Privacy Policy
Your data, handled with care.
At Dveller, we build tools to help people find compatible homes and flatmates. That requires processing personal data — and we take that responsibility seriously. This policy explains what we collect, why we collect it, how we use it, and the rights you have over your information under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.
Who we are
This Privacy Policy applies to services operated by Dveller Technologies Private Limited ("Dveller", "we", "us", or "our"), a company incorporated in India with its registered office in Bengaluru, Karnataka. We operate the website at dveller.com and the Dveller mobile application (collectively, the "Platform").
For the purposes of the DPDP Act, Dveller is the "Data Fiduciary" in respect of personal data you share with us. You are the "Data Principal".
Information we collect
We collect information in three ways — information you give us directly, information we collect automatically, and information we receive from third parties.
Information you provide directly
| Category | Examples |
|---|
| Account information | Phone number, name, email address, city, role preference (seeker / lister / both) |
| Profile data | Profile photo, bio, occupation, age range, preferred neighbourhoods, move-in timeline, budget range |
| Lifestyle preferences | Smoking, pets, sleep schedule, guests, diet, work-from-home status — used to calculate your compatibility score |
| Listing information | Property address, photos, rent, deposit, house rules, ideal tenant criteria (for listers) |
| Verification data | Phone OTP, LinkedIn OAuth token, selfie image for liveness check, government-issued ID (optional) |
| Communications | Chat messages with matched users, support tickets, feedback, reports |
| Payment data | If you subscribe to Dveller Plus: billing name, transaction IDs (processed by our payment partner — we do not store card details) |
Information collected automatically
- Device information — device model, operating system, app version, unique device identifiers
- Usage data — screens viewed, swipes made, matches created, messages sent, time spent in-app
- Location data — approximate location (city / locality level) derived from your IP address or, with your explicit permission, precise GPS coordinates to show you nearby matches
- Log data — IP address, access times, browser type, referring URLs, pages visited
- Cookies and similar technologies — see our Cookies Policy
Information from third parties
- LinkedIn — if you choose to verify via LinkedIn OAuth, we receive your name, profile photo, headline, and connection count. We do not access your connections, messages, or post on your behalf.
- Identity verification providers — we use regulated KYC providers to verify government IDs. These providers return a verification status to us; the ID document itself is retained by the provider per their regulatory obligations.
- Payment processors — transaction confirmations and billing status for paid subscriptions.
- Analytics and attribution partners — aggregated usage data to help us understand how our Platform is used.
How we use your data
We use the information we collect for the following purposes:
- Provide the service — create your account, show you compatible matches, power the swipe experience, enable mutual-match chat, and surface listings relevant to you
- Calculate compatibility scores — our algorithm processes your budget, preferred localities, move-in timing, and lifestyle preferences against other users to produce a 0–100% match score
- Trust and safety — verify identity, detect and prevent fraud, moderate content, investigate reports, enforce our Terms of Use, and protect users from harm
- Communications — send transactional messages (OTPs, match notifications, message alerts), service updates, and — where you have opted in — marketing communications
- Product improvement — analyse aggregated usage to improve features, fix bugs, and develop new matching logic
- Legal compliance — comply with applicable laws, respond to lawful requests from law enforcement, and enforce our legal rights
We do not sell your data. Dveller does not sell your personal data to advertisers, data brokers, or any third party. We also do not use your chat messages to train AI models.
Legal basis for processing
Under the DPDP Act, we process your personal data on the following legal bases:
- Consent — when you sign up, you consent to the processing described in this policy. You can withdraw consent at any time by deleting your account.
- Legitimate uses — we process data for the performance of our service to you, to prevent fraud, and to comply with legal obligations (as permitted under Section 7 of the DPDP Act).
- Legal obligations — when required by law or court order.
Sharing and disclosures
Your data is shared only in the following limited circumstances:
With other users
When another user views your profile or a match is created, they see your display name, profile photo, bio, lifestyle tags, preferred localities + city, verification badges, and profile score. Your phone number, email address, and exact location are never shared with other users.
