Privacy Policy

Information You Provide

• Account information — name, email address, and password when you create an account.
• Reviews — scores, written comments, photos, and videos you submit through our verified review flow.
• Reservation data — hotel, room, check-in and check-out dates used to verify your stay. We receive this data from the hotel at the time of review verification.
• Communications — messages you send us via email or support channels.
• Email subscriptions — your email address if you subscribe to Room of the Day updates.
• Room Type results — your quiz answers and Room Type outcome, if you choose to save them to your account.

Information We Collect Automatically

• Usage data — pages visited, search queries entered, features used, and time spent on the Service.
• Device and browser data — IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Local storage — we use your browser’s localStorage to remember your Room Type result and recent searches between sessions. This data stays on your device unless you are logged in, in which case it may be synced to your account.
• Location data — approximate location inferred from your IP address, or precise location only if you explicitly grant permission through the “Near Me” feature.
• Analytics — we use Google Analytics to understand aggregate usage patterns. Google Analytics collects data in accordance with Google’s Privacy Policy.

Information from Third Parties

• Google Places — we use the Google Places API to surface hotel information, photos, and ratings. Data fetched through this API is governed by Google’s Terms of Service.
• Hotel partners — hotels may share guest reservation data with us for the sole purpose of enabling the verified review system.

We use the information we collect to:

• Provide, operate, and improve the Roomza Service.
• Verify your identity and authenticate your account.
• Enable and display verified guest reviews.
• Personalise your experience, including surfacing relevant hotels, rooms, and Room Type results.
• Send transactional communications — account confirmations, review prompts, and security alerts.
• Send marketing communications, including the Room of the Day newsletter, if you have opted in. You may unsubscribe at any time.
• Detect, prevent, and address fraud, abuse, and other harmful activity.
• Comply with applicable legal obligations and respond to lawful requests from authorities.
• Understand how people use Roomza so we can make it better.

We do not sell your personal information to third parties. We do not use your data to build advertising profiles or serve behaviorally-targeted advertising.

We may share your information with:

Service Providers

We use a limited number of trusted third-party vendors to operate the Service. These vendors process data only on our behalf and under our instructions:

• Supabase — database hosting and user authentication (US-based).
• Vercel — web hosting and edge infrastructure.
• Google — Places API for hotel data; Analytics for usage insights.
• Anthropic — AI-generated room narratives and Room of the Day content (no personal user data is shared with Anthropic).
• Intercom — in-app support messaging.

Hotel Partners

When you submit a review, we may share aggregated review data and non-personally-identifying feedback with the relevant hotel. We do not share your personal identity with hotel partners without your explicit consent.

Legal & Safety

We may disclose your information if we believe in good faith that doing so is necessary to comply with a legal obligation, protect the rights or safety of Roomza or others, prevent fraud, or respond to a government request.

Business Transfers

If Roomza is acquired by or merges with another company, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.

We retain your account information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time by contacting support@roomza.com.

Verified reviews are retained indefinitely as part of the integrity of the review record. Upon account deletion, reviews are anonymised rather than deleted. Usage logs and analytics data are retained for up to 24 months.

Roomza uses browser localStorage (not traditional cookies) to store your Room Type result and search preferences locally on your device. This data does not leave your device unless you are signed in and choose to sync it to your account.

We use session cookies required for authentication. Third-party services including Google Analytics and Intercom may set their own cookies subject to their respective privacy policies. You can control cookie behaviour through your browser settings; disabling cookies may affect some features of the Service.

We take reasonable technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS), access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is completely secure. While we work hard to protect your data, we cannot guarantee absolute security. If you have reason to believe your account has been compromised, contact us immediately at support@roomza.com.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your account.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Opt out of marketing emails via the unsubscribe link in any email we send.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email support@roomza.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Residents of California, the European Economic Area, and the United Kingdom have additional rights under applicable law. We honour those rights regardless of where you are located.

Roomza is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Roomza is operated from the United States. If you are accessing the Service from outside the US, please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. For material changes, we will provide additional notice — such as an email notification or a banner on the Service. We encourage you to review this policy periodically.

Questions, requests, or concerns about your privacy? We want to hear from you.