Privacy policy
Last updated: 6 November 2026
This policy explains what personal data RifRooms (the website at srinagarrooms.com) collects, why, and your rights under Indian law, including the Digital Personal Data Protection Act, 2023.
What we collect
- Account data: name, email, mobile number (optional for tenants) and password (stored only as a secure hash by our authentication provider).
- Listing data: property details, photos, videos and the owner contact number you provide.
- Activity: favourites, enquiries you send or receive, listing reports and location suggestions.
- Historical payments: legacy transaction amounts, purposes and Razorpay order/payment IDs are retained for records, reconciliation and legal obligations. RifRooms does not accept new platform payments. We never see or store your card, UPI PIN or bank details.
- Technical: basic logs (such as IP address and browser) kept by our hosting providers for security.
How we use it
- To run your account, show listings and deliver enquiries.
- To show owner contact details to signed-in, active users, the property owner and authorised administrators. Contact access is free; no payment or subscription is required.
- To prevent fraud and abuse, and to meet legal obligations.
We do not sell your personal data. We do not use it for third-party advertising.
Who we share it with
- Supabase (database, login and file storage) and Vercel (website hosting). Razorpay identifiers are retained only for historical transaction records and reconciliation.
- Owners see the name, optional phone and message you include in an enquiry.
- Authorities, where required by law.
How long we keep it
While your account is active. If you ask us to delete your account we delete your data, except payment records we must keep for tax and accounting law.
Your rights
You can access and correct your data from your dashboard, and ask us to delete your account or explain how your data is used, through our contact page.
Cookies
We use only essential cookies to keep you logged in. We do not use advertising or tracking cookies.