Photoroom
Photoroom · Image and video · FR · www.photoroom.com
Last verified 2026-09-16
Entry
services/photoroom.yamlTraining on your data (default tier)
Uploaded images used to train and improve Photoroom's models unless the account opts out; API images excluded
Retention
Account data until deletion or two years after last connection, then archived five years
Data residency
French controller; transfers outside the EEA possible via service providers, with GDPR safeguards
Vendor data-handling terms
Training on your data (default tier)
Uploaded images used to train and improve Photoroom's models unless the account opts out; API images excluded
“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models. / You can opt-out of this at any time by changing the settings on your account. / For clarity, our model improvement does not apply to the images processed through our Application Programming Interface (API).”
Retention
Account data until deletion or two years after last connection, then archived five years
“Duration of use of the services (=Until the account is deleted by you or up to a period of 2 years from your last connection to your account), and then archived for 5 years”
Data residency
French controller; transfers outside the EEA possible via service providers, with GDPR safeguards
“Personal data may be transferred outside the European Economic Area, in particular because of the use of services providers located outside the EEA.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.photoroom.com | api | observed |
| app.photoroom.com | app | observed |
| photoroom.com | app | observed |
Assessment
App, opt-out not set: mediumAPI, or app with opt-out: low
Reasoning: A product-photo editor from a French company. Uploads train the models by default with an account-level opt-out, and the API is excluded, which is the split a retailer needs. Images are product shots, sometimes with people. EU controller with CNIL-aligned transfer safeguards.
Flags: Training on uploads unless opted out (app only) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and transfer terms verified against the Photoroom privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.