This Data Protection Notice explains how InTheRoom protects personal information collected and processed through the platform.
Depending on how you use InTheRoom, we may process information including your name or username, email address, phone number, profile information, profile photographs, verification information, location information, room activity, messages, uploaded images, subscription information, and technical or security information associated with your account.
We use reasonable technical and organizational security measures designed to protect personal information against unauthorized access, disclosure, misuse, alteration, loss, or destruction.
These measures may include secure authentication, password hashing, session security, CSRF protection, prepared database queries, access controls, input validation, file upload restrictions, and other application and server-side security controls.
No internet-based platform can guarantee absolute security. We therefore continuously review and improve our security practices as the platform develops.
InTheRoom may process location information when you use location-based features. Location data may be used to identify your approximate position, determine whether you are within an allowed area for a room, enable geofencing features, and help provide location-based functionality.
Location information is processed only for legitimate platform and security purposes and is subject to the controls described in our Privacy Policy.
Where account verification is provided, InTheRoom may process information or documents submitted for identity and account verification.
Verification information may be used to confirm account authenticity, support platform safety, reduce fraudulent activity, and protect users from misuse of the service.
Messages, profile photographs, uploaded images, and other content submitted through InTheRoom may be stored and processed to provide communication, profile, moderation, security, and platform functionality.
We may process such information where reasonably necessary to enforce our Terms, Community Guidelines, prevent abuse, investigate security incidents, or protect users and the platform.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to maintain and provide the service, protect users and the platform, resolve disputes, prevent fraud or abuse, comply with legal obligations, and meet legitimate business or security requirements.
When information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with our applicable retention practices.
Some information may need to be retained for a longer period where required by law, necessary for legitimate security purposes, or required to establish, exercise, or defend legal claims.
Access to personal information is restricted to authorized persons, systems, and service providers where access is reasonably necessary to operate, maintain, secure, support, or improve InTheRoom.
Access to sensitive information is limited according to the nature of the information and the responsibilities of the person or system requiring access.
User passwords are not stored in plain text. Authentication credentials are protected using appropriate password-hashing and account-security mechanisms.
Users are responsible for maintaining the confidentiality of their account credentials and should immediately contact InTheRoom if they believe their account has been compromised.
InTheRoom may use third-party services and infrastructure providers to support functions such as hosting, payments, communications, notifications, analytics, maps, geolocation, or other platform functionality.
Where third parties process personal information on our behalf, we seek to use appropriate providers and safeguards consistent with the purpose for which the information is processed.
If we become aware of a security incident involving personal information, we will assess the incident and take reasonable steps to contain, investigate, remediate, and respond to it in accordance with applicable legal requirements.
Depending on applicable law, you may have rights relating to your personal information, including rights to request access to, correction of, or deletion of certain information, or to object to or restrict certain processing.
Requests relating to personal information can be directed to our support contact details below. We may need to verify your identity before processing certain requests.
We may update this Data Protection Notice from time to time as InTheRoom, our technology, security practices, or legal obligations change.
The latest version will be made available through the InTheRoom platform.
If you have questions about this Data Protection Notice or how your personal information is handled, please contact us at support@intheroomsocial.co.za .
Last updated: 4 August 2026