RoamLet Privacy Policy

Last Updated: August 26, 2026

RoamLet ("RoamLet," "we," "us," or "our") is committed to protecting the privacy of individuals who use our platform (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with the Platform, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.

By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

1. Information We Collect

Information you provide directly:

Account information: name, email address, phone number, password (stored in encrypted/hashed form), profile photo, bio, city, occupation, languages spoken;
Listing information (Hosts): property address, photos, description, pricing, lease terms, availability;
Application and tenancy information: rental applications, lease details, move-in/move-out dates, compliance-checklist records, maintenance requests, case/dispute records you submit;
Communications: messages sent to other Users through the Platform, support inquiries, reviews you post;
Payment information (Hosts, subscription billing only): billing name and email are shared with our payment processor, Stripe. RoamLet does not receive, store, or process your full credit card number — this is handled entirely by Stripe. See Stripe's privacy policy for details on how Stripe handles payment data.

Information collected automatically:

Usage data: pages visited, features used, timestamps, referring URLs;
Device and log data: IP address, browser type, device identifiers, operating system;
Cookies and similar tracking technologies (see Section 6).

Information we do not collect: RoamLet does not process or store rent payments, security deposits, or other funds exchanged between Hosts and Roamers, as all such payments are made directly between the parties, off-platform.

2. How We Use Your Information

We use personal information for the following purposes:

To create and administer your account and provide the Platform's core functionality (listing, browsing, applying, messaging);
To operate optional features you enable, including rent due-date reminders, compliance-task reminders, maintenance-request tracking, and calendar aggregation;
To send transactional and account-related communications (e.g., password resets, application status updates, subscription billing notices);
To send optional email reminders you have opted into (rent due/overdue, compliance due, maintenance updates, new applications) — you may disable each of these individually at any time in your account settings;
To process Host subscription payments through our third-party payment processor;
To investigate and enforce violations of our Terms of Service, respond to complaints (including Case/dispute records), and maintain platform safety, including suspending accounts where necessary;
To improve, maintain, and secure the Platform;
To comply with legal obligations and respond to lawful requests from public authorities.

We do not sell your personal information to third parties.

3. How We Disclose Your Information

We disclose personal information only in the following circumstances:

To other Users, as necessary to facilitate the Platform's core function: e.g., a Host's public profile information (name, avatar, city, occupation, languages, listing details) is visible to prospective Roamers. Your phone number, bio, and suspension status are private by default and are never disclosed to other Users generally. Phone numbers are shared only in the following specific, one-directional circumstances, and only after a booking has been approved: (i) once a Roamer's booking for a listing is approved, that Host may view the Roamer's phone number in connection with that specific tenancy; and (ii) once a Roamer's booking is approved, that Roamer may view the Host's phone number for that specific property. Phone numbers are never shared prior to booking approval, are never included in any automated email or notification, and are not disclosed to any other User who does not have an approved booking for that specific property.
To service providers who perform functions on our behalf, including:
- Supabase (database hosting and infrastructure);
- Stripe (subscription payment processing);
- Our email delivery infrastructure (transactional and reminder emails); These service providers are contractually restricted from using your personal information for any purpose other than providing services to RoamLet.
For legal reasons, where we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of RoamLet, our Users, or the public.
In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to standard confidentiality protections.

4. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Platform's services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you close your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes (e.g., financial records related to subscription billing).

5. Your Rights and Choices

Under PIPEDA, you have the right to:

Access the personal information we hold about you;
Request correction of inaccurate or incomplete personal information;
Withdraw consent to certain uses of your personal information, subject to legal or contractual restrictions and reasonable notice;
Request deletion of your account and associated personal information, subject to Section 4 above.

You may exercise these rights by contacting us at the email address in Section 10, or, where available, directly through your account settings (e.g., email reminder preferences, profile editing).

6. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies to maintain your session, remember your preferences, and understand how the Platform is used. You may be able to disable cookies through your browser settings, though this may affect the functionality of the Platform.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction, including role-based access controls and encryption in transit. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada in accordance with PIPEDA's breach notification requirements.

8. International Data Transfers

Our service providers (including Supabase and Stripe) may process or store data outside of Canada, including in the United States. Where personal information is transferred outside of Canada, it may be subject to the laws of the jurisdiction in which it is held, including lawful access by that jurisdiction's authorities. By using the Platform, you acknowledge and consent to this cross-border processing.

9. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete it.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

Email: support@roamlet.ca

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Platform and update the "Last Updated" date above. Material changes will be communicated to you through the Platform or by email where appropriate. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.