With service providers (Data Processors)
We share data with vendors who help us operate the Platform, bound by strict data processing agreements:
- Cloud infrastructure (AWS, Google Cloud) — data hosting
- Communications (SMS gateway, transactional email provider) — OTP and notifications
- Identity verification partners — regulated KYC providers
- Payment processor (Razorpay or equivalent) — subscription billing
- Analytics providers (in aggregated / pseudonymised form only)
- Customer support tooling
For legal reasons
We may disclose data when we believe in good faith that disclosure is necessary to comply with law, enforce our Terms, protect the rights, property, or safety of Dveller, our users, or the public, or respond to lawful requests from government authorities.
Business transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred as part of that transaction. You will be notified before any such transfer takes effect.
Data retention
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data type | Retention period |
|---|
| Active account data | For as long as your account is active |
| Account after deletion | 30 days (grace period for accidental deletion), then permanent removal within 90 days |
| Chat messages | Retained for the duration of the match; permanently deleted if a user unmatches or deletes account |
| Government ID images | Held only by our KYC provider per RBI / regulatory requirements; not stored on Dveller servers after verification |
| Selfie verification | Deleted within 30 days of successful verification; only the verification status is retained |
| Reports and moderation logs | Up to 2 years for trust and safety purposes |
| Transaction records | 8 years as required under Indian tax and corporate law |
| Backup copies | Up to 90 days in encrypted backup systems |
Your rights under DPDP Act
As a Data Principal under the DPDP Act, 2023, you have the following rights over your personal data:
- Right to access — obtain a summary of the personal data we process about you and the processing activities we undertake
- Right to correction and erasure — correct inaccurate data, complete incomplete data, update data, and request erasure of data no longer necessary for processing
- Right to grievance redressal — contact our Grievance Officer with any concerns. We will respond within the timelines prescribed under law (typically within 30 days).
- Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity
- Right to withdraw consent — you can delete your account at any time, which withdraws consent for ongoing processing
- Right to data portability — request a copy of your data in a structured, machine-readable format
To exercise any of these rights, email privacy@dveller.com from your registered email address. We will verify your identity before acting on any request.
Security measures
We take the security of your data seriously and have implemented industry-standard safeguards:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Access controls and multi-factor authentication for all employees with access to personal data
- Regular security audits and penetration testing
- Incident response procedures aligned with DPDP Act notification requirements (72-hour breach notification to the Data Protection Board)
- Segregation of production and analytics environments
Despite our efforts, no system is perfectly secure. If we become aware of a security incident that affects your personal data, we will notify you and the Data Protection Board as required by law.
International transfers
Our primary servers are located in India. Some of our service providers (for example, analytics and cloud infrastructure) may process data outside India, including in the United States and European Union. When we transfer data outside India, we ensure adequate safeguards are in place through contractual protections and we only work with providers from jurisdictions permitted under the DPDP Act.
Children's privacy
Dveller is intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe we may have data about a minor, contact privacy@dveller.com.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through an in-app notice at least 15 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
Grievance Officer
In accordance with the Information Technology Act, 2000, the IT Rules, 2021, and the DPDP Act, 2023, the contact details of our Grievance Officer are:
If you are dissatisfied with our response, you may escalate your grievance to the Data Protection Board of India under the DPDP Act, 2023.
This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka.
Terms of Use
Ground rules for using Dveller.
These Terms of Use ("Terms") govern your access to and use of the Dveller website, mobile application, and related services. By creating an account or using the Platform, you agree to be bound by these Terms. Please read them carefully — they include important information about your rights, our liability, and how disputes are resolved.
Acceptance of terms
By accessing or using the Dveller Platform, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree, you must not use the Platform.
These Terms constitute a legally binding agreement between you and Dveller Technologies Private Limited, a company incorporated in India with its registered office in Bengaluru, Karnataka.
