Privacy policy

What we collect and why

• Roblox profile: signing in gives us your Roblox user ID, username, display name and profile picture. We use these to identify your account, sign you in and apply credits. We do not receive your Roblox password.
• Content you provide: saved chats, uploaded images, project briefs, asset plans and related activity. We store this to provide the features you use and let you return to your work.
• Usage records: credit grants, reservations, spending, model and tool names, token counts and timestamps. These support metering, error investigation and prevention of repeated sign-up bonuses or weekly refills.
• Technical information: cookies, request details, IP addresses, browser information and errors processed by our hosting and security providers to deliver and protect the service.
• Support: if you email us, we receive your address and message so we can respond.

We also collect public Roblox experience information, including names, creators, icons, player counts and historical observations, to provide analytics. This public dataset is separate from private connected-game analytics.

AI requests

Ask Romanum and Chats currently use DeepSeek. Sending a message sends its text, relevant conversation history, retrieved information and any images attached to that message to DeepSeek. In a project chat, the project brief is also included. Images are resized and their embedded metadata is removed before they are stored and sent.

Chats saves the conversation and its attachments. Ask Romanum does not create a saved chat, but provider processing and credit usage records still apply. Saved chat images are not automatically sent again in later messages.

Project reference images stay in your private library. Choosing one in a chat copies it into that message; sending the message sends that copy to DeepSeek. Removing the library image does not remove copies already saved in chats.

Your linked game's private metrics are not currently available to the assistant. If you paste private metrics or other information into a message, that content is sent with the request. The game-sharing switch does not prevent this processing.

DeepSeek handles requests under its applicable terms. Romanum has not established a zero-retention or no-training arrangement with DeepSeek, so we do not make either promise. Avoid sending passwords, API keys, sensitive personal information or personal information about children in chats.

Connected games

Linking a game provides its universe ID and a Roblox API key. We encrypt the key in storage and use it to request the game's authorised aggregate analytics, such as daily players, session length, playtime, retention, revenue and payer conversion. This integration does not collect individual player identities.

Collect analytics controls future collection. Turning it off keeps previously collected records. Disconnecting removes the saved key; deleting a linked game also removes its saved metrics.

Help improve Romanum is off by default. It records whether your metrics may be included in platform-improvement analysis. No feature currently uses these shared metrics. Turning it off removes them from that access immediately. We record changes to these settings to keep a consent history.

Turning these settings off does not stop collection of information already public on Roblox. We will update the notice before introducing a new use of private metrics.

Service providers and overseas processing

Romanum uses the following providers to operate the service. They receive the information needed for their role and may also process operational records under their own policies.

• Netlify hosts the website and server functions, processing requests and application data.
• Heroku / Salesforce hosts our PostgreSQL database. The current database is in the United States.
• DeepSeek processes AI requests. DeepSeek is based in China and describes processing and storage there; AI content may therefore be processed in China.
• Cloudflare Turnstile checks for automated abuse. It processes information such as IP address, browser signals and the site being visited, including for improving bot detection.
• Roblox provides sign-in, experience information, authorised analytics and remotely loaded Roblox images.

Hosting, security and Roblox services operate internationally, including in the United States. Their networks and support operations may process information in other countries. Data is not confined to Australia.

Romanum does not sell your personal information. We may disclose information when required by law or when necessary to address fraud, security incidents or legal claims.

Cookies

Romanum uses a guest cookie to keep a guest's credits and work together, a session cookie to keep you signed in, and a short-lived cookie to complete Roblox sign-in. Their maximum lifetimes are one year, 30 days and 10 minutes respectively. Browser settings let you remove or block them, though sign-in and guest continuity may then stop working.

Cloudflare may process browser storage or cookies for its security checks. Romanum does not currently run advertising cookies or third-party marketing analytics.

Storage and deletion

Saved account content stays in the application database until you delete it or your account. There is no automatic expiry for inactive accounts or guest content at present. Access to private records is checked against the account or guest identifier; game API keys are encrypted separately.

Deleting your account removes its profile, saved chats and images, projects and plans, linked game keys, private metrics and consent history from the active database. All its sign-in sessions are revoked. A request already sent to an AI provider cannot be recalled by deleting the account.

We retain credit, model and tool-usage records for accounting, resolving outstanding usage and preventing abuse. They include an internal owner identifier and, for sign-up grants and weekly refill records, your Roblox user ID. We also retain a closure marker containing internal account identifiers and the deletion date so stale requests cannot recreate your content. These records do not contain your chat text or images.

There is currently no automatic expiry for these retained records. You can ask us to review their continued retention. Provider logs, provider-held AI requests and backup copies follow separate retention processes; account deletion does not immediately erase them. We do not promise a fixed deletion deadline for those copies.

Public Roblox history is retained independently. If unfinished creation work or another user's licensed asset copy prevents automatic deletion, the request leaves your account intact and directs you to support for review. Returning after deletion creates a new account; old credits and the sign-up bonus are not restored.

Your choices

You can browse public analytics without signing in, use game collection and sharing controls in your profile, and download or delete your account through Your data.

For access, correction, guest-data deletion or another privacy request, email [email protected]. We may need to verify that the records belong to you, but do not send passwords, API keys or identity documents with your initial request. Roblox profile details refresh when you sign in again after changing them on Roblox.

Romanum is a development tool. We do not request a date of birth or collect children's player profiles through connected analytics. A parent or guardian can contact us about a child's account or information.

Contact and complaints

Email [email protected] with your request or concern. We will review it, seek any details needed to investigate and explain the outcome. If Australian privacy law applies and you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

We will update this page when our practices change, with the date shown above. A new purpose for optional private-data sharing will have an updated notice before it is enabled.