Privacy Policy
Policy version 2026-08-15
1. Information we collect
To operate TDRC, we collect account information (email and authentication credentials, held by Supabase Auth on our behalf), Member Profile information you provide (display name, profile photo, private legal/account name, date of birth, gender identity, hometown or general locality, company, professional title, About Me, and roommate preferences used for compatibility), government-ID evidence submitted for identity review, and, for Members offering space, booking evidence submitted for listing review.
2. What we never require
We do not require your exact residential address as profile information, and accessibility information we collect focuses on practical accommodation needs rather than medical diagnoses. We do not collect payment-card or bank information — TDRC's Event unlocks and Annual Access Plan use simulated commerce, not a live payment processor.
3. How your profile information is used
Completing a Member Profile does not, by itself, make you discoverable to other Members. Your marketplace-safe information becomes discoverable through an eligible active Listing or another specifically authorized product context. The following are never exposed merely because you have a profile: your legal name, date of birth, government-ID evidence or storage identifiers, booking evidence or storage identifiers, private accessibility free text, administrative notes, Reports, or security information.
4. Government-ID evidence
Government-ID evidence is stored privately, is never given a public URL, and is reviewed only by authorized staff. The raw file is deleted after review completes. TDRC retains only the durable decision/audit metadata from that review, and this evidence is never exposed through marketplace listings or ordinary logs.
5. Booking evidence
Booking evidence, required only for Offering Space listings, is stored privately with no public URL and is reviewed only by authorized staff. It is retained through seven days after Listing checkout and then deleted, keeping only durable review/audit metadata. Booking evidence is never shown to other Members.
6. Retention
We retain information according to our data-model retention rules and applicable privacy and legal requirements. Match, Report, moderation, reliability, consent, and security records are retained for their approved business, safety, privacy, and legal purposes. Messages are retained for 5 years. Deleting a Member-facing record does not improperly destroy retained safety or audit records.
7. Sharing
We do not sell your personal information. Information you share within an active Match's Conversation is visible only to you and your Match — TDRC does not otherwise share your Member Profile or evidence with third parties except as needed to operate the service (for example, our authentication, database, storage, and email providers) or where required by law.
8. Your choices
You can update most Profile information from your account. Some account, security, legal, and safety notifications cannot be disabled, because they are necessary for the safe operation of TDRC.
9. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by a new policy version on this page.
10. Contact
Questions about this Privacy Policy can be sent to support@thedreaminroomieconnect.com.