Who can use Dveller
To use the Platform, you must:
- Be at least 18 years old
- Be legally capable of entering into binding contracts under Indian law
- Not have been previously banned from Dveller
- Not be a person barred from receiving services under Indian law or the laws of any other jurisdiction applicable to you
- Provide accurate and truthful information about yourself
Dveller is intended for personal, non-commercial use by individuals seeking residential housing arrangements. Use by real estate brokers, agents, or commercial listing aggregators is not permitted without written authorisation from Dveller.
Your account
You are responsible for:
- Maintaining the confidentiality of your account credentials
- All activity that occurs under your account
- Immediately notifying us of any unauthorised access or security breach
- Ensuring the accuracy of information in your profile
You may not create multiple accounts, impersonate another person, or use another user's account. We reserve the right to suspend or terminate accounts that violate these rules.
Platform description
Dveller is a matching platform that connects:
- Room Seekers — individuals looking for a place to live
- Flatmate Seekers — individuals with housing who need compatible co-tenants
- Listers — property owners or tenants offering rooms or full properties for rent
We use a proprietary compatibility-scoring algorithm and a mutual-interest ("swipe and match") model to surface relevant profiles and listings. Chat unlocks only when both parties express interest.
ImportantDveller is a discovery and matching platform only. We do not own, rent, manage, or represent any property. We are not a party to any rental agreement, sub-letting arrangement, payment, or transaction that takes place between users. Any arrangement is solely between the users involved.
User conduct
You agree not to:
- Post false, misleading, or fraudulent information — including fake listings, fake photos, or fake personal details
- Harass, abuse, threaten, stalk, or intimidate other users
- Discriminate against users on the basis of religion, caste, gender, sexual orientation, disability, ethnicity, or any other protected ground under Indian law
- Send spam, solicit commercial transactions unrelated to housing, or promote third-party services
- Attempt to circumvent the mutual-match gating (e.g. by scraping profiles or contacting users outside the app)
- Use the Platform to engage in illegal activity, including prostitution, trafficking, or illegal sub-letting
- Upload images that are sexually explicit, violent, hateful, or that you do not have the right to share
- Create listings for properties you do not have the legal right to rent or sub-let
- Collect information about other users without their consent
- Reverse-engineer, decompile, or interfere with the Platform's operation
- Use bots, scrapers, or automated systems to access the Platform
- Violate any applicable law or regulation in connection with your use of the Platform
Violations may result in warnings, content removal, account suspension, permanent ban, and where applicable, referral to law enforcement.
Content you provide
You retain ownership of the content you submit to Dveller (photos, bio text, listings, messages — "User Content"). By submitting User Content, you grant Dveller a worldwide, non-exclusive, royalty-free licence to host, store, display, reproduce, and use that content for the purpose of operating and improving the Platform.
You represent and warrant that:
- You own your User Content or have the necessary rights to share it
- Your User Content does not violate the rights of any third party
- Your User Content is accurate and not misleading
We may remove any User Content that violates these Terms, applicable law, or our community guidelines, at our sole discretion.
Listings and listers
If you create a listing, you additionally agree that:
- You have the legal right to rent or sub-let the property described
- All information in the listing (address, rent, deposit, photos, availability) is accurate and current
- You will not misrepresent the condition, size, or features of the property
- You will update or mark as filled / paused any listing that is no longer available
- You will comply with all applicable state and local tenancy laws, including rent control regulations where they apply
- You will not discriminate against prospective tenants on any basis prohibited by Indian law
- You will not ask for advance payment of rent or deposit through the Platform — payments should occur through regulated channels after in-person verification
Listings may be reviewed by our moderation team before going live. We reserve the right to remove, edit, or reject any listing that violates these Terms.
Matches and communications
A "Match" is created when both users express positive interest (swipe right). Once matched, a chat channel is unlocked between the two users. You may unmatch at any time, which ends the chat and removes the match from both parties.
Messages are stored to deliver them reliably. We do not routinely monitor private messages, but we may review them if a report is made or if automated systems flag suspected violations (e.g. solicitation of off-platform payment, harassment, or sharing of illegal content).
