Draft — not yet finalised
Privacy policy
Written to describe exactly what this build does today. It will be updated as each phase adds features.
What we collect
Your email address, password (stored only as a salted scrypt hash, never in plain text), full name, university, and anything you choose to add: phone number, profile picture link, biography and preferred area. Listings, messages, offers, orders and reviews you create are stored with your account.
Verification submissions
Matriculation numbers, notes and any identity document you submit for student verification are private. They are readable only by you and by an authorised reviewer, and they are never shown on your public profile or storefront.
What other students see
Your name, university, profile picture, biography, join date, verification status, Campus Cred and your active listings. Your email address and phone number are never published; you share contact details yourself inside a conversation.
What stays private to you
Saved listings, saved services and saved accommodation; your notifications; your order details; and your roommate profile while its visibility is set to private. Private messages are readable only by the participants in that conversation.
Addresses
Exact residential addresses on accommodation listings are stored but not displayed publicly. Only a general area is shown until the owner shares more in a conversation.
Retention and deletion
Data is kept while your account exists. Deleting your account removes your profile, listings, saved items, roommate profile and notifications. Moderation records and audit logs are retained so decisions remain reviewable.
Security
Permissions are enforced on the server and in the database, not only in the interface. Session tokens are stored as keyed digests, so a database copy cannot be used to impersonate you. We collect only what the features need.
No third-party tracking
There is no advertising network, no analytics tracker and no payment provider connected to this build. If any is added, this page will say so before it goes live.