Draft for legal review
Privacy Policy
Prepared October 26, 2026. This draft is not a final policy.
Information collected by these forms
The waitlist form asks for your name, email address, and role. The contact form asks for your name, email address, and message. The site sends each submission from a server route to MadeThis's/site/notifyproxy, using its supported waitlist or contact event. Contact inquiries are routed for a reply; waitlist signups are recorded without an automatic email. These forms do not request room photos.
Accounts and room photos
The codebase also includes account registration and an authenticated room-photo upload flow. Uploaded image files are stored in the Roomora Convex application and associated with an account. This draft does not verify the storage provider's full access, retention, deletion, or sharing behavior, so it makes no privacy or retention promise about those photos. The early-access experience should not invite photo uploads until those practices are reviewed and described in a final policy.
Service providers and analytics
The repository includes Convex authentication and storage, the MadeThis notification proxy, and PostHog browser analytics. This draft does not establish provider retention periods or whether a provider may process or share data further. Those details require review against the deployed service configuration and provider terms.
Saudi PDPL and requests
Roomora serves an audience that may include people in Saudi Arabia. Legal counsel should assess the Saudi Personal Data Protection Law (PDPL) and any other applicable requirements before this policy is published. This draft does not claim PDPL compliance. Use the Contact page to ask a privacy question; a complete data-request process and responsible legal entity still need to be confirmed.