Verification
Phone-number verification (via OTP) is mandatory for all users. Additional verifications are optional:
- LinkedIn verification — via OAuth; confirms your professional identity
- Selfie verification — confirms your profile photo is a real person and matches your face
- Government ID verification — Aadhaar, Passport, or Driving Licence; processed by a regulated KYC partner
Verified status increases your profile score and improves your visibility on the Platform. A verified badge does not constitute a legal guarantee of a user's identity, character, or intent. You are solely responsible for performing your own due diligence before meeting any user or entering into any rental arrangement.
Paid subscriptions
Dveller may offer paid features or subscriptions ("Dveller Plus" or equivalent). Where you subscribe to a paid plan:
- All prices are in Indian Rupees and inclusive of applicable GST unless stated otherwise
- Payment is processed by our payment partner; we do not store card details
- Subscriptions renew automatically unless cancelled before the next billing date
- Cancellations take effect at the end of the current billing cycle; no pro-rata refunds unless required by law
- Free trial terms (if offered) convert to paid unless cancelled before the trial ends
- Price changes will be communicated at least 30 days in advance
Intellectual property
The Platform — including the "dveller" name, logo, visual design, software, content (other than User Content), matching algorithms, and all associated intellectual property — is owned by Dveller Technologies Private Limited or its licensors. These Terms do not grant you any right, title, or interest in the Platform other than the limited right to use it as permitted here.
No agent relationship
Dveller is not a real estate broker, agent, landlord, tenant, sub-letter, or legal representative of any user. We do not endorse, recommend, or verify the accuracy of any listing or profile beyond the verification badges explicitly displayed. All rental agreements, deposits, rent payments, house rules, and move-in arrangements are between users directly. We strongly recommend:
- Visiting any property in person before committing
- Verifying the lister's identity and legal right to rent the property
- Executing a written rental agreement that complies with your state's tenancy laws
- Paying deposits and rent only through traceable banking channels
- Not sharing sensitive personal or financial information through the chat prematurely
Disclaimers
THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE MAXIMUM EXTENT PERMITTED BY LAW, DVELLER DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant:
- That the Platform will be uninterrupted, error-free, or secure
- The accuracy of any profile, listing, compatibility score, or verification badge
- That any match will result in a successful rental arrangement
- The conduct, honesty, or suitability of any user you match with
Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW:
- Dveller's aggregate liability to you for any claim arising from or related to the Platform shall not exceed the total amount paid by you to Dveller in the twelve (12) months preceding the claim, or ₹5,000 — whichever is higher
- Dveller shall not be liable for any indirect, incidental, consequential, special, or punitive damages, including lost profits, lost data, or loss of goodwill
- Dveller shall not be liable for the actions, omissions, or content of any user
- Dveller shall not be liable for any loss, injury, or damage arising from in-person meetings, rental agreements, or sub-letting arrangements entered into with users encountered on the Platform
Nothing in these Terms excludes or limits liability where such exclusion or limitation is not permitted under applicable law (including liability for death, personal injury caused by negligence, or fraud).
Indemnity
You agree to indemnify and hold harmless Dveller, its directors, officers, employees, and agents from any claim, loss, liability, damage, or expense (including reasonable legal fees) arising out of or related to:
- Your breach of these Terms
- Your User Content
- Your conduct in connection with the Platform or any other user
- Your violation of any law or the rights of any third party
Termination
You may terminate your account at any time through the Settings menu in the app or by emailing support@dveller.com.
We may suspend or terminate your account, with or without notice, if:
- You breach these Terms
- We are required to do so by law
- We believe, in our reasonable judgement, that your account poses a risk to other users or to Dveller
- Your account has been inactive for more than 24 consecutive months
Upon termination, your right to use the Platform ends immediately. Sections of these Terms that by their nature should survive termination (including ownership, disclaimers, limitation of liability, and governing law) shall survive.
