Privacy Policy

Roomii ("Company", "we", "our", or "us") is a technology-driven real estate discovery platform operated by roomii, headquartered in Pune, Maharashtra, India. This Privacy Policy governs the collection, processing, storage, and protection of personal information of all users ("you", "your", "User") who access or use our platform at roomii.app or any associated mobile or web applications.

By registering on, accessing, or using Roomii, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our platform immediately.

This policy is compliant with the Information Technology Act, 2000, IT (Amendment) Act, 2008, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

We collect the following categories of information:

We process your personal data for the following legitimate purposes:

• To verify your identity and authenticate your account securely
• To display and manage property listings on the platform
• To connect buyers, renters, and agents with relevant listings
• To send OTPs, account notices, and transaction-related communications
• To personalize your search experience and surface relevant content
• To analyze platform usage patterns and improve product features
• To detect, investigate, and prevent fraudulent or abusive activity
• To comply with applicable laws, regulations, or judicial orders
• To enforce our Terms of Service and other platform policies

We do not use your personal data for automated profiling or algorithmic decision-making that would produce legal or similarly significant effects without human review.

We do not sell, rent, or license your personal information to third parties for commercial purposes. Data is shared only in the following limited circumstances:

Our platform integrates the following third-party services that may independently collect data subject to their own privacy policies:

We encourage you to review the privacy policies of these providers independently. Roomii is not responsible for data practices of third-party services beyond our direct control.

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+ (HTTPS).
• Encryption at rest: Sensitive data stored on our servers and S3 buckets is encrypted using AES-256.
• Access controls: Data access is restricted to authorized personnel on a need-to-know basis, enforced through role-based access control (RBAC).
• Token-based authentication: Sessions are managed via signed JWT tokens with expiry enforcement.
• Regular audits: We conduct periodic security assessments to identify and remediate vulnerabilities.

Important: No system can guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you within 72 hours as required under applicable law.

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected:

• Account data: Retained for the duration of your account and up to 2 years after account deletion (for legal and audit purposes).
• Listing data: Retained for the duration the listing is active, plus 1 year post-expiry for dispute resolution.
• Usage & analytics data: Aggregated and anonymized after 90 days.
• Communication records: Retained for up to 3 years for compliance and fraud investigation purposes.

After the applicable retention period, data is securely deleted or anonymized in a manner that prevents reconstruction.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights:

To exercise any of these rights, contact us at privacy@roomii.app. We will respond within 30 days of receiving your request.

We use cookies and similar tracking technologies to enhance your experience and analyze platform usage. The types of cookies we use include:

• Essential Cookies: Required for authentication, session management, and core platform functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the platform (e.g., page views, navigation paths). Can be opted out.
• Preference Cookies: Remember your settings and preferences for a better experience. Can be cleared via browser settings.

You may control cookie behavior through your browser settings. Note that disabling essential cookies may impair core functionality of the platform.

Roomii is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal data without parental consent, please contact us immediately at privacy@roomii.app and we will take prompt action to delete such data.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via in-app notification or SMS
• Where required by law, seek fresh consent for new processing activities

Your continued use of Roomii after the effective date of a revised policy constitutes your acceptance of the updated terms.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our designated Data Protection / Grievance Officer: