Privacy Policy

Overview

Welcome to Roomrr ("Roomrr", "we", "our", or "us"), operated by Roomrr Connect Private Limited. Roomrr is a personality-based roommate matching and housing platform designed to help individuals discover compatible roommates, find suitable accommodation, and connect with verified users across India.

This Privacy Policy explains how we collect, use, disclose, store, transfer, and protect your personal information when you access or use our website, mobile application, and related services (collectively, the "Platform").

By creating an account, accessing, or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

Roomrr is committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian data protection regulations.

This Privacy Policy applies to all users of the Platform, including individuals seeking roommates, tenants, homeowners, property managers, authorised agents, and visitors to our website.

Information We Collect

We collect information in three ways: (i) information you provide directly to us, (ii) information collected automatically when you use the Platform, and (iii) information obtained from trusted third parties. The information we collect depends on how you use Roomrr and the features you choose to access.

A. Information You Provide Directly

• Account Information: Full name, email address, phone number, date of birth, gender, and account credentials and authentication information.
• Profile Information: Profile photographs, biography and personal description, occupation and educational background, lifestyle preferences and habits, housing preferences, compatibility preferences, and social and behavioural information such as sleep schedule, cleanliness preferences, noise tolerance, guest preferences, smoking preferences, dietary preferences, and work or study habits.
• Identity Verification Information: Aadhaar card, PAN card, passport, driver's licence, selfies or identity-verification photographs, and other verification documents as required. Identity verification information may be processed by Roomrr or trusted verification service providers solely for verification, fraud prevention, and safety purposes.
• Property Listing Information: Property address, rent amount, security deposit information, property photographs, amenities and features, occupancy information, lease terms and availability, and ownership or authorisation documentation where required.
• Brokerage & Transaction Information: When Roomrr provides brokerage, tenant placement, property discovery, or related services — viewing requests, brokerage transactions, rental negotiations, property preferences, lease-related communications, and service interactions.
• Communications: Messages exchanged through the Platform, customer support requests, survey responses, feedback submissions, complaint reports, and communications with Roomrr.
• Payment Information: When payments become available on the Platform — billing information, transaction details, payment history, and tax-related information where required. Payment card information is processed directly by our payment service providers; Roomrr does not store full payment card numbers or sensitive payment authentication data.
• Compatibility Quiz & Survey Responses: Responses to questionnaires, surveys, assessments, and compatibility quizzes used to generate recommendations, compatibility scores, and roommate matches.
• Waitlist & Marketing Submissions: Name, email address, phone number, referral information, and optional comments or messages when you join a waitlist, request updates, participate in promotions, or subscribe to communications.

B. Information Collected Automatically

• Usage Information: Pages viewed, features used, search queries, listings viewed, time spent on pages, navigation patterns, clickstream data, and interaction history.
• Device Information: Device type, operating system, browser type and version, device identifiers, mobile application identifiers, language settings, and screen resolution.
• Log Information: IP address, login activity, access timestamps, error logs, crash reports, and referring and exit URLs.
• Location Information: With your permission — approximate city-level location, geographic region, and location preferences, to improve roommate recommendations and housing discovery.

C. Information from Third Parties

• Social Login Providers: If you sign in using Google or another authentication provider, we may receive your name, email address, profile photograph, and account identifier, subject to the permissions granted by you.
• Identity Verification Providers: Verification status, verification confidence scores, fraud risk indicators, and authentication results from trusted verification partners.
• Analytics & Measurement Providers: Aggregated and anonymised insights to understand Platform performance and user engagement.
• Referral Programs & Partners: If you join Roomrr through a referral, ambassador program, university partnership, housing partner, or similar initiative, we may receive information necessary to attribute and administer those programs.
• Publicly Available Information: Where permitted by law, publicly available information relevant to fraud prevention, identity verification, security, or compliance purposes.

How We Use Your Information

Roomrr uses personal information only for legitimate, transparent, and lawful purposes related to operating, improving, securing, and providing the Platform. We process personal information based on consent, contractual necessity, legal obligations, legitimate business purposes where permitted by law, and other lawful grounds recognised under applicable law.

