Privacy Policy

This is a plain-language summary of what personal data Roomela processes, why, and what rights you have (information under Articles 13 and 14 of the GDPR).

1. Who is responsible for your data

The data controller is Nikolay Tolmachev, Staré Grunty 211/36, 841 04 Bratislava. Contact: info.roomela@gmail.com.

2. What data we process and why

• Account and sign-in — email, password (stored only in encrypted form), email confirmation, sign-in records. Purpose: running your account. Legal basis: performance of a contract.
• Profile — name, nickname, optional photo, “about me” text, phone (for landlords). Purpose: so people can see who they are dealing with. Legal basis: performance of a contract; optional details are added by your choice.
• Listings — room details, photos, address and map position, price and costs. Purpose: publishing your ad. Your exact address is not published: public pages show only the district and city and an approximate map area (about 300 m). The exact address and precise coordinates are visible only to you and our moderators; it is your choice whether to share them in a conversation. Legal basis: performance of a contract.
• Messages — conversation content and attached photos, read status. Purpose: delivering messages between you and the other user. Legal basis: performance of a contract. We do not read your conversations — except where strictly necessary to investigate a reported abuse, or where the law requires it.
• Reports and moderation — the content of a report and (for reports made without an account) your name and email; records of moderation decisions. Purpose: keeping the platform safe and meeting our duties under the Digital Services Act. Legal basis: legitimate interest and legal obligation.
• Saved rooms — the list of listings you saved. Legal basis: performance of a contract.
• Technical logs — IP addresses and operational logs held by our hosting and database providers. Purpose: security and operations. Legal basis: legitimate interest.

If you use the optional AI helper in the listing form, the text you typed there is sent to the AI provider (Google Gemini or Groq) to generate a suggestion. No account data is attached.

What others can see: your public details (your nickname, or your name if you chose to show it, your photo and your “about me” text) and your listings (without the exact address) are visible to other users. When you message someone, the other party sees your message and your public name.

3. Who helps us process data

We store and run your data with vetted providers (processors) under data-processing agreements:

• Supabase — database, sign-in and photo storage (EU region, Frankfurt).
• Vercel — website hosting (functions in Frankfurt).
• Resend — planned email notifications (not yet in use).

Supabase and Vercel process your data in the EU (Frankfurt). The optional AI helper (Google Gemini or Groq) and the planned email notifications (Resend) may process data outside the EU; where they do, the transfer relies on appropriate safeguards under the GDPR (such as standard contractual clauses).

We do not sell your data, do not use it for advertising, and do no profiling or automated decision-making. We protect your data with appropriate technical and organizational measures — encrypted transfer, row-level access controls in the database, and restricted access to personal data.

4. How long we keep data

5. Your rights

You have the right to access your data, correct it, have it erased, restrict its processing, receive a copy (portability), and object. You can delete your account yourself at any time under Profile → “Delete my account”: this immediately erases your profile, your listings and their photos, and anonymizes your messages. For a copy of your data, or any other request, write to info.roomela@gmail.com. If you believe we handle your data incorrectly, you can complain to the Slovak data protection authority: Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

6. Cookies

Roomela uses only strictly necessary cookies: your sign-in session and your language choice. No analytics, no advertising and no third-party cookies — which is why we do not need (or show) a cookie banner.

7. Changes to this policy

We update this policy when the service changes; the date of the current version is shown at the top of the page. We will announce significant changes in the app.

8. Contact

Questions about personal data: info.roomela@gmail.com — see also the contact page.