Effective date: 7/30/2026
Huespace, Inc. (referred to as "Aroom"), prioritize your privacy. To understand how we handle your personal data, please carefully read and familiarize yourself with this Privacy Policy. By accessing or using our Services in any way, you acknowledge that you agree to the practices and policies outlined in this document. Furthermore, you consent to our collection, use, and sharing of your information as described herein.
It is important to note that your use of Aroom's Services is always subject to our Terms of Use, which incorporates this Privacy Policy. If any terms used in this Policy are not defined, please refer to the definitions provided in the Terms of Use.
If you wish to have a printed copy of this Privacy Policy, you can click here to obtain one. Alternatively, if you have a disability and require this Privacy Policy in an alternative format, please contact us at support@aroom.io.
What this Privacy Policy Covers
This Privacy Policy outlines how we handle Personal Data that we collect when you use or access our Services. The term "Personal Data" refers to any information that specifically identifies or is related to an individual, including what may be referred to as "personally identifiable information" or "personal information" according to relevant data privacy laws. It's important to note that this Privacy Policy does not apply to the practices of companies that we do not own or control, nor does it cover individuals whom we do not manage.
This Privacy Policy also covers End Users — individuals who exchange messages through a telephone number that a business customer uses on our Messaging Feature, or whose conversations are recorded or transcribed using our features, even if they do not have an Aroom account. This includes customers, subcontractors, vendors, and other project contacts of a business customer. Where we process an End User's Personal Data on behalf of a business customer, that customer determines the purposes of the processing, and End Users should direct requests about that data to the customer they were communicating with. See the "Messaging, Recording, and Transcription" section below.
Personal Data
Categories of Personal Data We Collect
Here are the categories of Personal Data we collect and have collected over the past 12 months:
Profile or Contact Data: Examples: First and last name, email, address, unique identifiers such as passwords Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Phone Number and Mobile Contact Data: Examples: Mobile and landline telephone numbers, SMS consent and opt-in/opt-out status Shared with: Service Providers only. We do not share telephone numbers or SMS consent data with Advertising Partners, Business Partners, or affiliates for marketing or promotional purposes.
Communications Data: Examples: SMS and MMS message content, files shared through the Services, message metadata (date, time, numbers involved), recordings and transcripts where those features are used, message delivery and opt-out status, opt-in records Shared with: Service Providers only
Payment Data: Examples: Payment card type, last 4 digits of payment card, billing address, phone number, and email Shared with: Service Providers (specifically our payment processing partner)
Commercial Data: Examples: Purchase history, consumer profiles Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Device/IP Data: Examples: IP address, device ID, domain server, type of device/operating system/browser used to access the Services Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Web Analytics: Examples: Web page interactions, referring webpage/source, non-identifiable request IDs, statistics associated with device/browser interaction Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Social Network Data: Examples: Email, user name, IP address, device ID Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Consumer Demographic Data: Examples: Age/date of birth, zip code, gender, race, ethnicity Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Professional or Employment-Related Data: Examples: Resume, job title, job history, performance evaluations Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Non-Public Education Data: Examples: Grades or transcripts, student financial information, student disciplinary records Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Geolocation Data: Examples: IP-address-based location information, GPS data Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Biometric Data: Examples: Fingerprints, faceprints, iris scans Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Sensory Data: Examples: Photos, videos, or recordings of your environment Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Health Data: Examples: Medical conditions, weight, health or exercise activity monitoring Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Inferences Drawn From Other Personal Data Collected: Examples: Profiles reflecting user attributes, profiles reflecting user behavior Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Other Identifying Information that You Voluntarily Choose to Provide: Examples: Identifying information in emails or letters you send us Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Financial Data You Chose to Provide: Examples: Credit score, mortgage provider, mortgage interest rate Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Home Data You Chose to Provide: Examples: Home inspections, interior and exterior home photographs, appliance brand and model numbers Shared with: Service Providers, Advertising Partners, Business Partners, Parties You Authorize, Access or Authenticate
Sources of Personal Data
We collect Personal Data about you from the following categories of sources:
You: When you provide information directly to us. When you create an account or use our interactive tools and Services. When you voluntarily provide information in free-form text boxes, surveys, or questionnaires. When you contact us via email or other means. When a business you work with adds you as a project contact and confirms it has permission to message you. When you exchange messages through a telephone number used on our Messaging Feature — including if you are an End User without an Aroom account.