A. Providing & Operating the Platform

• Create and manage your account, and authenticate and verify users.
• Enable profile creation and management, roommate matching, and housing discovery.
• Display relevant listings and recommendations, and enable communication between users.
• Provide customer support, process transactions and payments, and manage waitlists, referrals, and promotional programs.

Without certain information, we may be unable to provide some Platform features.

B. Compatibility Matching & Recommendations

Roomrr uses profile information, lifestyle preferences, housing preferences, questionnaire responses, behavioural indicators, and other relevant information to generate compatibility scores, recommend potential roommates, surface relevant housing opportunities, improve matching accuracy, and personalise user experiences.

Roomrr may use automated systems, algorithms, artificial intelligence, machine learning technologies, and statistical models to generate compatibility scores, rankings, recommendations, and match suggestions. These systems may process lifestyle preferences, compatibility quiz responses, housing requirements, budget preferences, location preferences, user interactions, and profile information.

C. Identity Verification & Safety

• Verify user identities, detect fake profiles, and prevent impersonation.
• Reduce fraud and abuse, improve trust and safety, and investigate suspicious activity.
• Enforce our Terms of Service and protect users and the Platform.

Verification information may be processed directly by Roomrr or trusted verification service providers acting on our behalf.

D. Communications

We use your information to communicate with you regarding account activity, security alerts, verification requests, customer support interactions, transaction updates, Platform announcements, service notifications, legal notices, and product updates. Where permitted by law and with your consent where required, we may also send marketing communications, promotional campaigns, product announcements, surveys and feedback requests, and referral and rewards programs. You may opt out of marketing communications at any time.

E. Payments & Transactions

We may use personal information to process payments, prevent payment fraud, verify transactions, issue invoices and receipts, manage refunds, comply with tax and accounting obligations, and resolve billing disputes.

F. Analytics & Product Improvement

We use information to understand how users interact with the Platform and to improve our services — analysing user behaviour, monitoring feature performance, measuring engagement, testing new features, conducting research, improving user experience, enhancing matching systems, and developing new products and services. Where possible, we use aggregated, anonymised, or de-identified information for these purposes.

G. Fraud Prevention & Security

We use information to detect fraudulent activity, prevent abuse of the Platform, monitor suspicious behaviour, protect user accounts, investigate security incidents, prevent unauthorised access, and protect the integrity of our systems. We may use automated systems to identify behaviour that presents elevated fraud or security risks.

H. Legal & Regulatory Compliance

We may process personal information where necessary to comply with applicable laws and regulations, respond to lawful requests from authorities, enforce our legal rights, protect the safety of users and the public, resolve disputes, maintain business records, and meet tax, accounting, audit, and reporting obligations.

I. Business Operations

We may use information for legitimate business purposes including internal administration, corporate governance, risk management, auditing and compliance, business planning, corporate transactions, and service continuity and disaster recovery.

How We Share Your Information

Roomrr does not sell, rent, trade, or license your personal information to advertisers, data brokers, or other third parties for their independent marketing purposes. We share personal information only in the limited circumstances described below.

A. With Other Users

Roomrr is designed to facilitate roommate matching and housing discovery, so certain profile information may be visible to other users. Depending on your privacy settings and Platform activity, this may include your first name, profile photograph, biography, occupation or education information, lifestyle preferences, compatibility indicators, housing preferences, and public profile information. You remain responsible for determining what information you choose to include in your profile.

B. Service Providers & Processors

We may share information with carefully selected third-party vendors, contractors, consultants, and service providers who perform services on our behalf — including cloud hosting and infrastructure, data storage and backup, payment processing, identity verification, fraud prevention, customer support, email and SMS delivery, analytics and performance monitoring, security monitoring, and marketing and communications. All service providers are contractually required to process personal information only for authorised purposes and to implement appropriate security measures.

C. Identity Verification Partners

To support trust and safety, we may share verification information with trusted verification providers, who may process identity documents, verification photographs, authentication data, and fraud prevention information. Verification partners are authorised to use such information only for identity verification, fraud prevention, compliance, and security purposes.

