Privacy Policy
Introduction
FindRooms respects your privacy and complies with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and all applicable Executive Regulations. This Privacy Policy describes what information we collect, how we use it, and your rights.
Information We Collect
Account information you provide during sign-up such as your name, phone number, email address, optional date of birth, and optional nationality. Listing information from owners including photos, descriptions, and locations. Usage data such as pages visited, searches performed, and listings viewed. Standard device information including browser type, hashed IP address, and device model.
How We Use Your Information
To provide the core service: display rooms, enable viewing bookings, and connect renters with owners. To verify identities and prevent fraud, scams, and duplicate listings. To improve our platform based on aggregated, anonymized usage patterns. To send transactional notifications such as booking confirmations. To send marketing communications only where you have given explicit, verifiable opt-in consent with a simple one-click unsubscribe.
Data Sharing
We share only what is required: between renters and owners (only what you choose to share on a listing or booking inquiry). With trusted service providers: Supabase for hosting, Twilio for SMS and WhatsApp, Google for maps and Places API, OpenAI for AI-assisted description improvement features. With legal authorities only when we are legally required to do so. We never sell your personal data to advertisers or data brokers.
Data Storage & Security
All data is stored in Supabase's Mumbai region for optimal latency from the UAE. Encryption is enforced in transit via HTTPS/TLS 1.2+ and at rest using AES-256. We perform regular security audits and enforce two-factor authentication on all internal admin accounts.
Your Rights (PDPL)
Under the PDPL you have the right to: access the personal data we hold about you. Correct any inaccurate or incomplete information. Request deletion of your account and associated personal data. Export your personal data in a machine-readable format. Object to specific processing where we rely on legitimate interest. Withdraw any consent you previously gave us for processing.
Cookies
We use essential cookies strictly required for authentication and session management. Analytics cookies are opt-in only. We do not use any third-party advertising cookies or advertising pixels for cross-site tracking.
Data Retention
Active user account data is retained until the user requests deletion. Deleted account data is fully removed within 30 calendar days of your request. Aggregated anonymized analytics data is retained on a 13-month rolling basis. Records required for legal compliance or accounting are retained for 7 years as required by UAE law.
Children
FindRooms is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have done so, contact support@findrooms.ae and we will delete the information promptly.
International Transfers
Personal data is stored in the Mumbai region. Some service providers may process data outside this region where required to deliver their services to us; in all cases we ensure adequate levels of protection by contract.
Changes
For material changes to this Privacy Policy we will notify you by email at least 30 calendar days before the changes take effect. Non-material changes are updated on this page with a revised effective date.
Contact
For privacy questions, access requests, or deletion requests please email support@findrooms.ae and we will respond within the timelines required by the PDPL.