Privacy Policy

Corneroom (“we,” “our,” or “us”) operates the Corneroom mobile application and website (corneroom.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, phone number, profile photo
• Identity verification: government-issued ID, selfie for host verification
• Listing information: space descriptions, photos, pricing, availability, amenities
• Booking information: dates, guest count, special requests
• Payment information: processed securely by Stripe — we do not store full card numbers
• Communications: messages between hosts and guests, support inquiries
• Reviews and ratings

1.2 Information Collected Automatically

• Device information: device type, operating system, unique device identifiers
• Location data: GPS coordinates (with your permission) for nearby spaces and host verification
• Usage data: pages visited, features used, search queries, interaction patterns
• Log data: IP address, browser type, access times, crash reports

1.3 Information from Third Parties

• Social login providers: Google, Apple — name, email, profile photo
• Payment processor: Stripe — transaction status, payout information
• Analytics: Firebase Analytics, aggregated usage patterns

2. How We Use Your Information

• Provide, maintain, and improve our platform
• Process bookings and payments between hosts and guests
• Verify host identity and location
• Send booking confirmations, reminders, and support communications
• Enable messaging between hosts and guests
• Personalize your experience (nearby spaces, recommendations)
• Detect and prevent fraud, abuse, and safety issues
• Comply with legal obligations
• Analyze usage patterns to improve the platform

3. How We Share Your Information

We do not sell your personal information. We share information only as follows:

• With other users: Your profile, listings, and reviews are visible to other users. When you book, relevant details are shared with the host (and vice versa).
• Payment processing: Stripe processes all payments. See Stripe's Privacy Policy.
• Service providers: Firebase (analytics, push notifications), Google Maps (location services), cloud hosting providers.
• Legal requirements: When required by law, court order, or to protect safety.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. After account deletion, we retain certain data for up to 90 days for fraud prevention and legal compliance (e.g., financial transaction records as required by law).

5. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data (see Account Deletion)
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent for location tracking or push notifications via device settings

To exercise these rights, contact us at privacy [at] corneroom [dot] com.

6. Location Data

Corneroom uses location data to show nearby spaces, enable map-based search, and verify host locations. Location access is requested via your device's permission system. You can revoke location permissions at any time in your device settings. The app functions with limited features without location access.

7. Children's Privacy

Corneroom is not directed at children under 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided personal information, we will delete it promptly. If you believe a child has provided us with personal data, contact us at privacy [at] corneroom [dot] com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use Google Cloud Platform infrastructure and take appropriate safeguards to ensure your data is protected in accordance with this policy and applicable data protection laws, including GDPR for users in the European Economic Area.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, secure authentication (JWT), and regular security audits. Payment data is handled by Stripe, which is PCI DSS Level 1 certified. However, no method of electronic transmission is 100% secure.

10. Third-Party Services

Our app integrates with the following third-party services:

• Stripe — payment processing
• Firebase — authentication, analytics, push notifications, remote config
• Google Maps — location services and map display
• Google Sign-In / Apple Sign-In — social authentication

Each service has its own privacy policy governing data it collects.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your data rights:

• Email: privacy [at] corneroom [dot] com
• Support: corneroom.com/support