Privacy Policy
We take your privacy seriously. From NADRA identity verification to encrypted payments, discover how Roominac protects your data under Pakistan’s PECA laws and international GDPR standards.
Bank-Grade Security
All personal data, including CNIC and biometric scans, are encrypted at rest using AES-256. We do not store raw payment details.
Zero Data Selling
We will never sell your personal information to third parties. Your data is strictly used to facilitate secure bookings.
Global Compliance
Fully compliant with the Prevention of Electronic Crimes Act (PECA) in Pakistan, as well as GDPR and CCPA frameworks.
Contents
1. Information We Collect
When you use Roominac, we collect information that helps us verify your identity and facilitate safe bookings. This includes:
- Account Information: Name, phone number (verified via OTP), email address, and profile picture.
- Verification Data: Scans of your CNIC (Computerized National Identity Card), real-time selfie for liveness checks, and biometric data where applicable.
- Payment Information: Processed securely via JazzCash, EasyPaisa, or Stripe. We do not store raw credit card numbers.
- Usage Data: Device information, IP addresses, and interaction metrics on the platform.
2. NADRA & Identity VerificationPakistan Specific
As Pakistan's safest property sharing platform, we require strict KYC (Know Your Customer) compliance. When you upload your CNIC:
- The data is cross-referenced with public NADRA databases to verify authenticity.
- Selfie video liveness checks ensure the person creating the account matches the ID provided.
- Once verified, your documents are encrypted and stored in secure, restricted-access buckets (`private-verifications`).
- Hosts only see your "Verified" badge and profile photo, never your sensitive ID documents.
3. How We Use Your Data
Service Delivery
To process bookings, send confirmations, and facilitate messaging between hosts and guests.
Safety & Security
To prevent fraud, spam, and abuse. This includes background checks where legally permissible.
4. Your Privacy Rights
Depending on your jurisdiction (e.g., GDPR in Europe, PECA in Pakistan), you have the right to:
- Request a copy of your personal data.
- Request deletion of your account and associated data.
- Opt-out of marketing communications.