Your data and privacy
What Roma keeps, who can see it, and how to see, correct or delete it.
Your data in Roma is yours. Roma keeps what you put in it so it can show it on every device and let the operator work on it, and nothing else. It does not sell your personal data and does not use it for advertising. The full privacy policy and the terms say the rest in their own words, and this article follows them.
What Roma keeps
Your account. The name, email address and, where your sign-in provider shares it, the profile photo you signed in with, plus your timezone, settings and preferences.
Your content. Your lists and the items on them, your automations, the files and images you attach, your conversations with the operator, and the version history of your items.
Memory. Short facts about you and how you like to work, which the operator keeps so it does not have to ask again. You can see, edit and delete them under Settings → Memory. The memory article explains what Roma learns and from where.
Connected apps. When you connect an app such as Gmail, Google Calendar, Linear, Notion, GitHub or Slack, Roma reaches it only to do what you ask or what an automation you set up asks, within the permissions you granted. The connection's credentials are held by Roma's connection provider, Composio.
Voice. When you talk to Roma, the audio is transcribed by its speech provider and used for transcription only.
Usage and diagnostics. The log of changes in your workspace (the Event Log), records of the operator's requests, tool calls and errors used to find and fix problems, basic device and app information, push tokens, and the standard server logs of a web service.
Cookies. Cookies and local storage keep you signed in and remember your preferences. No advertising cookies, and no third-party analytics trackers.
How the operator uses it
To answer a request, organize an item, transcribe audio or run an automation, the relevant part of your workspace, and the relevant data from an app you connected, is sent to Roma's AI model provider, OpenAI. Under OpenAI's API terms, data sent through the API is not used to train their models, and Roma does not train AI models on your data either. The operator acts only on your instruction or on an automation you set up, and asks for your approval where Roma says it will. The permissions article shows where you set that.
Who can see what you keep
Nothing you keep is public. Three kinds of sharing exist, and each is your choice.
People you share with. When you share a task, a note or a whole list by link, or invite someone to it, they see it and the conversation about it, and nothing else. Sharing in Roma explains the roles.
An agent you connect. When you connect ChatGPT, Claude, Cursor or another AI app to Roma, you approve it on a Roma screen that lists what it will be able to do. It acts only as you, only on your own workspace, and what it reads is then also handled under its own provider's policy. See agents in Roma.
Service providers. Companies that run parts of Roma on its behalf, under contract: storage and sign-in, hosting, background processing, AI models and speech-to-text, connections, email, web search, the cloud browser the operator uses when you ask it to act on a website (in beta), and push notifications. The privacy policy names each one.
Beyond that, data is shared only when the law requires it, to investigate fraud, abuse or a security incident, or with your consent.
Google data
When you sign in with Google or connect Gmail or Google Calendar, Roma reaches your Google account only through a connection you set up yourself, within what you approve on Google's consent screen. Roma does not copy your mailbox or calendar. It stores what it shows you and what the features you turned on need, such as the tasks it created for you and memory entries, with links back to the original in Google. You can disconnect under Settings → Connections at any time, or revoke access from your Google Account permissions, and the content Roma already created for you stays in your workspace until you delete it. Roma's use of Google data follows Google's policy for data received from its APIs, including its Limited Use requirements.
How long Roma keeps it
While your account is active. Anything you delete goes to the trash, stays recoverable for about 30 days and is then permanently deleted. Diagnostic records are kept for a limited time: records of the operator's requests for 14 days, the hosting provider's request logs for up to 30 days, and the server logs of the storage and sign-in provider for up to 90 days. The log of changes in your workspace stays with your account.
Seeing, correcting and deleting your data
Most of it you can see, correct and delete yourself in the apps: your lists and items, your memory, your connections, your conversations. Deleting your account under Settings → Account permanently removes your workspace, files, memory, chats and activity, as delete your account describes. For anything else, a copy of your data, a deletion you cannot make yourself, a question or an objection, write to hello@roma.app. Depending on where you live, laws such as the GDPR, the UK GDPR or the CCPA give you further rights, and Roma does not treat you differently for using them.
Security
Encrypted connections, encrypted storage, access controls that scope every request to the signed-in account, and limited staff access. No one at Roma reads your Google data unless you ask for support, abuse or a security incident needs investigating, or the law requires it.
Roma is run by Milo Mode Inc. in the United States, and your data is processed there and where its service providers operate. Roma is not directed to children under 16.
Questions people ask
Does Roma train AI on my tasks and notes?
No. Roma does not train AI models on your data, and the AI model provider it uses, OpenAI, does not use data sent through its API to train its models. What is sent is the part of your workspace a request needs, to answer it.
Can someone else see my lists?
Only if you share. A task, a note or a list is private until you share it by link or invite someone, and then those people see that thing and its conversation, nothing else. An agent you connect acts as you, on your own workspace. Nothing you keep is public.
How do I get a copy of my data, or have it deleted?
You can delete most things yourself in the apps, and delete the whole account under Settings → Account. For a copy of your data, or anything you cannot do yourself, email hello@roma.app. Roma verifies the request and answers within the time the law allows.