Privacy Policy

2. Information We Collect

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide, maintain, and improve our platform and features
• Account Management: Create accounts, process registrations, manage user authentication
• Transactions: Process payments, billing, refunds, and financial transactions
• Communication: Send notifications, confirmations, updates, and customer support responses
• Personalization: Customize user experience, recommendations, and content
• Marketing: Send promotional emails, newsletters, and marketing materials (with consent)
• Safety and Security: Prevent fraud, abuse, illegal activity, and protect platform integrity
• Compliance: Comply with legal obligations, regulations, and legal requests
• Analytics: Analyze usage patterns to improve services and user experience
• Research: Conduct surveys, user research, and product development

4. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data in transit; AES-256 encryption for data at rest
• Secure Infrastructure: Cloud hosting with redundant backups and disaster recovery
• Access Controls: Role-based access, multi-factor authentication, principle of least privilege
• Password Security: Bcrypt hashing, password complexity requirements, no plain-text storage
• Monitoring: Intrusion detection, real-time monitoring, security alerts
• Compliance: Regular internal security reviews and code audits aligned with OWASP best practices
• Employee Training: Regular security training, strict confidentiality agreements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Sharing Your Information

We may share your information in the following circumstances:

• Other Users: Public profile information with other platform users (name, photo, reviews, ratings)
• Business Partners: Payment processors, analytics providers, marketing partners (under data processing agreements)
• Service Providers: Cloud hosting, email services, customer support, legal services
• Legal Requirements: Law enforcement, courts, or government agencies when legally required
• Business Transfers: In case of merger, acquisition, bankruptcy, or sale of assets
• Safety and Security: When necessary to prevent fraud, protect rights, or ensure platform safety

6. Third-Party Services and Integrations

We use the following third-party services that may collect and process your data:

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Session Cookies: Required for login, authentication, and platform functionality
• Preference Cookies: Remember your language, theme, and display preferences
• Analytics Cookies: Track how you use our platform to improve features
• Marketing Cookies: Enable retargeting ads and measure campaign effectiveness

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality. We do not share cookie data without your consent.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods:

• Active Accounts: Retained for the lifetime of your account.
• Account Deletion: When you delete your account, your profile, messages, listings, resumes, saved items, verification documents and uploaded files are erased. Public reviews you wrote are anonymised rather than removed, to preserve the integrity of ratings other members rely on.
• Payment & Legal Records: Financial records (payments, orders, peer-to-peer payment requests) and signed agreements are retained for up to 8 years to meet Indian tax and legal obligations, under the erasure exception for legal compliance.
• Fraud-Prevention Audit: The consented location/IP record captured at listing creation is retained while the listing is live plus a limited window for fraud investigation.
• Security Logs: Sign-in and audit logs are retained for up to 24 months for security and abuse investigation.

9. Your Rights and Choices

Depending on your location, you have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal data (subject to legal exceptions)
• Right to Data Portability: Request your data in a portable, machine-readable format
• Right to Opt-Out: Opt out of marketing communications and certain data uses
• Right to Withdraw Consent: Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@flatmateshub.com with your request.

10. Children's Privacy

FlatmatesHub is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we discover we have collected information from a child under 18, we will immediately delete such information and terminate the child's account.

Parents or guardians who believe a child has provided information to us should contact us immediately at privacy@flatmateshub.com

11. International Data Transfers

FlatmatesHub operates globally, and your information may be transferred to, processed in, and stored in countries other than your country of residence, which may have different data protection laws. By using our platform, you consent to the transfer of your information to countries outside your country of residence.

We implement standard contractual clauses and other appropriate safeguards to protect your information during international transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

Material changes will be communicated via email to your registered email address. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Grievance Officer (India — DPDP Act, 2023)

In accordance with India's Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2021, the Data Fiduciary has designated a Grievance Officer to address questions and complaints about the processing of your personal data:

We acknowledge grievances within 72 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.