Who is responsible for your information?
Keroo is operated by SMARTDIRECTORIES LTD (company number 16672589), whose registered office is 128 City Road, London, United Kingdom, EC1V 2NX. We are the data controller. Contact us at hello@keroo.co.uk.
What we collect
- Your email address and the answers in your organisation brief.
- Photographs and measurement sketches that you upload.
- Generated designs, recommendations and shopping-list information.
- Order, payment-status, refund and customer-support records. Keroo does not receive or store your full card details.
- Technical and security information needed to operate the service, such as request logs and secure-link records.
- Aggregated, cookieless website usage and performance information provided by Vercel.
Please avoid uploading photographs containing people, identity documents, financial information or anything else that is not needed to design the space.
How and why we use it
We use your brief and images to provide the service you ordered, create and deliver your design, take payment, provide support and handle a retry or refund. This processing is necessary to perform our contract with you or to take steps at your request before entering into that contract.
We use limited technical, fraud-prevention and service records for our legitimate interests in keeping Keroo secure, diagnosing faults and improving the service. We also use aggregated page-use and performance measurements to understand whether the public website is useful and works well on different devices. Private result, payment and administrator routes are excluded from this analytics collection. We retain accounting and transaction records where necessary to meet legal obligations.
AI image processing
Keroo uses OpenAI's API to analyse submitted information and create design outputs. Your uploaded images and brief may therefore be sent to OpenAI for this purpose. OpenAI states that API inputs and outputs are not used to train its models by default, although limited API data may be retained for abuse monitoring.
AI-generated designs are visual planning suggestions. They may contain inaccuracies, so you must check dimensions, clearances, product suitability and safety before buying or installing anything.
Who we use to provide Keroo
We share only what is needed with service providers acting for us: Supabase for database and private file storage, Vercel for hosting, OpenAI for AI processing, Stripe for payments, and Resend for transactional email. We may also disclose information where required by law or to establish or defend legal rights.
Some providers process information outside the UK. Where this happens, we rely on recognised safeguards such as an adequacy decision or approved contractual protections.
How long we keep it
- Uploaded source photographs, sketches and generated design image files are deleted 30 days after delivery.
- Unpaid or abandoned uploads are normally deleted after 30 days.
- Secure result links expire after 30 days.
- Written briefs, order, consent, payment, refund and support records may be retained for up to six years where needed for accounting, tax, contract or legal-claims purposes.
- Security logs are kept only for as long as reasonably necessary for security and fault investigation.
Your rights
Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, portability, or to object to processing based on legitimate interests. You may also complain to the UK Information Commissioner's Office at ico.org.uk. Contact us first if you can—we would like the chance to put things right.
Contact
Email hello@keroo.co.uk or write to SMARTDIRECTORIES LTD, 128 City Road, London, United Kingdom, EC1V 2NX.