Privacy Policy

1. Data We Collect

We may collect the following types of data:

• Account data:Email address, display name, password (hashed). If you sign in with a third-party provider (Google, Apple), we receive the basic profile data you authorize.
• Verification data:Phone number (for SMS verification), institutional email (.edu verification).
• Listing and request data:Listings you post, rental requests, addresses, rent, photos, and more.
• Roommate matching data:Lifestyle preferences (sleep schedule, smoking, pets, cleanliness, etc.), budget range, move-in date.
• Chat history:Real-time messages between you and other users.
• Images:Property and avatar photos you upload. Images are compressed at upload time.
• Location data:Geographic coordinates (latitude/longitude) for listing addresses, used for map display and distance calculation.
• Usage data:Device type, browser version, IP address, page-view records.

2. How We Use Data

We use collected data to:

• Provide, maintain, and improve UrbanMate's features
• Verify your identity and prevent unauthorized account access
• Compute roommate compatibility matches
• Display listing locations on the map
• Send service-related notifications (new messages, match results, etc.)
• Process reports and maintain community safety
• Analyze usage trends to improve the user experience

3. Data Storage and Security

Your data is stored in Google Cloud Platform (GCP) data centers in the Asia-Pacific region, including:

• Database:Cloud SQL (PostgreSQL) for structured data, encrypted in transit and at rest.
• Image storage:Google Cloud Storage for uploaded images.
• Cache:Redis for real-time messaging and session data.

We apply industry-standard security measures to protect your data, including bcrypt password hashing, JWT token authentication, and HTTPS encryption in transit. That said, no internet transmission or electronic storage method can be 100% secure.

4. Cookies

We use the following types of cookies:

• Necessary cookies:Used to maintain login state (httpOnly access tokens) and CSRF protection.
• Functional cookies:Remember preferences such as your selected city.

We do not currently use third-party tracking or advertising cookies.

5. Third-Party Services

UrbanMate integrates with the following third-party services:

• Google OAuth:Used for third-party sign-in. We receive the email and profile data you authorize. Subject to Subject to Google's Privacy Policy.
• Apple Sign In:Used for third-party sign-in. Subject to Apple's Privacy Policy.
• Google Maps Platform:Used for address autocomplete and map display. Subject to Google's Privacy Policy.

6. Right to Delete Data

You have the right to request deletion of your personal data:

• Delete account:You can choose "Delete account" on the Settings page. After deletion, your profile, listings, requests, and chat history are permanently removed.
• Delete specific data:You can delete listings and rental requests you have posted at any time.
• Email request:You can also email the contact address below to request deletion of all your data. We will process your request within 30 days.

7. Children's Privacy

UrbanMate's services are not directed at users under 18. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor, we will delete it immediately.

8. Policy Changes

We may update this Privacy Policy from time to time. If we make material changes, we will notify you prominently on the website and in the app. Continued use of UrbanMate constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email:privacy@urbanmate.com