Privacy Policy

This Privacy Policy explains what information RokPteah ("we", "our", "the Platform") collects from users ("you"), how we use it, and the choices you have. It applies to the RokPteah website, application, and related services.

1. Information We Collect

1.1 Account Information

When you register or sign in, we collect:

• Name, email address, and password (we store your password securely and can never access or retrieve it in plain text)
• Phone number(s), including whether a number is a regular phone or linked via Telegram
• Profile picture, if you upload one, stored on Cloudflare R2
• Account role (Tenant, Landlord, or Admin)
• Your visibility preferences whether your phone, Telegram, or email are shown to others on your listings

If you sign in with Google or Telegram, we receive your email and name (Google) or your Telegram user ID, name, and username (Telegram) from those providers to create or match your account. We do not receive your Google or Telegram password.

1.2 Property Listings (Landlords)

If you list a property, we collect and publish: address, approximate location (province/district, and optionally exact latitude/longitude and a location link), price, deposit, room details (bedrooms, bathrooms, size, floor), amenities, house rules, parking details, availability, and photos of the property.

By publishing a listing, you authorize us to process and publicly display this content including photos stored on Cloudflare R2 as part of the listing service.

1.3 Usage & Activity Data

We also collect:

• Properties you favourite or save
• Property view counts (aggregated, not tied to your identity in reporting)
• Location search views province/district search popularity, aggregated
• Reports you file against a listing (report type and description)
• Feedback or bug reports you submit
• Basic technical information for security purposes such as your IP address, browser/device information, and the action taken on your account

1.4 Authentication Data

• One-time passwords (OTPs) for registration and password reset, which expire after 10 minutes
• Session and authentication information needed to keep you signed in and help secure your account, until you log out, reset your password, or it expires automatically

2. How We Use Your Information

We use your information to:

• Create and secure your account (authentication, OTP verification, password reset)
• Let you list, browse, search, and favourite properties
• Show landlords aggregate statistics about their listings (views, favourites)
• Notify landlords and admins when a listing is reported, and notify admins of feedback submissions
• Send you OTP codes by email or Telegram
• Detect abuse, investigate reports, and maintain platform security
• Enforce platform rules such as maintenance mode or listing limits set by administrators

We do not sell your personal information to third parties. We do not currently use your data for third-party advertising, though we plan to introduce third-party advertising services see the Advertising section below for details.

3. Who We Share Information With

We share data only as needed to operate the Platform:

We do not share your data with data brokers. Google's sign-in service listed above is used only for signing in with Google, and is entirely separate from Google's advertising services. If we introduce third-party advertising as described in the Advertising section below, Google and other advertising partners may receive cookies and similar technologies, along with technical information about your browser or device, for ad delivery and measurement not your full account information.

4. Data Retention

• Account data is retained as long as your account is active.
• OTPs are deleted immediately after use, or once they expire (10 minutes).
• Session information is invalidated when you log out or reset your password, and expires automatically after a period of inactivity.
• Security and audit logs are retained only for as long as reasonably necessary for security, fraud prevention, troubleshooting, and legal obligations.

If you delete your account, we delete or anonymize the personal information associated with it including your phone number and session information and your published listings and associated content may be removed. Some information may remain where reasonably necessary for security, fraud prevention, dispute resolution, or legal obligations. This process does not guarantee the immediate deletion of every record.

5. Your Choices & Rights

• Visibility controls you can hide your phone number, Telegram, or email from your public listings at any time in your profile settings.
• Access and correction you can view and update your profile information directly in the app.
• Account deletion you may request deletion of your account by contacting us. We'll delete or anonymize your data as described in the Data Retention section above; this isn't always instantaneous, and some records may need to remain for security, fraud prevention, dispute resolution, or legal reasons.
• Session security you can log out at any time to end your active session; resetting your password invalidates all active sessions.

6. Security

• Passwords and one-time codes are protected using appropriate security measures and are never stored in plain text.
• We use HTTPS to encrypt data transmitted between your device and our Platform.
• Access to admin functions requires a verified account with the Admin role.
• We limit how often sensitive actions such as signing in, registering, requesting a code, and submitting reports can be repeated in a short time, to reduce abuse.

No system is 100% secure, and we cannot guarantee absolute security of information transmitted to the Platform.

7. Advertising

RokPteah does not currently display advertisements. We plan to introduce advertising on the Platform, which may include third-party advertising services such as Google (for example, Google AdSense).

Once introduced, Google and its advertising partners may use cookies and similar technologies, along with technical information about your browser or device, to deliver ads, measure ad performance, prevent fraud, and, where applicable, personalize the ads shown to you. These technologies are separate from the Google sign-in service described in the "Who We Share Information With" section above, which is used only for signing in. We do not directly use your private contact information (such as your phone number or email address) or other private account information to target advertisements to you.

We will update this Privacy Policy before any advertising service goes live, and the Cookies section below explains how you may be able to manage advertising-related cookies once introduced.

8. Cookies and Similar Technologies

Essential cookies are required for the Platform to work and cannot be disabled:

• Authentication cookies keep you signed in and identify your session
• Preference cookies remember settings such as your saved property search filters
• Functional cookies support features such as rate-limit notices during periods of high activity

Optional cookies and similar technologies are used for advertising, personalization, analytics, or measurement. We do not currently use any of these. As described in the Advertising section above, we plan to introduce third-party advertising, including Google, which would set cookies or use similar technologies for these purposes. Once that happens, you may be able to manage or limit personalized advertising through Google's Ads Settings (adssettings.google.com) and through your browser's cookie controls.

We do not currently operate a cookie-consent banner. If we introduce optional cookies for advertising or analytics, we will update this Privacy Policy and provide appropriate controls consistent with applicable law.

9. Children's Privacy

RokPteah is not directed at children, and we do not knowingly collect data from children under the age required by local law to enter into a rental agreement.

10. Changes to This Policy

We may update this Privacy Policy as the Platform evolves. Material changes will be reflected in the "Last updated" date above.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact the platform administrator through the in-app feedback form or the support channel listed on the RokPteah website.