All payments made in the preview are in test mode. Read more

Legal

Privacy policy

Last updated: 7 July 2026

Note to the operator: the placeholders marked [TODO] below (legal entity, registered address, contact email, DPO details, hosting sub-processors) must be filled with your real details before publishing.

1. Who we are

Roostly ("Roostly", "we", "us") is a rental listings platform operated by [TODO: Legal entity name], registered in Ireland at [TODO: Registered address]. We are the data controller for personal data you provide to us.

Questions about privacy? Email us at [TODO: privacy@roostly.ie] or, if you prefer, our Data Protection Officer at [TODO: dpo@roostly.ie or "n/a"].

2. What we collect and why

  • Account data — name, email, password hash, role (renter / landlord / agent). Purpose: create and secure your account. Legal basis: contract.
  • Contact details — optional phone, avatar. Purpose: let landlords reach you about enquiries. Legal basis: consent.
  • Listings & photos — the property information landlords publish, including address and BER. Legal basis: contract.
  • Enquiries & messages — the message threads between renters and landlords. Purpose: enable the core service. Legal basis: contract.
  • Support tickets — your emails and any files you attach. Legal basis: legitimate interest (customer support).
  • Analytics — anonymised page views, aggregated by session and day, to help landlords understand listing interest. We do not use third-party ad trackers.
  • Cookies — see our cookies notice.

3. Who we share it with

  • Other Roostly users, where you choose to (e.g. sending an enquiry shares your name and message with the landlord).
  • Sub-processors we rely on: hosting and database at [TODO: Supabase EU / Cloudflare], transactional email at [TODO], AI generation at Google Gemini via the Lovable AI Gateway (prompt inputs only, no PII).
  • Authorities if we are legally required to (e.g. RTB or court order).

We do not sell your personal data. We do not use it for advertising.

4. How long we keep it

  • Active accounts: kept while you use the service. Deleted accounts: purged within 30 days.
  • Inactive accounts (no login for 3 years): archived, then deleted on request or after a further year.
  • Property listings: kept for 5 years after removal for audit and dispute purposes.
  • Support tickets: 2 years after resolution.
  • Page-view analytics: 12 months, then aggregated.

5. Where we store it

All personal data is stored on servers located inside the EU/EEA (Ireland / Germany). We do not transfer personal data outside the EEA except to sub-processors covered by Standard Contractual Clauses.

6. Your rights under GDPR

You have the right to: access, rectify, erase, restrict, port, and object to processing of your personal data. You can exercise most rights directly in Settings, or by emailing us at [TODO: privacy@roostly.ie]. We respond within one month.

If you believe we have mishandled your data, you can complain to the Irish Data Protection Commission (dataprotection.ie).

7. Security

We enforce row-level security on our database, HTTPS/TLS in transit, and hashed passwords. We check every new password against Have I Been Pwned. Report a security issue to [TODO: security@roostly.ie].

8. Changes

We will notify significant changes to this policy by email or via a banner on the site. Minor edits (typos, clarifications) are made in place.