1. Introduction
Roomie rents ("Roomie", "we", "us") operates a platform that connects people looking for rooms and housemates in Malaysia. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering and using Roomie, you consent to the collection and use of your personal data as described in this policy.
2. Data We Collect
We collect the following personal data when you use the platform:
- Account information: your name, email address, phone number, username (handle), and optional profile photo.
- Listing and interest content: room listings, room-seeking posts, descriptions, photos, and availability dates that you submit.
- Usage data: view counts on your listings and interests, and your interactions with other posts.
- Device and browser data: collected indirectly through third-party advertising services (see Section 5).
We do not collect payment information. We do not conduct identity verification or background checks.
3. How We Use Your Data
- To create and manage your account.
- To display your listings and room-seeking interests to other users.
- To send you a one-time login code to your email address via our email delivery provider.
- To show relevant advertisements through Google AdSense (see Section 5).
- To monitor platform activity and enforce our Terms of Service.
We do not sell your personal data to third parties.
4. What Other Users Can See
- Your name, username, and profile photo are visible to all visitors on any listing or interest post you publish.
- Your phone number is visible only to logged-in users on individual listing or interest detail pages, and only while you have at least one active post. Delisting all your posts removes your phone number from public view.
5. Third-Party Services
We use the following third-party services that may process your data:
- Cloudflare R2 — stores images you upload (profile photos and listing photos). Images are stored on Cloudflare's infrastructure.
- Resend — delivers one-time login codes to your email address. Resend processes your email address solely for transactional email delivery.
- Google AdSense — serves advertisements on the platform. Google may use cookies and device identifiers to show relevant ads. Google's data practices are governed by Google's Privacy Policy.
6. Data Retention
Your personal data is retained for as long as your account is active. Listings and interests you delist are hidden from other users but may be retained internally for a period of time for dispute resolution and platform safety purposes.
You may request deletion of your account and associated data at any time by contacting us through the platform. We will process deletion requests within a reasonable time, subject to any legal obligations to retain records.
7. Your Rights Under PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate personal data (via your profile settings).
- Withdraw consent to the processing of your personal data, which will result in account deactivation.
- Request deletion of your account and data.
To exercise any of these rights, please contact us through the platform.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the platform after changes are posted constitutes your acceptance of the revised policy.
9. Contact & Governing Law
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us through the platform.
This policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010.
