Last updated: 30 October 2026

DoonRooms ("we", "us", "DoonRooms") operates the DoonRooms website and mobile application (the "Platform") from Dehradun, Uttarakhand, India. This Privacy Policy explains how we collect, use, share, and protect your personal data in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). By using the Platform, you consent to the practices described in this Policy.

1. Information We Collect

Account information: your name, email address, mobile number, password (stored in encrypted/hashed form), city, state, and profile photo.

Sign in with Google: if you use Google sign-in, we receive your name, email address, and profile photo from Google.

Listing information: if you list a property, the address, rent, amenities, photographs, and other details you provide about it.

Usage information: your favourites, likes, views, searches, saved filters, and messages exchanged in chat with other Users.

Device information: a push-notification token (for alerts about your listings, favourites, and messages) and basic device/browser information for security and troubleshooting.

2. How We Use Your Information

We use your information, as a Data Fiduciary under the DPDP Act, to: operate your account and authenticate you; display your listings to prospective tenants; connect tenants and landlords via chat, call, and WhatsApp; personalise search results and recommendations; send transactional and informational notifications (listing updates, new messages, enquiry responses); investigate and prevent fraud, abuse, or violations of our Terms & Conditions; and comply with applicable law.

3. Legal Basis and Consent

We process your personal data on the basis of your consent, given when you register, sign in, or otherwise provide information to us, and, where applicable, for the performance of our Terms & Conditions with you or to comply with a legal obligation. You may withdraw consent at any time by deleting your account, as described in Section 6 below, subject to any information we are legally required to retain.

4. Sharing and Disclosure

Your name, profile photo, and mobile number are shown to the other participant of a conversation once you or they start a chat about a listing, so that genuine enquiries can be followed up by phone or WhatsApp. We do not sell your personal data. We may share data with: service providers who help us operate the Platform (hosting, cloud messaging/push notifications, email/SMS delivery) under contractual confidentiality obligations; and law-enforcement, courts, or government authorities where required by law or to protect the rights, safety, or property of DoonRooms or its Users.

5. Data Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting, or security obligations, resolve disputes, and enforce our agreements. Chat messages are retained to support dispute resolution and trust & safety review, and may be deleted by you from your own view at any time.

6. Your Rights

As a Data Principal under the DPDP Act, you have the right to: access the personal data we hold about you; correct or update inaccurate or incomplete data; withdraw consent and request erasure of your data; and file a grievance regarding our handling of your data. You can update your profile and photo from the Profile screen at any time, and request account and listing deletion from the app menu — we will act on deletion requests within a reasonable timeframe, subject to data we are required by law to retain (such as for tax, accounting, or fraud-prevention purposes).

7. Data Security

We use reasonable security practices and procedures, including encrypted password storage, token-based authentication, and access controls, to protect your personal data from unauthorised access, alteration, disclosure, or destruction, consistent with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies and Similar Technologies

We use browser local storage and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. You can clear these at any time through your browser settings, though some features may not work correctly without them.

9. Third-Party Services

We use Google Sign-In for authentication and Google Maps for location features, each governed by Google's own privacy policy. We use Firebase Cloud Messaging to deliver push notifications about your listings, favourites, and messages; you can disable notifications at any time from your device or browser settings.

10. Children's Privacy

The Platform is intended for use by individuals aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Data Breach Notification

In the event of a personal data breach that is likely to pose a risk to your rights, we will take reasonable steps to notify you and the relevant authorities as required under applicable law.

12. Grievance Officer / Data Protection Contact

For any question, complaint, or request relating to this Privacy Policy or your personal data, please contact our Grievance Officer. Complaints will be acknowledged within 24 hours and resolved within 15 days of receipt, or such other period as may be prescribed by applicable law.

Grievance Officer: DoonRooms Support Team
Email: support@doonrooms.com
Address: Dehradun, Uttarakhand, India

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The updated Policy will be posted on this page with a revised "Last updated" date, and continued use of the Platform after such changes constitutes acceptance of the updated Policy.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India. Subject to applicable law, the courts at Dehradun, Uttarakhand shall have exclusive jurisdiction over any dispute arising out of or relating to this Policy.

15. Contact Us

For privacy-related questions, please reach us via the Contact Us page or at support@doonrooms.com.