Privacy policy
How we collect, use, and protect your personal information.
1. What we collect
We collect information you provide directly (name, email, phone, nationality, payment details, passport or MyID data for verification), information generated by your use of the platform (bookings, messages, reviews), and technical information (device type, IP address, browser type) for security and analytics.
2. How we use it
To operate the platform and facilitate bookings. To verify your identity as required by Uzbek law. To submit required filings to the State Tax Committee (E-ijara) and Migration Service (E-xabar berish). To process payments. To provide customer support. To improve our service.
3. Where we store it
All personal data is stored on servers physically located in Uzbekistan, in compliance with Law ZRU-547 on Personal Data. We do not transfer personal data outside Uzbekistan without your explicit consent and a lawful basis.
4. Who we share it with
With hosts and guests, only the information necessary to complete a confirmed booking (name, check-in/out dates, verified status). With the State Tax Committee and Migration Service, the information required by law for E-ijara and E-xabar berish filings. With payment processors (Multicard) to process transactions. We do not sell your data. We do not share your data with advertisers.
5. How long we keep it
Account data is retained while your account is active and for 3 years after closure, after which it is anonymized or deleted. Transaction records are retained for 7 years as required by Uzbek tax and financial law. You may request deletion at any time; where retention is legally required we will anonymize instead.
6. Your rights
You have the right to access your data, correct it, request deletion, and withdraw consent where consent is the legal basis. To exercise these rights, contact privacy@roomi-rent.com. We respond within 30 days.
7. Security
We use AES-256 encryption at rest for sensitive fields (passport numbers, MyID tokens, bank details). We use TLS 1.3 in transit. Passwords are hashed with Argon2id. Access is logged and audited.
8. Children
Our platform is not directed at children under 18 and we do not knowingly collect data from minors.
9. Contact
Data controller: Roomi Rent LLC, Tashkent, Uzbekistan. Data protection contact: privacy@roomi-rent.com.