Privacy Policy

Last Updated: August 20th, 2025

Welcome to Rome Intelligent Systems, Inc..

At Rome Intelligent Systems, Inc. ("we," "our," or "us"), we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and safeguard data when you use our platform available at https://getrome.ai and https://getrome.io (the "Service").

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any aspect of this policy, please discontinue use of our Service immediately.

We collect and process your personal information to:

Our processing is based on one or more of the following lawful bases:

We primarily process non‑HR business contact details of our customers’ employees and their suppliers to operate our platform:

This information is used to send notifications, coordinate deliveries, and support supply‑chain operations within our software.

Limited Support Access. In limited cases, our support team may temporarily access customer systems (under customer direction), which can expose additional contact information. Such access is strictly time‑bound, logged, used only to diagnose issues, and we do not retain that data beyond the support interaction.

Sensitive Data. We do not collect or process sensitive data (as defined by applicable law and the DPF Principles). If our practices change, we will update this policy and obtain any legally required consents before processing such data.

Our systems automatically gather information about your interactions with our Service, including:

This helps us understand user behavior while respecting privacy principles.

We collect information through:

We employ cookies and similar tracking mechanisms to enhance your experience and collect information about how you use our Service.

The cookies we deploy include:

We use your information only for the purposes for which it was collected. We retain personal data only as long as necessary for these purposes or as required by law. When data is no longer needed, we delete or anonymize it securely.

Depending on your location, you may have specific rights regarding your data (e.g., GDPR, CCPA), including:

Under the DPF Access principle, individuals may access the personal information we hold about them and correct, amend, or delete that information where it is inaccurate or processed in violation of the DPF Principles. We will respond to DPF‑related complaints within 45 days of receipt.

To exercise these rights or submit a DPF complaint, contact [email protected]. If we do not resolve your concern, you may use our independent recourse mechanism (JAMS) described below.

We engage trusted third-party subprocessors to perform specific functions on our behalf, including:

All subprocessors are contractually obligated to protect your information and process it only as directed by us. You can view our current list of subprocessors at https://getrome.ai/security/policies.

We implement robust security practices including:

You can view a detailed explanation of our security measures at https://getrome.ai/security/policies.

You are responsible for providing accurate, complete, and current personal information. You may update your information via your account or by contacting us.

We monitor compliance with this policy and our internal data protection practices. Violations are subject to investigation and appropriate corrective action, including potential disciplinary measures. We review this policy periodically and update it as necessary.

Rome Intelligent Systems, Inc. adheres to the EU‑U.S. Data Privacy Framework (EU‑U.S. DPF), the UK Extension to the EU‑U.S. DPF, and the Swiss‑U.S. Data Privacy Framework (Swiss‑U.S. DPF) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and its Member States, the European Economic Area (EEA), the United Kingdom (including Gibraltar), and Switzerland to the United States.

Rome Intelligent Systems, Inc. has certified to the U.S. Department of Commerce that it adheres to the DPF Principles. To view our certification, please visit the official list at https://www.dataprivacyframework.gov/list.

Scope of Participation. Our DPF participation covers only non‑HR personal information, and we collect and process only such non‑HR information. We do not collect HR data, and we do not rely on the DPF for HR data transfers.

Rome Intelligent Systems, Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) and may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law‑enforcement requirements.

Under the Data Privacy Framework (DPF) Principles, Rome Intelligent Systems, Inc. remains responsible and liable for the processing of personal information it receives and subsequently transfers to a third party acting as an agent on our behalf if that agent processes such information in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage. We require such third parties, via written agreements, to process personal information only for limited and specified purposes consistent with the notice provided to individuals, to provide at least the same level of protection as the DPF Principles, and to notify us if they can no longer meet these obligations.

To exercise these options, contact [email protected].

In compliance with the DPF Principles, Rome Intelligent Systems, Inc. commits to resolve complaints about your privacy and our collection or use of your personal information. EU, EEA, UK, and Swiss individuals with inquiries or complaints regarding this Privacy Policy should first contact us at [email protected].

Rome Intelligent Systems, Inc. has further committed to refer unresolved privacy complaints under the DPF Principles to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution to file a complaint free of charge.

If your complaint remains unresolved after following the above procedures, you may, under certain conditions, invoke binding arbitration before the Data Privacy Framework Panel as a last‑resort mechanism, pursuant to Annex I of the DPF Principles.

Our Service incorporates AI technology that can make or suggest decisions based on your data. You control the level of AI autonomy through configurable settings.

We implement:

For AI decision‑making queries, contact [email protected].

© Rome Intelligent Systems, Inc. 2025