Privacy Policy

1. Data We Collect

We may collect the following types of data:

• Account data:Email address, display name, password (hashed). If you sign in with Google, we receive the basic profile data you authorize.
• Verification data:Phone number (for SMS verification), institutional email (.edu verification).
• Listing and request data:Listings you post, rental requests, addresses, rent, photos, and more.
• Roommate matching data:Lifestyle preferences (sleep schedule, smoking, pets, cleanliness, etc.), budget range, move-in date.
• Chat history:Real-time messages between you and other users.
• Images:Property and avatar photos you upload. Images are compressed at upload time.
• Location data:Geographic coordinates (latitude/longitude) for listing addresses, used for map display and distance calculation.
• Usage data:Device type, browser version, IP address, page-view records.

2. How We Use Data

We use collected data to:

• Provide, maintain, and improve OuYu's features
• Verify your identity and prevent unauthorized account access
• Compute roommate compatibility matches
• Display listing locations on the map
• Send service-related notifications (new messages, match results, etc.)
• Process reports and maintain community safety
• Analyze usage trends to improve the user experience

3. Data Storage and Security

Your data is stored in Google Cloud Platform (GCP) data centers in the Asia-Pacific region, including:

• Database:Cloud SQL (PostgreSQL) for structured data, encrypted in transit and at rest.
• Image storage:Google Cloud Storage for uploaded images.
• Cache:Redis for real-time messaging and session data.

We apply industry-standard security measures to protect your data, including bcrypt password hashing, JWT token authentication, and HTTPS encryption in transit. That said, no internet transmission or electronic storage method can be 100% secure.

4. Cookies

We use the following types of cookies:

• Necessary cookies:Used to maintain login state (httpOnly access tokens) and CSRF protection.
• Functional cookies:Remember preferences such as your selected city.
• Analytics cookies:We use Google Analytics to measure how the site is used. It sets cookies such as _ga and _ga_* in your browser to tell visitors and sessions apart. You can install the Google Analytics Opt-out Browser Add-on, or block or clear these cookies in your browser settings, to opt out of analytics.

5. Third-Party Services

OuYu integrates with the following third-party services:

• Google OAuth:Used for third-party sign-in. We receive the email and profile data you authorize. Subject to Google's Privacy Policy.
• Google Maps Platform:Used for address autocomplete and map display. Subject to Google's Privacy Policy.
• Google Analytics:Used to measure site traffic and usage (such as pages viewed, referring sites, and device and browser type) so we can improve the service. Cookies are described in section 4; for how Google uses this data, see how Google uses information from sites that use its services.
• Sentry:Used for error monitoring. When an error occurs on the website or our servers, we receive an error report (such as the error message, the page URL, and browser and device type). When an error occurs on the website, Sentry also uploads a replay of the page interactions around the error so we can reproduce it; all text and input in the replay is masked, images and media are not recorded, and no replay is uploaded for visits without an error. Subject to Sentry's Privacy Policy.
• Resend:Used to send service emails such as verification codes, password resets, and new-message notifications. To send them, we pass the recipient address and the message content to Resend. Subject to Resend's Privacy Policy.
• Google Cloud Storage:Used to store the listing photos and avatars you upload. Photos are served from public URLs so they can be displayed on the site. Subject to Google Cloud Privacy Notice.

6. Right to Delete Data

You have the right to request deletion of your personal data:

• Delete account:You can choose "Delete account" on the Settings page. After deletion, your profile, listings, requests, and chat history are permanently removed.
• Delete specific data:You can delete listings and rental requests you have posted at any time.
• Email request:You can also email the contact address below to request deletion of all your data. We will process your request within 30 days.

7. Children's Privacy

OuYu's services are not directed at users under 18. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor, we will delete it immediately.

8. Policy Changes

We may update this Privacy Policy from time to time. If we make material changes, we will notify you prominently on the website and in the app. Continued use of OuYu constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email:hello@ouyurent.com