Privacy Policy

FindMySpace (“we”, “us”) is operated by FindMySpace, Guwahati, Assam, India. We run a listing service for PGs, rental homes and homestays in Guwahati. We are the data fiduciary for the personal data described below, within the meaning of India’s Digital Personal Data Protection Act, 2023.

Questions about this policy: thefindmyspace@gmail.com.

If you enquire about a property, we collect your name, phone number, your intended move-in date if you give one, and any message you write. We need your phone number because a callback is how we respond.

If you list a property, we collect your name and email address (or your name, email address and profile picture from Google, if you sign in that way), a password if you create one, and everything you enter about the property: its type, locality, description, amenities, rent and deposit, photographs, a contact phone number, and the exact location you pin on the map, together with the street address you provide.

Automatically, our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. We set a session cookie when you sign in so you stay signed in. We do not run advertising or analytics trackers.

This deserves its own section because it is the most sensitive thing an owner gives us.

What happens depends on the kind of listing, and you are told which applies before you place the pin.

PGs and rental homes. Your pinned coordinates and street address are never published. They are not shown on your listing page, are not included in the page’s underlying code, and are not given to search engines.

• The map a visitor sees shows a shaded circle of roughly 600 metres, centred on a point deliberately offset from your real one. It is calculated on our servers, and the calculation itself never reaches a visitor’s browser, so the offset cannot be worked backwards.
• Your exact location is visible only to our review team, who use it to verify the listing and to find the property when arranging a visit.
• We share it with an interested visitor only after you have agreed to a viewing.

Homestays. Because a guest booking a short stay has to be able to find the door, a homestay listing does show the exact pin and the street address you give, along with the host name. The location step tells you this before you pin, and the address field is labelled as public. If you would rather not publish it, list the property as a rental instead.

The contact phone number stays private on every kind of listing — enquiries always reach us first.

• To publish and run your listing, and to keep your account.
• To review listings before they go public — the check that makes the site worth using.
• To pass genuine enquiries between an interested visitor and an owner, and to arrange viewings.
• To respond when you contact us.
• To keep the service secure, prevent fraudulent or duplicate listings, and comply with the law.

We process this data on the basis of the consent you give when you submit a form or create an account, and for the legitimate uses permitted under the DPDP Act. We do not sell personal data, and we do not use it for advertising.

We use a small number of service providers. They process data on our instructions only.

• Neon — our database, hosted in the United States (US-East region). All listing, account and enquiry data is stored there.
• Cloudinary — stores and serves listing photographs.
• Vercel — hosts the website and produces the server logs described above.
• Google — only if you choose to sign in with Google, in which case Google confirms your identity and shares your name, email address and profile picture with us.
• OpenStreetMap — supplies map tiles. Loading a map sends your IP address to their servers, as any image request does.
• Komoot (Photon) — converts a typed address into coordinates when an owner searches on the location step. Only the text searched is sent.
• Meta — if you choose to enquire over WhatsApp, or if a listing embeds an Instagram reel, your interaction with those features is subject to Meta’s own privacy policy.

Because our database is hosted outside India, your personal data is transferred and stored abroad. We will also disclose data where we are legally required to, or to establish or defend a legal claim.

• Enquiries — kept while we are helping you find a place, and for up to 12 months afterwards so we can follow up on disputes.
• Listings and host accounts — kept while your account is open. Delete a listing and it is removed immediately; ask us to close your account and we delete it, apart from anything we must retain by law.
• Server logs — retained for a short period by our hosting provider for security purposes.

Under the DPDP Act you may ask us to:

• tell you what personal data of yours we hold and who we shared it with;
• correct anything inaccurate, or complete anything missing;
• erase your data where we no longer need it;
• nominate someone to exercise these rights on your behalf if you die or become incapacitated;
• withdraw a consent you previously gave.

Hosts can edit or delete most of this directly from My listings. For anything else, email thefindmyspace@gmail.com and we will respond within 30 days. Withdrawing consent does not undo processing we already carried out lawfully.

Traffic is encrypted in transit. Passwords are stored hashed, never in readable form. Access to exact addresses and owner phone numbers is restricted to our review team, and host accounts can only ever reach their own listings. No system is perfectly secure, but if a breach affects your data we will notify you and the Data Protection Board as the law requires.

The service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy we will update the date at the top of this page, and tell you directly if the change is significant.

If you are unhappy with how we have handled your data, contact our grievance officer, Grievance Officer, at thefindmyspace@gmail.com. If we do not resolve it to your satisfaction, you may complain to the Data Protection Board of India.