Privacy Policy
Last updated: October 2026
FlatForMe ("we", "us") runs a platform for property and flatmate listings in India. This policy explains what we collect, why, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023.
What we collect
- Account data: name, email address, and sign-in method (email/password or Google).
- Profile data you choose to add: phone number, city, profile photo, bio and flatmate preferences.
- Listings you post: property details, photos, price, locality and map location.
- Contact requests and messages you send or receive through the platform.
- Usage data: pages viewed, searches, saved listings, and technical data such as device type and IP address (for security and abuse prevention).
- Approximate location only if you choose to share it with the location selector; it is stored in a browser cookie.
How we protect contact details and exact location
Phone numbers and email addresses are never shown on listing pages. They are released to a seeker only after the owner accepts that seeker's contact request. Public pages show only the locality and an approximate map point; a listing's exact pin is kept in restricted storage and shown only to the owner and to people the owner has accepted.
Why we use your data
- To run your account, publish listings and connect seekers with owners.
- To send service emails and notifications (requests, approvals, saved-search alerts).
- To moderate content, prevent fraud and enforce our Terms.
- To improve search, recommendations and reliability.
We do not sell your personal data.
Service providers
We use trusted processors to operate the service. They process data only on our instructions:
- Supabase: database, authentication and storage of account data.
- Cloudinary: image upload and delivery.
- Google Maps Platform: maps, place search and geocoding. Place queries you type are sent to Google.
- Resend: transactional email delivery.
- OpenAI: when you use “Fill with AI” on a post form, the text you type in that box is sent to OpenAI to read it into form fields. We do not send your account or contact details.
- Vercel: hosting and delivery.
Some of these providers process data outside India.
Cookies
We use essential cookies to keep you signed in, to remember your chosen location (fk_loc) and to remember your cookie choice (fk_consent). We do not use advertising cookies.
Retention
We keep account data while your account is active. When you delete a listing or your account, we remove or anonymise the associated data, except where we must keep records for legal, security or dispute purposes.
Your rights
You can access, correct or delete your information, withdraw consent, and nominate someone to exercise your rights. In Settings you can edit your profile, download a copy of your data and permanently delete your account(this also removes your listings, requests, requirements and uploaded photos). For anything else, email us at support@flatforme.com.
Grievance Officer
If you have a complaint about how your data is handled or about content on FlatForMe, write to our Grievance Officer at support@flatforme.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Security
Data is encrypted in transit, access to the database is controlled by row-level security, and sensitive fields are readable only through audited server functions. No system is perfectly secure; please use a strong, unique password.
Children
FlatForMe is for people aged 18 and over. We do not knowingly collect data from children.
Changes and contact
We may update this policy and will change the date above when we do. Questions: support@flatforme.com.