D. Payment Service Providers

When you make a payment through the Platform, payment information may be shared with authorised payment processors, financial institutions, and payment service providers, who may process billing information, transaction details, payment authorisations, and fraud screening information. Roomrr does not store complete payment card details or sensitive payment authentication data.

E. Legal Compliance & Protection

We may disclose personal information where we reasonably believe disclosure is necessary to comply with applicable laws or regulations, respond to lawful requests from government authorities, comply with court orders, legal processes, or subpoenas, enforce our Terms of Service, investigate fraud or security incidents, protect the rights, safety, or property of Roomrr, our users, or the public, or prevent illegal activity. Where legally permitted, we may notify affected users before responding to such requests.

F. Business Transfers & Corporate Transactions

Personal information may be disclosed, transferred, or assigned in connection with mergers, acquisitions, investments, financing transactions, corporate restructurings, asset sales, bankruptcy proceedings, or business transfers. If such a transaction occurs, we will take reasonable steps to ensure your information continues to be protected in a manner consistent with this Privacy Policy, and where required by law we will provide notice before your information becomes subject to a different privacy policy.

G. With Your Consent

We may share personal information for purposes not described in this Privacy Policy where you provide explicit consent, you direct us to share information, or disclosure is otherwise authorised by you. You may withdraw consent at any time where consent forms the legal basis for processing.

H. Aggregated & De-Identified Information

We may use, publish, share, or disclose aggregated, anonymised, or de-identified information that cannot reasonably be used to identify an individual — for research, analytics, industry insights, product development, statistical reporting, and business intelligence. This information is not considered personal information under this Privacy Policy.

Third-Party Services & Processors

To operate, secure, and improve the Platform, Roomrr works with trusted third-party service providers and technology partners. These providers perform services on our behalf and may process personal information only to the extent necessary to provide those services. We do not permit third-party providers to use your personal information for their own independent marketing purposes.

Third-party providers operate under their own privacy policies and legal obligations. While we carefully select providers that maintain appropriate security and privacy standards, Roomrr is not responsible for the independent privacy practices of third-party services that are not controlled by us. We encourage users to review the privacy policies of any third-party services they interact with through or alongside the Platform.

As Roomrr grows, we may add, remove, or replace service providers to support our business operations, security requirements, and product development needs. Any such changes will remain subject to the principles described in this Privacy Policy and applicable law.

International Data Transfers

Roomrr is headquartered in India, and our primary systems and operations are intended to be based in India. However, in order to operate, maintain, and improve the Platform, certain information may be processed, stored, accessed, or transferred outside India by trusted service providers and technology partners — for example, when we use international cloud infrastructure, communication services, analytics platforms, payment processors, or security providers.

When International Transfers May Occur

• Cloud hosting, data storage, backup, and disaster recovery
• Analytics and performance monitoring
• Identity verification and fraud prevention
• Customer support operations
• Email, SMS, and notification delivery
• Payment processing
• Platform security and infrastructure management

Our Safeguards

Where personal information is transferred outside India, Roomrr takes reasonable steps to ensure appropriate safeguards are implemented, which may include contractual data protection obligations, confidentiality requirements, access controls and security measures, encryption and secure transmission protocols, vendor due diligence and compliance reviews, and data processing agreements with service providers.

Regardless of where personal information is processed, Roomrr seeks to ensure it receives an appropriate level of protection consistent with this Privacy Policy and applicable legal requirements. As our technology infrastructure evolves, the locations where data is processed or stored may change; any future international data transfers will continue to be governed by the safeguards and commitments described here.

Cookies & Tracking Technologies

Roomrr uses cookies, pixels, software development kits (SDKs), local storage technologies, and similar tracking technologies to operate the Platform, improve functionality, enhance security, understand user behaviour, and provide a better user experience. These technologies help us recognise users, remember preferences, analyse Platform performance, and maintain the security and reliability of our services.

