Privacy Policy

At RoomNest, we take your privacy extremely seriously. This Privacy Policy outlines what types of information we collect, how we use it, how we protect it, and your choices regarding your personal data when using our room finding and listing platform.

📋 1. User Data Collection

We collect personal information directly from you when you interact with our platform. This includes:

• Registration & Profile: When you sign up, we collect your username, email address, password, and phone number to verify and establish your account.
• Property Listing Details: If you list a room, PG, or flat, we collect the property details, description, rental pricing, exact address, Curfew/Rule settings, and contact phone numbers.
• Chat Conversations: Messages sent between room seekers and property owners through our direct messaging dashboard are safely processed and stored to facilitate seamless communication.

🍪 2. Cookies & Session Usage

We use cookies and active session tokens to provide you with a smooth, interactive experience:

• Authentication: Keeping you securely logged in as you browse different listings, check your inbox, or update listings.
• CSRF Tokens: Safe token handling across forms (login, sign up, property submission, and edit) to prevent Cross-Site Request Forgery (CSRF) vulnerabilities.
• Theme Selection: Remembering your preference between Light Mode and Dark Mode layouts.

📸 3. Image Uploads & Media Files

When you list a property and upload photos, those images are securely stored and optimized on our media hosting partner (**Cloudinary**) and served over HTTPS. By uploading, you ensure you own the rights to the photos and that they represent the actual physical room, flat, PG, or property in high fidelity. We do not use or sell your uploaded property photos for third-party marketing.

🔒 4. Data Protection & Security Measures

Your security is paramount. We deploy state-of-the-art secure cookies (`SESSION_COOKIE_SECURE = True`), absolute SSL encryption, and hashed password databases (using PBKDF2) to protect against unauthorized account breaches. While we take every industrial measure to safeguard your information, please ensure you never share your login passwords, OTPs, or financial information inside our messaging platform.