Automatic collection through your use of the Services: When you use the Services, certain information is collected automatically. Through Cookies and similar tracking technologies. If you use a location-enabled browser, we may receive information about your location. When you download and install certain applications and software provided by us. When messages are sent through the Messaging Feature, we automatically generate message logs, and where recording or transcription features are used, recordings and transcripts.
Our Business Customers: Businesses that use our Services may provide us with the name and telephone number of an End User in order to enable communications, along with the record of that End User's opt-in.
Public Records: Information obtained from government or other public sources.
Third Parties: Vendors: We may work with analytics providers or other vendors who assist us in analyzing user interactions with the Services or provide customer support. Telecommunications Providers: Our messaging and voice carriers and platform providers supply delivery status, call metadata, and related technical information. Advertising Partners: Information about you may be received from vendors who help us with marketing or promotional services related to our websites, applications, products, Services, advertisements, or communications. Social Networks: If you provide your social network account credentials or sign in to the Services through a third-party site or service, certain content and information from those accounts may be transmitted into your account with us.
Please note that the specific sources of Personal Data collected may vary depending on the nature of your interactions with our Services and the features you use.
Our commercial or business purposes for collecting Personal Data include:
Providing, Customizing, and Improving the Services: Creating and managing user accounts or profiles. Processing orders, transactions, and billing. Fulfilling your requests for products, services, or information. Providing support and assistance for the Services. Improving the Services through testing, research, analytics, and product development. Personalizing the Services, website content, and communications based on your preferences. Fraud protection, security, and debugging. Other business purposes as stated during data collection or as required by applicable data privacy laws.
Marketing the Services: Marketing and selling the Services. Displaying advertisements, including interest-based or online behavioral advertising. We do not use telephone numbers, SMS consent data, or Communications Data for these purposes.
Corresponding with You: Responding to your correspondence, inquiries, and requests. Contacting you when necessary or as requested. Sending you information about Aroom or the Services. Sending emails and communications based on your preferences or interests. Coordinating and managing orders and projects, including enabling messaging between participants through a provided telephone number and through an AI assistant participating in group conversations. Sending transactional and operational notifications and reminders, including order and delivery status updates, dispatch and arrival notices, scheduling confirmations and changes, and appointment or task reminders. Logging and storing messages sent through the Messaging Feature, and processing recordings and transcripts where those features are used, for quality assurance, safety, security and fraud prevention, support, dispute resolution, and legal compliance.
Meeting Legal Requirements and Enforcing Legal Terms: Fulfilling our legal obligations under applicable laws and regulations. Complying with court orders or legal processes. Preventing, detecting, and investigating security incidents or potentially illegal activities. Protecting the rights, property, or safety of you, Aroom, or others. Enforcing agreements with you. Responding to claims of content violations or resolving disputes. Maintaining records of consent and opt-out requests in order to honor them.
We will not collect additional categories of Personal Data or use the collected Personal Data for materially different, unrelated, or incompatible purposes without providing you with notice.
How We Share Your Personal Data
We may share your Personal Data with the following categories of service providers and other parties:
Service Providers: Hosting, technology, and communication providers. Telecommunications and messaging providers that route calls and messages. Security and fraud prevention consultants. Analytics providers. Support and customer service vendors. Product fulfillment and delivery providers.
Business Partners: Businesses that you have a relationship with. Companies we partner with to offer joint promotional offers or opportunities.
Parties You Authorize, Access, or Authenticate: Third parties you access through the services. Social media services. Other users.
Legal Obligations: We may share your Personal Data with third parties when it is necessary to fulfill legal obligations, respond to legal processes, or enforce legal terms. This may include sharing information with law enforcement agencies, government authorities, or other third parties as required by applicable laws and regulations.
Business Transfers: In the event of a merger, acquisition, bankruptcy, or any other business transaction, your Personal Data may be transferred to a third party who assumes control of our business, either in whole or in part. We will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies.
Mobile Information. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All of the categories of sharing described above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We share mobile numbers only with the service providers that are necessary to deliver the messages and calls you have consented to receive (such as our messaging and telephony providers), and only for that purpose. We do not sell mobile numbers or SMS consent data, and we do not share them for cross-context behavioral advertising.