Cookies are small text files stored on your device when you visit a website or use certain online services. Similar technologies include local storage, SDKs, web beacons, pixels, and device identifiers. Cookies may be temporary (session cookies) or remain on your device for a longer period (persistent cookies).

Roomrr may use trusted analytics providers such as Google Analytics and Firebase Analytics. Where available, we enable privacy-enhancing settings such as IP anonymisation and data minimisation, and where possible analytics data is aggregated, anonymised, or de-identified. Analytics providers may process certain technical information in accordance with their own privacy policies.

Managing cookies: Most browsers allow you to view, delete, block, and control cookies through browser or device settings. Disabling certain cookies may affect the functionality, performance, or availability of some Platform features.

Do Not Track: Because there is currently no universally accepted standard for responding to "Do Not Track" (DNT) signals, Roomrr may not respond to all such signals. We will continue to review industry standards and legal requirements regarding DNT technologies. As technology evolves, Roomrr may use additional tracking technologies that provide similar functionality to cookies; any such technologies will be used in accordance with this Privacy Policy and applicable law.

Data Retention

Roomrr retains personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate the Platform. Retention periods vary depending on the nature of the data, the purpose of processing, legal requirements, and legitimate business needs.

• Active Accounts: Account information, profile information, matching preferences, verification status, transaction history, and user-generated content are generally retained for as long as the account remains active and necessary to provide Platform services.
• Account Deletion: You may request deletion of your account at any time through account settings or by contacting Roomrr. Upon a valid deletion request, we will begin deleting or anonymising personal information within a reasonable period — generally within 30 days — unless retention is required for legal, security, fraud prevention, dispute resolution, contractual, or legitimate business purposes.
• Messages & Communications: Messages exchanged through the Platform may be retained for up to twelve (12) months following the conclusion of a conversation or the closure of an account — to investigate safety concerns, respond to complaints, detect fraud, enforce Platform rules, and resolve disputes. After the retention period, communications are deleted, anonymised, or securely archived where appropriate.
• Identity Verification Information: Retained only as long as necessary for verification, trust and safety, legal compliance, and fraud prevention. Verification status may be retained for the duration of the account; document images are deleted as soon as reasonably practicable following successful verification unless a longer retention period is required by law, fraud prevention needs, regulatory obligations, or legal proceedings.
• Payment & Financial Information: Transaction records, invoices, and receipts may be retained for up to seven (7) years or longer where required by tax laws, accounting regulations, audit requirements, regulatory obligations, or legal proceedings. Payment card information is generally retained by payment processors under their own obligations.
• Analytics & Aggregated Data: Aggregated, anonymised, or de-identified information — which does not identify individual users — may be retained indefinitely for research, analytics, product development, business intelligence, statistical reporting, and service improvement.
• Waitlist & Marketing Information: Retained until the purpose for which it was collected has been fulfilled, the individual requests deletion, or retention is no longer necessary. Where users subsequently create an account, such information may become part of their account records.
• Legal Holds: Where information is needed to comply with legal obligations, respond to court orders, participate in legal proceedings, investigate fraud or misconduct, resolve disputes, or protect users or the Platform, it will be retained until the relevant matter has been resolved or the retention requirement has expired.

Secure deletion: When personal information is no longer required, Roomrr takes reasonable steps to securely delete, anonymise, aggregate, or de-identify it in accordance with applicable law and industry practices. The timing of deletion may vary depending on technical limitations, backup schedules, security requirements, and legal obligations.

Data Storage & Security

Protecting user information is a core operational, technical, and organisational priority at Roomrr. We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorised access, loss, misuse, disclosure, alteration, and destruction. Our security program is regularly reviewed and updated to address evolving threats, industry standards, and regulatory requirements.

