Rhomdroid Platform and Software Products
Effective Date: February 2, 2026
Last Updated: February 7, 2026
Mastershop S.A., a Sociedad Anónima organized under the laws of the Republic of Argentina, operating as Rhomdroid ("we," "us," or "our"), is the data controller responsible for your personal data.
Contact:
Email: contact@rhomdroid.io
Website: rhomdroid.com
For data protection inquiries, contact us at: contact@rhomdroid.io
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use:
Collectively, these are referred to as the "Platform." This policy applies regardless of how you access the Platform, whether through Pulse, Loom, a web browser, mobile device, or API.
By using the Platform or any Software Product, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, you must not use the Platform or any Software Product.
If you install and use Loom, AI agents may access files and data on your local device as part of providing the service. This includes:
This data is transmitted to Cortex (our server) and forwarded to the applicable AI provider to continue the agent session. Local file contents accessed through Loom are stored as part of the conversation state for up to 30 days to enable session continuity and multi-turn interactions, after which they are automatically deleted.
You control what Loom can access by configuring your workspace boundaries and approving or denying tool requests.
We use the information we collect for the following purposes:
| Purpose | Lawful Basis (GDPR) |
|---|---|
| Account creation and management: creating your account, verifying your identity, managing your credentials | Performance of contract |
| Service delivery: operating the Platform and Software Products, processing your inputs, generating outputs | Performance of contract |
| AI processing: sending your inputs to AI model providers to generate content and responses | Performance of contract |
| Communication: sending account notifications, service updates, security alerts, and responding to your inquiries | Performance of contract / Legitimate interest |
| Security: detecting and preventing fraud, unauthorized access, and other malicious activity | Legitimate interest |
| Improvement: analyzing usage patterns to improve the Platform and Software Products | Legitimate interest |
| Legal compliance: complying with applicable laws, regulations, and legal processes | Legal obligation |
We do not use your personal data for purposes incompatible with those listed above without notifying you and, where required, obtaining your consent.
The Platform includes AI-powered agents that can reason, execute tools, and perform tasks on your behalf. When you interact with an agent:
This means your prompts, inputs, and (where Loom is connected) local file contents transit through Cortex and are processed by external AI providers. All data in transit is encrypted using TLS.
| Provider | Service | Data Processed |
|---|---|---|
| OpenAI | Text generation and processing | User prompts and inputs |
| Anthropic | Text generation and processing | User prompts and inputs |
| Google (Gemini) | Text generation and processing | User prompts and inputs |
| ElevenLabs | Voice and audio generation | User prompts and text inputs |
Each provider processes data under their own terms and privacy policies. We select providers that offer appropriate data protection commitments.
We do not use your data to train AI models. We use commercially reasonable efforts to ensure that our AI providers do not use your data for model training purposes, including maintaining applicable opt-out configurations where offered by those providers.
We endeavor to send only the data necessary for the requested AI operation. However, the nature of AI services means that the content you input is transmitted to the relevant provider for processing.
Conversation content (including your prompts, agent responses, and tool results) is stored on Cortex as part of your conversation state. This enables multi-turn interactions and session resumption. Conversation content is automatically deleted after 30 days of inactivity.
You may request deletion of your conversation history at any time by contacting us (see Section 15).
We do not sell your personal information. We share your information only in the following circumstances:
| Sub-Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database hosting | United States |
| Google Cloud Platform | Cloud infrastructure and file storage | United States / Global |
| OpenAI | AI model provider | United States |
| Anthropic | AI model provider | United States |
| Google (Gemini) | AI model provider | United States |
| ElevenLabs | AI voice generation | United States |
We may disclose your information if required by law, regulation, legal process, or governmental request.
If Rhomdroid is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We may share your information for other purposes with your explicit consent.
Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required by applicable law (including GDPR), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
| Data Category | Retention Period |
|---|---|
| Account information | Duration of active account |
| User Content | Duration of active account; deleted within 90 days of termination |
| Conversation content | Up to 30 days from last activity |
| Session metadata | Up to 12 months |
| Usage and log data | Up to 12 months |
| Communications | Up to 24 months |
We implement reasonable technical and organizational measures to protect your personal information, including encryption of passwords, TLS/SSL for data in transit, secure cloud infrastructure with access controls, and regular review of security practices.
You have the right to access, correct, and delete your personal data held in public or private databases, free of charge, at intervals of no less than six months.
Contact us at: contact@rhomdroid.io. We will respond within 30 days.
We use essential cookies for authentication and session management. We do not use cookies for advertising or behavioral targeting. You can manage cookie preferences through your browser settings.
The Platform is not intended for individuals under 18. We do not knowingly collect personal information from children.
Business entities requiring a DPA under GDPR Article 28 may request one at contact@rhomdroid.io.
We may update this policy from time to time. Material changes will be communicated at least 30 days before taking effect via notice on the Platform or email.
Mastershop S.A. (operating as Rhomdroid)
Email: contact@rhomdroid.io
Website: rhomdroid.com