We may aggregate, de-identify, or anonymize the Personal Data we collect in a way that it no longer personally identifies individuals. This transformed data may be shared with third parties for various lawful business purposes, such as conducting analysis, improving our services, and promoting our business. However, we will not share this data in a manner that could re-identify you as an individual.
Messaging, Recording, and Transcription (applies only if you use these features)
This section applies only where a business customer has enabled our Messaging Feature and you exchange messages through a telephone number we provide, or where recording or transcription features are used. If you do not use these features, this section does not apply.
How messaging works. We provide a telephone number to a business customer, who uses it to exchange text messages with its customers, subcontractors, vendors, and other project contacts through our application. An AI assistant may participate in group conversations the business has added it to, and may send messages within those conversations. The AI assistant does not start conversations on its own and does not place calls. Messages and files are transmitted through and stored on our platform so the business can view the history in the application.
What we collect. Message and file content; message metadata (date, time, numbers involved); participants' telephone numbers; delivery and opt-in/opt-out status; and, where recording or transcription features are used, recordings and transcripts.
AI participation, logging, and transcription. Messages sent through this feature are logged and stored by us and our service providers to deliver them, maintain the history in the application, and for quality assurance, security and fraud prevention, support, dispute resolution, and legal compliance. When an AI assistant is participating in a conversation, this is disclosed to participants. AI-generated transcriptions, summaries, and message drafts may be incomplete or inaccurate and should not be relied on for high-risk decisions.
Recording. Where a business customer uses recording features, that business is responsible for obtaining any consents required by law and for giving notice that a recording is taking place. Some states require the consent of all parties to a conversation. If you do not consent to being recorded, you may end the conversation or ask the business not to record.
How you were added. Businesses add project contacts they already work with and confirm they have permission to contact you at the number provided. You do not need to reply or confirm anything to begin receiving messages. At the start of messaging you receive a message identifying who is contacting you, noting that an AI assistant may take part, and explaining how to get help or opt out. We keep a record of the business's confirmation and of the disclosures you were shown.
Opting out. Reply STOP to any message to stop receiving messages, or HELP for assistance. Message and data rates may apply. Message frequency varies. Carriers are not liable for delayed or undelivered messages. When you opt out we stop messaging you and keep a record of the opt-out so we can continue to honor it. We will not resume messaging you unless you ask us to (for example, by replying START).
Sharing. Message content, files, telephone numbers, recordings, transcripts, and opt-in records are shared only with the service providers necessary to deliver and support the service, and with the business customer the communications relate to. This data is never shared with advertising partners or ad networks, never used for interest-based advertising, and not sold or shared for cross-context behavioral advertising.
If you do not have an Aroom account. We process your data on behalf of the business you were communicating with. To exercise rights over that data, contact that business; you may also contact us at support@aroom.io and we will assist or direct your request.
Tracking Tools, Advertising and Opt-Out
The Services utilize Cookies and similar technologies to enhance your browsing experience, analyze usage patterns, and improve our Services. Cookies are small text files that are placed on your device when you access our Services. We may also receive information from third parties who have placed their own Cookies on your device. Please note that our Services do not currently respond to "Do Not Track" requests from your browser.
We use the following types of Cookies:
Essential Cookies: These Cookies are necessary for providing you with requested features or services. Disabling these Cookies may limit certain functionalities of the Services.
Functional Cookies: These Cookies record your preferences and settings, helping us personalize your experience and remember your choices when you return to our Services.
Performance/Analytical Cookies: These Cookies provide insights into how visitors use our Services, such as the number of visitors, pages viewed, and time spent on each page. They also help us measure the performance of our advertising campaigns.
Retargeting/Advertising Cookies: These Cookies track your online activity and interests to deliver relevant advertisements based on your preferences.
To manage Cookies, you can adjust your browser settings to accept or reject them. Most browsers offer options to disable or control Cookie acceptance. You can also delete existing Cookies on your device. However, please note that disabling Cookies or deleting them may impact certain preferences and functionalities of our website. Visit the "preferences" or "options" section of your browser's menu to explore available Cookie settings.
For more information on Cookies, including how to manage and delete them, you can visit http://www.allaboutcookies.org/. Additionally, if you wish to opt out of Google's use of Cookies, you can visit the Google advertising opt-out page at www.google.com/privacy_ads.html or use the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/.
