Privacy Policy
Last updated today
This is placeholder template text, not legal advice — have a lawyer review and adapt it (especially the licensing, insurance, and liability sections) before this goes live, particularly given Health Rooms deals with medical practice space.
1. What we collect
- Account info: name, email, and authentication data (handled by Firebase Auth).
- Listing and booking data: room details, photos, prices, booking times, and messages between Hosts and Renters.
- Verification documents: licence numbers and, if uploaded, insurance/licensing files — stored privately and only visible to you and Health Rooms admins reviewing your application.
- Billing data: handled directly by Stripe — Health Rooms does not store your card details.
- Usage statistics: which pages and rooms are viewed, what is typed into the room search, the site that referred you, and whether you're on a phone or computer. Our own measurement uses no cookies, doesn't store your IP address or link it to your account, and uses an anonymous visitor code that changes every day. We also use Google Analytics, which sets cookies to count visits; we send it page addresses without any search or account details, with advertising features turned off. If your browser sends a “Do Not Track” or Global Privacy Control signal, neither records anything.
2. How we use it
To operate the marketplace: showing listings, processing bookings, verifying hosts, sending booking-related emails, and billing subscriptions. We don't sell your data.
3. Who can see what
Published listing details are public. Messages and booking details are visible only to the two parties involved and Health Rooms admins (for support/dispute handling). Verification documents are visible only to you and admins reviewing them.
4. Data retention & deletion
You can request account deletion at any time; we'll remove your personal data except where we need to retain records for legal, billing, or dispute-resolution purposes.
5. Third parties
We use Firebase (auth/storage), Fly.io (hosting/database), Stripe (payments), and a transactional email provider — each processes data only as needed to provide their part of the service.
