held server-side only — they are never sent to your browser and never exposed in the app. Access to member data is limited to the people who need it to operate the service.
No service can promise perfect security. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
Wherever you live, you can ask us to:
Write to leah@byromy.co and we will respond within 30 days. We will not charge you or degrade your service for exercising these rights. Depending on where you live — for example in the EEA, the UK, or California — you may also have the right to complain to your local data protection authority.
ROMY is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
If we change this policy, we will update the date at the top of this page. If a change materially affects how we use your information, we will tell you directly before it takes effect, so you can decide whether to continue.
ROMY
leah@byromy.co
Questions, requests, and complaints all go to the same address, and a person answers them.