Privacy Policy

Last updated: June 2025

1. Data Controller

The data controller is Roomio.

2. Personal Data Collected

We collect the following categories of data:
  • Registration data: email, name, profile photo (optional).
  • Listing content: title, description, photos, price, address, contacts (WhatsApp, email, Telegram).
  • Usage data: pages visited, technical data (IP, browser, device) via anonymous analytics tools.
  • Cookies: see section 6.

3. Purposes and Legal Basis

  • Service delivery (Art. 6(1)(b) GDPR): account management, listing publication and display.
  • Platform improvement (Art. 6(1)(f) GDPR — legitimate interest): anonymous usage analytics.
  • Service communications (Art. 6(1)(b) GDPR): system emails related to your account.
  • Legal obligations (Art. 6(1)(c) GDPR): compliance with applicable law.

4. Data Retention

Data is retained for as long as necessary to provide the service. Upon account deletion, personal data is removed within 30 days, unless legal obligations require longer retention.

5. Data Sharing

We do not sell your data. Data may be shared with:
  • Supabase Inc. — database and authentication (EU servers);
  • Vercel Inc. — hosting (USA, with adequate GDPR safeguards);
  • Competent authorities — where required by law.

6. Cookies

  • Essential / technical cookies: required for authentication and session. No consent needed.
  • Analytics cookies (Vercel Analytics): collect aggregated, anonymous data with no cross-site tracking. Accept or decline via the banner on first visit.
You can change preferences at any time by clearing browser data.

7. Your Rights (GDPR Arts. 15–22)

You have the right to:
  • Access: obtain a copy of your personal data;
  • Rectification: correct inaccurate data;
  • Erasure: request deletion ("right to be forgotten");
  • Restriction: limit processing in certain circumstances;
  • Portability: receive your data in machine-readable format;
  • Objection: object to processing based on legitimate interest.
You may also lodge a complaint with the Italian Data Protection Authority.

8. Changes to this Policy

Roomio may update this Privacy Policy at any time. Material changes will be notified via email or a notice on the platform.