• Encryption in Transit: All communications between your device and our Platform are encrypted using industry-standard Transport Layer Security (TLS) protocols — covering account logins, profile updates, messaging, payment-related communications, and verification processes. Roomrr requires HTTPS encryption for all Platform communications.
• Encryption at Rest: Sensitive stored information — which may include identity verification information, authentication credentials, security-related records, and sensitive account data — is protected using encryption technologies designed to reduce the risk of unauthorised access.
• Password Protection: Roomrr does not store passwords in plain text. Passwords are securely hashed using industry-standard cryptographic methods and salted before storage — even Roomrr personnel cannot view your actual password.
• Access Controls: Access to personal information is restricted to authorised personnel who require it to perform their job responsibilities, with role-based access controls, permission management, authentication requirements, access monitoring, and periodic access reviews.
• Monitoring & Security Testing: Continuous monitoring for vulnerabilities and threats — including vulnerability assessments, penetration testing, threat detection systems, security monitoring tools, log analysis, and infrastructure audits.
• Vendor Security Reviews: We seek to work with vendors that maintain appropriate security, privacy, and compliance standards, and may conduct reasonable diligence before sharing personal information with service providers.
• Security Incident Response: Roomrr maintains procedures for identifying, investigating, responding to, and mitigating security incidents. In the event of a data breach affecting personal information, we may investigate, take corrective action, notify affected individuals and regulators where required, and implement measures to prevent recurrence — within applicable legal and regulatory timeframes.

No absolute security guarantee: Although Roomrr employs reasonable security measures and follows industry practices, no method of transmission over the internet and no method of electronic storage can be guaranteed to be completely secure. Roomrr cannot guarantee absolute security of personal information, and users acknowledge that they provide information at their own risk. We encourage users to exercise caution when sharing information online and to promptly report any suspected security concerns.

Your Privacy Rights

Roomrr respects your privacy rights and is committed to providing reasonable mechanisms for you to access, manage, correct, and control your personal information. Subject to applicable laws, including the DPDP Act 2023, you may have the following rights:

• Right to Access: Request confirmation of whether we process your personal information and access to what we maintain — including categories of information collected, sources, purposes of processing, categories of recipients, retention practices, and a copy of certain personal information.
• Right to Correction: Request correction, updating, or completion of inaccurate, outdated, or incomplete personal information. In many cases you can update profile information directly through account settings.
• Right to Erasure: Request deletion of your personal information. We will delete or anonymise it unless retention is necessary for legal obligations, fraud prevention, dispute resolution, enforcing agreements, protecting users and the Platform, or maintaining required business records. Deletion may result in loss of access to certain Platform features.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time. Withdrawal does not affect the legality of prior processing; certain services may become unavailable if consent is withdrawn for information required to provide them.
• Right to Data Portability: Where technically feasible and legally required, request a copy of certain personal information in a structured, commonly used, machine-readable format. This right may be limited where compliance would infringe the rights of others, reveal proprietary information, create security risks, or be technically infeasible.
• Right to Opt Out of Marketing: Unsubscribe at any time via the link in marketing emails, communication preferences in account settings, or by contacting Roomrr directly. Opting out does not affect transactional, legal, security, or account-related communications.
• Right to Nominate: Where provided under applicable law, including the DPDP Act, nominate another individual to exercise your privacy rights in the event of your death or incapacity. Reasonable verification may be required.
• Right to Grievance Redressal: Submit a complaint to our designated Grievance Officer. If you are not satisfied with our response, you may seek remedies from the appropriate regulatory authority or competent body under applicable law.

Non-discrimination: Roomrr will not unlawfully discriminate against users for exercising their privacy rights. However, certain Platform features may require specific information to function properly, and the exercise of certain rights may affect the availability of those features.

Children's Privacy

Roomrr is intended primarily for individuals aged 16 years and above. Users aged 16 or 17 may access and use the Platform subject to applicable law and, where required, the consent of a parent or legal guardian. Where required under applicable law, Roomrr may require verifiable parental or guardian consent before processing the personal information of users under the age of 18; failure to provide such consent may result in restricted access, suspension, or inability to use certain Platform features.

Certain Platform features — including property listings, rental transactions, payments, identity verification processes, brokerage services, and other legally restricted activities — may be unavailable to users under the age of 18.

