Searchroom Privacy Notice

Effective date: 12 July 2026

Searchroom is operated by Shy Alter, operating Searchroom ("Searchroom"). Contact privacy@searchroom.app for privacy requests and legal@searchroom.app for legal notices.

Searchroom processes account and OAuth profile data; agent and business profile details; project, member, invitation, and invite email data; search preferences and property criteria; property, listing, and import data; messages, feedback, viewing responses, offers, closing tasks, document requests, uploaded document metadata, uploaded files, support messages, safety reports, deletion requests, and privacy requests.

Personal documents can be sensitive and may include identity or financial records. Users should upload only what is necessary and legally permitted.

Searchroom acts as controller for account, product, website, support, security, safety, legal, and service-operation data that Searchroom decides how to process. When an agency, brokerage, or customer uses Searchroom to manage customer-controlled project data, Searchroom may act as processor or service provider for that customer-controlled data.

Searchroom processes data to provide, secure, troubleshoot, support, and improve the service; manage accounts, projects, memberships, invitations, documents, viewings, offers, and closing workflows; communicate service messages; respond to support, safety, legal, deletion, or privacy requests; enforce rules; prevent abuse; and comply with law.

For account and workspace operations, Searchroom relies on contract performance. For security, abuse prevention, support, service administration, and improvement, Searchroom relies on legitimate interests where applicable. Searchroom relies on legal obligations where processing is required by law and on consent where a feature specifically requests it. Agencies and invited users may provide information about other people; they must ensure they have the authority and notice or other lawful basis required to do so. Searchroom does not make solely automated decisions with legal or similarly significant effects.

Searchroom stores and processes its application records, project content, messages, and uploaded files in EU West, Ireland. This is the active production location. Expo/EAS and app stores are used only to build, review, and distribute the apps; Searchroom does not send them project content or personal documents. Google or Apple OAuth, when configured and selected, process the limited identifiers and authentication events required for sign-in under their own terms.

Document uploads are limited to PDFs of up to 10 MiB. Before attaching an upload to a project, Searchroom checks its stored MIME metadata, size, filename, and %PDF- header. This is deterministic format validation, not malware scanning or a guarantee about a document's contents. Each download rechecks active project membership, role, and document visibility and is delivered with private, no-store caching instructions.

Active providers are Convex for backend, EU West database, file storage, authentication infrastructure, and hosted application data; Google and Apple OAuth when selected; Expo/EAS and app stores solely for build, review, submission, or distribution; browser-store services if the extension is distributed; and approved Searchroom domain mail routing for support, privacy, legal, deletion, and safety communications. Paddle and Documenso are dormant for the current release and receive no current user data. They may be activated only after separate review and approval.

Searchroom does not sell personal data, share personal data for cross-context behavioral advertising, or use targeted advertising. Nonessential analytics, crash reporting, marketing pixels, campaign email delivery, and push notification providers are inactive unless separately reviewed and disclosed.

The safety model allows authorized project users to report concerns and block other users. Report detail is bounded to what is needed to assess the issue. Resolved report detail and minimal evidence are deleted or irreversibly anonymized 12 months after resolution unless a documented legal hold or active dispute applies. Blocks last until unblock or applicable account/project deletion. Searchroom does not promise content scanning or a fixed outcome deadline.

Depending on your location, you may have rights to access, correct, delete, restrict, object, port your data, withdraw consent where consent is used, and complain to a supervisory authority. Contact privacy@searchroom.app or use authenticated privacy controls where available. Searchroom reviews requests because projects can include other people's data.