Information about Interest-Based Advertisements:
We may display advertisements through the Services and work with third-party ad networks, including ad servers, agencies, technology vendors, and research firms, to deliver these advertisements. These ads, known as "Interest-Based Ads," are targeted to users who fit specific profile categories or exhibit certain preferences or behaviors. The information used for Interest-Based Ads, including Personal Data, may be provided by you or derived from user usage patterns on the Services and other third-party services. This information is collected by tracking users' activities over time, even when they leave the Services.
Exclusion for messaging data. Telephone numbers, SMS consent and opt-in/opt-out status, message content, files, message metadata, recordings, and transcripts are excluded from Interest-Based Advertising. We do not use this data to build advertising profiles or audience segments, do not use it for retargeting or lookalike modeling, and never provide it to ad networks, ad servers, data brokers, or other advertising partners. Advertising and retargeting Cookies are not used to collect this data, and this data is not combined with data used for Interest-Based Ads.
To achieve this, we or our service providers may use Cookies, including web beacons, to deliver advertisements from ad networks. Web beacons enable ad networks to provide aggregated auditing, research, and reporting, as well as serve targeted ads to you when you visit other websites. Ad networks can view, modify, or set their own Cookies on your browser, similar to when you request a web page from their site.
We comply with the self-regulatory principles for online behavioral advertising set forth by the Digital Advertising Alliance (DAA). The DAA, along with the Network Advertising Initiative (NAI), has established a self-regulatory program to give consumers better understanding and control over ads that are tailored based on their online behavior across various websites. To make choices regarding Interest-Based Ads and opt-out of receiving behaviorally targeted ads from participating organizations, you can visit the consumer opt-out pages provided by the DAA or NAI. These pages can be found at http://www.networkadvertising.org/choices/ or www.aboutads.info/choices.
Data Security and Retention:
We employ various physical, technical, organizational, and administrative security measures to safeguard your Personal Data against unauthorized access, use, and disclosure. These measures are based on the type of Personal Data and how we process it. It is also important for you to take steps to protect your data, such as selecting and safeguarding your password, limiting access to your device, and signing out after using your account. However, please note that no method of data transmission or storage over the internet is entirely secure.
We retain your Personal Data for as long as you have an active account with us or as necessary to provide you with our Services. In certain cases, we may retain Personal Data for longer periods if required to comply with legal obligations, resolve disputes, collect fees, or as permitted or required by applicable laws. We may also retain information in an anonymous or aggregated form that does not personally identify you.
For messages, files, recordings, and transcripts created through these features, we retain this data for the duration of the associated project and the business customer's use of the service, and for a reasonable period thereafter as needed for record-keeping, dispute resolution, and legal compliance. Because End Users do not hold accounts with us, we retain their data on behalf of the relevant business customer for the same period and delete or de-identify it when it is no longer needed for these purposes, subject to applicable legal retention requirements. If an End User opts out (replies STOP), we stop sending messages and retain a record of the opt-out as needed to continue honoring it.
Personal Data of Children:
As stated in our Terms of Use, we do not knowingly collect or solicit Personal Data from children under the age of 13. If you are under 13 years old, please refrain from registering for or using our Services or providing any Personal Data to us. If we become aware that we have collected Personal Data from a child under 13, we will promptly delete such information. If you believe that a child under 13 has provided Personal Data to us, please contact us at support@aroom.io.
California Resident Rights:
If you are a California resident, you have certain rights regarding your Personal Data as described in this section. To exercise these rights, please refer to the "Exercising Your Rights" section below. If we are processing your Personal Data as a service provider, you should contact the entity that initially collected your Personal Data to address your rights concerning that data.
In case of any conflicts between this section and other parts of this Privacy Policy, the provisions that offer greater protection for Personal Data will prevail. If you have any questions about this section or your rights as a California resident, please contact us at support@aroom.io.
Access:
You have the right to request information about the Personal Data we have collected and used about you in the past 12 months. Upon your request, we will provide the following details: Categories of Personal Data collected about you. Sources from which your Personal Data was collected. Business or commercial purpose for collecting or selling your Personal Data. Categories of third parties with whom we have shared your Personal Data. Specific pieces of Personal Data collected about you.
If we have disclosed your Personal Data to third parties for a business purpose in the past 12 months, we will identify the categories of Personal Data shared with each category of third-party recipient. If we have sold your Personal Data in the past 12 months, we will identify the categories of Personal Data sold to each category of third-party recipient.
