Legal
Privacy Policy
Last updated: April 2026
1. Information We Collect
When you create an account we collect your name, email address, and password. If you choose to verify your identity (KYC), we also collect government-issued ID documents. Landlords providing payout details submit bank account information processed by Stripe. When you use the messaging feature, message content is stored on our servers. We also collect standard usage data such as IP addresses, browser type, and pages visited.
2. How We Use Your Information
We use your information to operate the platform — creating and managing accounts, processing escrow payments, delivering messages, sending transactional emails (such as move-in confirmations and payment receipts), and providing customer support. We do not sell your personal data to third parties. We may use anonymised and aggregated data for internal analytics to improve the platform.
3. Payment Information
All payment processing is handled by Stripe. room4rent does not store your full card details. When you make a payment, your card information is transmitted directly to Stripe via an encrypted connection. Landlord payout details are also managed through Stripe Connect. Please refer to Stripe's Privacy Policy for details on how they handle financial data.
4. Identity Verification
Documents submitted for identity verification are encrypted and stored securely. They are used solely to confirm your identity and are reviewed by authorised staff only. Verified status is recorded against your account; the documents themselves are retained only as long as required by applicable regulations.
5. Data Sharing
We share limited data with third-party services that help us operate the platform: Stripe for payment processing, our email provider (Resend) for transactional notifications, and Cloudflare R2 for secure file storage. Each of these providers is bound by data processing agreements and may not use your data for their own purposes.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g. financial records related to completed transactions, which are retained for up to 7 years).
7. Your Rights
You have the right to access, correct, or delete your personal data. You may also request a copy of the data we hold about you. To exercise these rights, contact us at the address below. We will respond to all requests within 30 days.
8. Security
We use industry-standard security measures including HTTPS encryption, HttpOnly cookies, CSRF protection, and access controls to protect your data. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information against unauthorised access.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Significant changes will be communicated to you via email or an in-app notification.
10. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@room4rent.com.