Roomrr does not knowingly permit children under the age of 16 to create accounts or use the Platform. Individuals under 16 are not permitted to create an account, access roommate matching services, participate in housing transactions, use messaging features, or submit personal information to Roomrr. By creating an account or using the Platform, you represent and warrant that you are at least 16 years old and legally eligible to use the Platform.

Age verification: To help maintain a safe and age-appropriate environment, Roomrr may implement date-of-birth verification, phone number verification, identity verification, government-issued identification checks, and other reasonable verification procedures. Failure to complete age or identity verification may result in restricted access, suspension, or termination of an account.

Inadvertent collection: If Roomrr becomes aware that personal information has been collected from an individual under 16 without appropriate legal authorisation, we will take reasonable steps to investigate, remove or anonymise the information, terminate the associated account where appropriate, and prevent further collection.

Reporting underage accounts: If you believe a minor has created an account or provided personal information through the Platform, please contact us immediately using the details in Section 13. Parents, guardians, or legal representatives may contact us to request investigation, deletion, or appropriate corrective action; reasonable verification may be required.

Changes to This Privacy Policy

Roomrr may update, modify, or revise this Privacy Policy from time to time to reflect changes in our business practices, technology, services, legal obligations, regulatory requirements, or other operational needs — including the introduction of new products or features, changes to data processing practices, improvements to security measures, changes in applicable laws, compliance with government directives, changes to third-party service providers, or corporate restructuring and business expansion. We encourage you to review this Privacy Policy periodically.

Notification of material changes: If we make material changes that significantly affect how personal information is collected, used, disclosed, or protected, we will take reasonable steps to notify users before the changes become effective — through email notifications, in-app notifications, website announcements, prominent notices on the Platform, or other reasonable channels. Where required by applicable law, we may seek additional consent before implementing certain changes.

Effective date: The "Last Updated" date at the top of this Privacy Policy indicates when the latest version became effective. Any updated version supersedes all prior versions. Your continued access to or use of the Platform after an updated Privacy Policy becomes effective constitutes your acknowledgement of the revised Policy. If you do not agree with any updated version, you should discontinue use of the Platform and request account deletion where appropriate.

Non-material changes (corrections, clarifications, formatting, or administrative revisions) may be made without individual notice and become effective upon publication unless otherwise required by law. Roomrr may maintain records of previous versions for legal, compliance, operational, or record-keeping purposes; you may request information regarding material policy changes by contacting us.

Contact Us & Grievance Officer

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the way Roomrr collects, uses, stores, or processes personal information, please contact us. We are committed to addressing privacy-related inquiries promptly, fairly, and in accordance with applicable law.

• Company: Roomrr Connect Private Limited
• General Support: support@roomrr.com
• Privacy, Data Protection & Legal Inquiries: legal@roomrr.com
• Grievance Officer: In accordance with applicable laws, including the DPDP Act 2023, Roomrr has designated a Grievance Officer responsible for privacy-related complaints, requests, and concerns. Officer details (name, email, address) are to be appointed and updated on this page.

Privacy requests: You may contact Roomrr regarding access, correction, deletion, consent withdrawal, data portability, and nomination requests, as well as privacy complaints, security concerns, data breach inquiries, and questions about this Privacy Policy. To help us process your request efficiently, please provide sufficient information to verify your identity and describe the nature of your request.

Response timeframes: Roomrr aims to acknowledge privacy-related requests within a reasonable time and respond to or resolve them within 30 days, subject to applicable legal requirements and the complexity of the request. In certain cases, additional time may be required to verify identity, investigate concerns, comply with legal obligations, or process complex requests.

Escalation: If you are dissatisfied with Roomrr's response to a privacy-related complaint or request, you may have the right to seek remedies from the appropriate regulatory authority or competent body under applicable law. Where applicable under the DPDP Act 2023, users may escalate unresolved grievances to the relevant authority designated under the law.

Jurisdiction: This Privacy Policy shall be governed by and construed in accordance with the laws of India. Subject to applicable dispute resolution requirements and mandatory legal protections, matters arising from or relating to this Privacy Policy shall be subject to the jurisdiction of the courts located in Bengaluru, Karnataka, India.