Privacy Policy

1. Who we are

Colivioo is operated by Bontal LLC, a limited liability company organised in the State of New Mexico, USA (“Bontal”, “we”). Bontal decides how and why your personal data is used on Colivioo, so under data protection law we are the organisation responsible for it (the “controller”). Our Data Protection Officer can be reached at [email protected].

This policy covers the Colivioo website, apps for iPhone, iPad, Mac and Android, and Telegram Mini App. One exception: when a coliving operator or hotel uses our company portal to manage its own residents or guests, that operator is responsible for their data and we handle it only on the operator’s instructions. Ask the operator about their privacy practices.

2. What we collect

What you give us

• Account details: name, email address, phone number, password (stored only as a one-way hash), gender if you give it, and the country you use Colivioo from.
• Profile and preferences: photos, a short bio, your budget, move-in dates, areas and MRT stations, lifestyle habits and roommate preferences, and anything else you add to a roommate profile or housing search.
• Listings: property addresses, photos, prices, house rules, contact preferences, and ownership documents you upload to verify a property.
• Messages and activity: messages and attachments you send, applications, team invitations, likes and passes, favourites, reviews, reports and blocks.
• Saved places: places such as your work or school that you save to see travel times.
• ID verification: if you choose to verify your identity, the result from Didit: your verified name, the type, issuing country and expiry date of your document. We never receive or keep a copy of your document, its number or your selfie. See the ID Verification Notice.
• Purchases: the plan or Spotlight you bought, when, for how much, and its status. Card details go directly to Stripe, Apple or Google; we never see them.
• Support: what you tell us when you contact us.

What we collect automatically

• Device and log data: IP address, device and browser type, operating system, app version, language, pages and screens you use, and the time of each request.
• Location: when you allow it, your device’s location, to show rooms and roommates near you and on the map. Your approximate location may also be worked out from your IP address.
• App diagnostics: crash reports and performance data from our apps, and security signals that confirm requests come from a genuine copy of our app.
• Notification tokens: identifiers that let us send push notifications to your devices.
• Cookies and analytics: on the website, as the Cookie Policy explains. You can turn analytics off at any time.
• AI assistant connections: if you connect ChatGPT, Claude or another AI assistant to your account, which assistant it is (its web address and the name it gives), when you connected it, when it last used your account, and when and why the connection ended.

What we get from others

• Sign-in providers: if you sign in with Google, Apple or Telegram, your name, email address or phone number, and an account identifier, as allowed by your settings with them.
• App stores and Stripe: confirmation and status of your purchases and subscriptions.
• Other members: reviews, reports, messages and team invitations about or to you.
• Operators: if a coliving operator adds you as a resident or lead in their company portal.
• Public sources: business contact details of property operators and agents, published by them, when we contact businesses about Colivioo.

3. How we use it

We do not sell your personal data, and we do not use it to show you targeted advertising from other companies.

4. Automated assistance and ranking

Some features analyse text automatically, including our assistant Jev, which is powered by TypeSafe: warnings under messages that look like rental scams, form suggestions, and tools that help operators sort enquiries. The text is sent to TypeSafe only to produce the answer, and the answer is stored separately from your records. These features only advise; a person makes every decision that matters, such as removing content or accepting an application.

Search results and recommendations are ordered by relevance to what you searched first, then by a quality score based on photos, completeness and account health. Paid Spotlight placements are always labelled “Sponsored”. None of this produces decisions with legal or similarly significant effects on you.

5. What other people can see

• Everyone: your listings, and the parts of your profile you make public, including your first name, photos, verification badges and your overall star rating with the number of reviews.
• People you match or talk with: your roommate profile, and the contact details you choose to share. Your email address and phone number are never shown unless you choose to share them.
• Only you: the written reviews about you, and the category scores.
• Operators you apply to: the details in your application.

A member who connects an AI assistant can use it to see what they could already see on Colivioo, such as your messages in a conversation with them or your roommate profile. We do not give their assistant the phone number, email address or messaging handles on your account, and we remove the ones we can detect from your messages and profile text before their assistant sees them.

6. Who we share it with

• Service providers who host, store, deliver or analyse data for us, under contracts that limit them to our instructions. Our Service Providers page lists each one, what it does and where.
• Payment providers: Stripe, Apple and Google, to process your purchases.
• Other members and operators, as described above.
• AI assistants you connect: if you connect ChatGPT, Claude or another AI assistant and approve it on Colivioo’s consent screen, we give it what it asks for while you use it: your name and email address, your applications, your conversations, your saved rooms and travel times from them to the places you saved, your roommate profile, other members’ roommate profiles and your matches, and your own listings and the applications on them. We do not give an assistant the phone numbers, email addresses or messaging handles on other members’ accounts, listings or profiles, and we remove the ones we can detect in messages and descriptions. That detection is automatic and can miss details written in an unusual way. The assistant’s provider handles what it receives under its own privacy policy, not this one. You can disconnect an assistant at any time in Settings, which ends its access straight away. Searching rooms or the Marketplace through an assistant without connecting your account shares nothing about you.
• Authorities: when the law requires it, to respond to a valid legal request, or to protect someone from serious harm, including reporting suspected scams to the police.
• A buyer or successor, if Colivioo is sold or merged, who must keep this policy’s protections.

7. International transfers

Bontal is based in the United States, and our service providers process data in several countries, including Singapore, the United States and the European Union. Wherever your data goes, we protect it to a standard comparable to Singapore’s Personal Data Protection Act (PDPA), using contracts such as the European Commission’s Standard Contractual Clauses where they apply.

8. How long we keep it

9. Security

We encrypt data in transit, store documents in private storage with encryption, hash passwords, limit staff access to what their job needs, and log access to sensitive records. No system is perfectly secure; if a breach affects you, we will tell you and the authorities when the law requires.

10. Your rights and choices

• See and fix your data: most of it is in your profile and Settings. Ask us for a copy of the rest.
• Delete your account in Settings, at any time.
• Withdraw consent for marketing emails, location access or notifications in Settings, your browser or your device, at any time. This does not affect what we did before.
• Turn off web analytics with Cookie settings at the foot of any page.
• Object or restrict how we use your data, and ask for it in a portable format, where the law gives you that right.

To use any right, email [email protected] from the address on your account. We may ask you to confirm your identity, and we reply within 30 days, or tell you why we need longer. We do not charge unless a request is excessive, and we will not treat you differently for using your rights.

11. Singapore, EU, UK and California

• Singapore: we follow the PDPA. You may ask for access to and correction of your data, and withdraw consent. You can complain to the Personal Data Protection Commission.
• EU and UK: the legal bases are in section 3. You can complain to your local data protection authority.
• California: you may ask to know, delete and correct your personal information. We do not sell or share it for cross-context behavioural advertising, and we do not use sensitive personal information beyond what is needed to provide Colivioo.

12. Children

Colivioo is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn we have, we delete it.

13. Changes to this policy

Each version of this policy has a number and the date it takes effect, and every earlier version stays in our Legal centre. We tell you about material changes before they take effect and ask you to accept them.

14. Contact and complaints

Data Protection Officer, Bontal LLC: [email protected]. If you are not happy with our answer, you can complain to the data protection authority where you live, such as Singapore’s Personal Data Protection Commission.