Privacy Policy

Roomly is a platform for booking stays and for listing and managing properties. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to our website, our mobile apps, and the host dashboard.

In this policy, “we”, “us” and “Roomly” mean the operator of the Roomly platform. “You” means anyone who uses Roomly — whether you are booking a stay (a guest) or listing a property (a host).

We collect information you give us directly, information created as you use Roomly, and a small amount of information from third parties who help us run the service.

Information you give us:

• Account details — your name, email address, phone number, password, and profile photo when you sign up or update your profile.
• Host and business details — business name, property addresses, descriptions, amenities, pricing, availability, and the photos you upload for your listings.
• Verification documents — where you apply for business verification, the identity or business documents you submit so we can confirm you are entitled to list a property.
• Payout and payment information — bank or payout details for hosts, and the payment details you enter when booking. Card details are handled by our payment processor; we do not store full card numbers on our systems.
• Bookings and messages — reservation dates, guest counts, special requests, reviews, and support enquiries you send us.

Information collected automatically:

• Device and log data — IP address, browser and device type, operating system, referring pages, and timestamps of your requests.
• Usage data — the pages and listings you view, searches you run, and features you use, which we use to improve the product.
• Approximate location — derived from your IP address, or a more precise location if you grant your device’s location permission so we can show stays near you. You can withdraw that permission at any time in your device settings.
• Cookies and similar technologies — see section 7.

We do not ask for special-category information (such as health, religion, or biometric data) and we ask that you do not include it in listings, reviews, or support messages.

We use personal information to:

• Create and secure your account, and authenticate you when you sign in.
• Publish your listings and show them to guests searching for stays.
• Process bookings, confirmations, cancellations, refunds, and host payouts.
• Verify hosts and properties, and reduce fraud, spam, and abuse on the platform.
• Send service messages you cannot opt out of while you hold an account — booking confirmations, security alerts, and changes to our terms or this policy.
• Send marketing emails and product updates where you have subscribed, which you can unsubscribe from at any time.
• Provide customer support and respond to your enquiries.
• Measure and improve how Roomly performs, using aggregated and de-identified analytics wherever possible.
• Meet our legal, tax, and accounting obligations, and enforce our terms.

Where the Nigeria Data Protection Act, the NDPR, or the UK/EU GDPR applies to you, we rely on the following bases for processing:

• Performance of a contract — to run your account, publish your listings, and complete bookings you make or receive.
• Legitimate interests — to keep the platform safe, prevent fraud, improve our services, and market to existing users, balanced against your rights.
• Consent — for optional cookies, marketing to new subscribers, and precise device location. You can withdraw consent at any time.
• Legal obligation — to keep transaction, tax, and anti-fraud records for the periods the law requires.

We do not sell your personal information. We share it only as described here:

• Between guests and hosts — when a booking is made, we share the details each side needs to honour it, such as the guest’s name and stay dates, and the host’s property address and contact details.
• Service providers — companies that host our infrastructure and database, process payments, store and deliver images, provide maps and address search, send our emails, and help us with analytics and customer support. They may only use the information to provide services to us.
• Publicly, where you choose — listing content, property photos, host display names, and reviews are visible to anyone using Roomly.
• Legal and safety — where we must comply with a valid legal request, or where disclosure is genuinely necessary to protect the rights, property, or safety of users, the public, or Roomly.
• Business transfers — if Roomly is involved in a merger, acquisition, or sale of assets, your information may transfer to the new owner under this policy or a successor policy we tell you about.

Some of our providers operate outside your country. Where information is transferred internationally, we take steps to make sure it stays protected to a standard comparable to the law that applies to you, including through contractual safeguards with those providers.

We keep personal information only as long as we need it for the purposes in this policy. In practice, account and profile information is kept while your account is active; booking and transaction records are kept for as long as tax and accounting law requires after the stay; verification documents are kept only as long as needed to confirm your status and to defend against fraud claims; and support correspondence is kept for a reasonable period after your enquiry is resolved.

When information is no longer needed we delete it or de-identify it so it can no longer be linked back to you.

We use cookies and similar storage to keep you signed in, remember preferences such as your theme, secure forms against cross-site request forgery, and understand how the site is used. Essential cookies are required for Roomly to work; analytics and marketing cookies are optional and depend on your consent where the law requires it.

You can clear or block cookies in your browser settings. Blocking essential cookies will sign you out and stop parts of the site working.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete — most of this you can do yourself from your profile and listing settings.
• Delete your account and the personal information associated with it, subject to records we must keep by law.
• Object to or restrict certain processing, including direct marketing.
• Receive your information in a portable, machine-readable format.
• Withdraw consent you have given, without affecting processing already carried out.
• Complain to your data protection authority — in Nigeria, the Nigeria Data Protection Commission.

To exercise any of these rights, contact us using the details in section 12. We will respond within the time the applicable law allows, and we may ask you to verify your identity first.

We protect your information with encryption in transit, access controls and role-based permissions on our systems, hashed credentials, and regular review of who can reach production data. No online service can promise perfect security, so please use a strong, unique password, keep your one-time codes private, and tell us straight away if you think your account has been compromised.

Roomly is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as Roomly changes or as the law requires. When we make material changes we will update the date at the top of this page and, where appropriate, notify you by email or in the app before the changes take effect.

If you have questions about this policy or how we handle your information, email us at privacy@roomly.ng or write to Roomly Technologies Limited, Nigeria. If you are in the EU or UK and we are required to appoint a representative, we will identify them here.