Privacy Policy
Complete transparency on how we collect, protect, and manage your data across our platform and mobile applications.
Quick Summary
We collect essential data (Identity, Media, and Location) exclusively to ensure a safe, verified ecosystem. Your financial data is vaulted directly by Rapidgateway.pk and never touches our servers. We never sell your personal information to third parties.
1. Information We Collect
To provide a highly secure and premium hospitality experience on the Roominac web platform, iOS App, and Android App, we collect the following data points:
- Identity & Verification Data (KYC): Government-issued ID details (CNIC/NICOP/Passport) and real-time facial biometric scans (selfies) required to verify user identity via NADRA integrations.
- Device & Geolocation Data: With your explicit consent via mobile OS permissions, we collect background and foreground location data to prevent fraudulent check-ins and improve personalized search results.
- Media & Device Storage: We require camera and storage permissions to allow users to upload property photos, video reels, and profile pictures directly from their mobile devices.
2. Payment Data & Security
Roominac utilizes Rapidgateway.pk as our exclusive Merchant of Record for all transaction processing (including Debit/Credit Cards, UnionPay, Raast, EasyPaisa, and JazzCash).
When you enter your payment details, they are transmitted directly to Rapidgateway via encrypted, PCI-DSS compliant channels. Roominac does not store, process, or view your full credit card numbers or banking credentials.
3. How We Use Your Data
Your data is strictly utilized to operate the Roominac platform effectively:
- To facilitate secure bookings and communicate essential updates via Email/SMS.
- To mitigate fraud by matching the person checking into a property with the verified KYC profile.
- To power our AI Vibe Search algorithm, generating semantic matches based on your historical preferences and saved wishlists.
4. Data Sharing & Third-Party Integrations
We only share data with critical third-party infrastructure providers necessary to run the platform:
- Government/Verification Partners: Necessary identity fragments are passed to NADRA APIs strictly for verification.
- Payment Processors: Billing amounts and transaction IDs are securely shared with Rapidgateway for payment execution and automated refunds.
- Law Enforcement: In the rare event of criminal activity or property damage, Roominac fully cooperates with local law enforcement agencies and may hand over verified identity logs under a valid legal warrant.
5. Your Rights and Data Deletion
You have complete ownership over your data. In compliance with Apple App Store and Google Play Store regulations, you can permanently delete your Roominac account directly from the mobile app settings or via our dedicated Data Deletion Portal. Doing so will permanently erase your profile, media, and KYC logs from our active servers.
Last Updated: August 2026. For privacy inquiries, contact privacy@roominac.com.