Deletion:
You have the right to request the deletion of the Personal Data we have collected about you. However, certain exceptions apply under the CCPA, such as retaining your Personal Data to provide you with Services, complete transactions, or comply with legal obligations. If your deletion request falls under these exceptions, we may deny your request.
Correction:
You have the right to request that we correct inaccurate Personal Data we maintain about you, taking into account the nature of the data and the purposes of processing.
Sale and Sharing:
We do not sell or share telephone numbers, SMS consent data, or Communications Data for cross-context behavioral advertising. To the extent our use of advertising Cookies constitutes "sharing" of other categories of Personal Data under the CCPA, you may opt out by contacting us at support@aroom.io or by using the "Do Not Sell or Share My Personal Information" link on our website. We honor opt-out preference signals, including Global Privacy Control, where required.
Exercising Your Rights:
To exercise your rights, you or your Authorized Agent must send us a request that (1) provides enough information to verify your identity, and (2) describes your request in sufficient detail. Requests meeting these criteria will be considered Valid Requests. We will only use Personal Data provided in a Valid Request to verify your identity and fulfill your request. You don't need an account to submit a Valid Request.
We will aim to respond to your Valid Request within 45 days of receipt. We won't charge a fee for making a Valid Request unless it is excessive, repetitive, or manifestly unfounded. If a fee is warranted, we will inform you beforehand.
You can submit a Valid Request via email at support@aroom.io. You may also authorize an Authorized Agent to act on your behalf by providing written permission, and we may request a copy of this permission from the Authorized Agent.
If we deny your request, you may appeal that decision by replying to our response or writing to support@aroom.io with the subject line "Privacy Request Appeal." We will respond to your appeal within the period required by applicable law and, if we deny the appeal, will provide information on how to contact your state attorney general.
Non-Discrimination:
We will not discriminate against you for exercising your CCPA rights. We won't deny you goods or services, charge different prices, provide lower quality, or take any adverse actions if you exercise your rights. However, we may offer different tiers of our Services with varying prices, rates, or quality levels based on the value of Personal Data we receive from you, as permitted by applicable data privacy laws.
Other State Law Privacy Rights:
Residents of States with Comprehensive Privacy Laws: If you are a resident of a state with a comprehensive consumer privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, or Rhode Island — you may have the right to confirm whether we process your Personal Data, access it, correct it, delete it, obtain a portable copy, and opt out of targeted advertising, the sale of Personal Data, and certain profiling. To exercise these rights, contact us at support@aroom.io. You may appeal a denial as described above.
Sensitive Data: Where we process categories of data that are treated as sensitive under applicable state law — which may include biometric data, precise geolocation, health data, and racial or ethnic origin — we do so only with your consent where consent is required, and only for the purposes described in this Policy.
California Resident Rights (Shine the Light): Under California Civil Code Sections 1798.83-1798.84, California residents have the right to request that we prevent the disclosure of their Personal Data to third parties for those third parties' direct marketing purposes. To make such a request, please contact us at support@aroom.io.
Nevada Resident Rights: If you are a Nevada resident, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at support@aroom.io with the subject line "Nevada Do Not Sell Request" and providing your name and email address associated with your account. Please note that we do not currently sell Personal Data as defined in Nevada Revised Statutes Chapter 603A.
Recording and Automated Communications: Some states require the consent of all parties to a conversation before it may be recorded. Where a business customer uses recording features on our platform, that business is responsible for obtaining required consents and providing notice. Where an AI assistant participates in a conversation, that participation is disclosed to participants.
Changes to this Privacy Policy:
We may make changes to this Privacy Policy in order to improve our Services. We will notify you of any such changes by posting a notice on the Aroom website, sending you an email, or using other means of communication. Please note that if you have chosen not to receive legal notice emails from us or have not provided us with your email address, the updated Privacy Policy will still apply to your use of the Services. It is your responsibility to read and understand any legal notices. By continuing to use the Services after changes to the Privacy Policy have been posted, you agree to the updated policy. The use of information we collect is governed by the Privacy Policy in effect at the time of collection.
Contact Information:
If you have any questions or comments about this Privacy Policy, how we collect and use your Personal Data, or your choices and rights regarding such collection and use, please feel free to contact us at: Website: www.aroom.io Email: support@aroom.io