Governing law and dispute resolution
These Terms are governed by the laws of India. Any dispute arising out of or in connection with these Terms or the Platform shall be subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka, India.
Before initiating formal legal proceedings, we encourage you to contact us at support@dveller.com to seek an amicable resolution. Unresolved disputes may, at the election of either party, be referred to arbitration in Bengaluru under the Arbitration and Conciliation Act, 1996, before a sole arbitrator appointed by mutual agreement.
Contact us
By using the Dveller Platform, you acknowledge that you have read and understood these Terms and agree to be bound by them.
Cookies Policy
What we store, and why.
This Cookies Policy explains how Dveller Technologies Private Limited ("Dveller", "we", "us") uses cookies and similar tracking technologies on the dveller.com website and the Dveller mobile application. It should be read alongside our Privacy Policy.
What are cookies
Cookies are small text files placed on your device (computer, tablet, or phone) when you visit a website. They help the website remember information about your visit — your preferences, login state, and activity — to make your next visit easier and the site more useful.
In addition to cookies, we may use similar technologies such as pixels (small images that track whether you opened a page or email), local storage (browser-based storage for app data), and software development kits (SDKs) in our mobile app that perform similar tracking functions. For simplicity, we refer to all of these collectively as "cookies" in this policy.
How we use cookies
We use cookies for the following purposes:
- Keep you signed in so you don't have to re-enter your credentials on every visit
- Remember your preferences including your role selection, filter settings, and display options
- Secure the Platform by detecting suspicious activity, preventing fraud, and authenticating requests
- Measure performance to understand how users navigate the Platform and identify areas to improve
- Understand usage patterns through aggregated analytics, which help us design better features
- Deliver relevant communications where you have opted in to marketing messages
Types of cookies we use
Strictly necessary cookies
These are essential for the Platform to function. They cannot be switched off. Without them, services like signing in, chatting with matches, and keeping your session secure would not work. These cookies do not store personally identifiable information.
Functional cookies
These remember choices you make — such as your city, preferred language, or notification settings — so you don't have to reset them on every visit. Disabling these cookies will not break the Platform but will reduce its personalisation.
Performance and analytics cookies
These collect aggregated, pseudonymised information about how you use the Platform — which pages are most visited, how users move through flows, and where errors occur. The information helps us improve the Platform. We use providers who process data in aggregated form and do not share individual data back to us.
Security cookies
These detect unusual or suspicious activity — for example, repeated login failures or automated access attempts — and help us protect your account from unauthorised use.
Third-party cookies
Some cookies are set by trusted third parties who help us run the Platform. These may include:
- Analytics providers — to measure website and app usage
- Communications providers — for reliable delivery of transactional emails and push notifications
- Security providers — to detect and block fraudulent activity
- Customer support tools — to help our support team assist you
- Payment processors — if you subscribe to a paid plan
Each third party has its own privacy and cookies policy. We carefully select vendors and bind them contractually to data protection standards aligned with the DPDP Act.
Detailed cookie inventory
Here is a non-exhaustive list of the main cookies and similar technologies we use:
| Cookie name / type | Purpose | Duration |
|---|
| dveller_session | Keeps you signed in across pages | Session |
| dveller_auth | Persistent login token (remember me) | 30 days |
| dveller_csrf | Protects against cross-site request forgery | Session |
| dveller_prefs | Stores your filter and display preferences | 1 year |
| dveller_city | Remembers your selected city | 1 year |
| _ga / _ga_* | Google Analytics — aggregated usage metrics | 2 years |
| mixpanel / amplitude | Product analytics — anonymised event tracking | 1 year |
| sentry_session | Error monitoring and crash reporting | Session |
| cf_clearance | Cloudflare bot protection and rate limiting | 30 days |
| consent_prefs | Stores your cookie consent choices | 1 year |
Specific cookie names may change as we update our technology. This inventory is reviewed quarterly.
Your choices and controls
When you first visit dveller.com, you will see a cookie banner giving you the choice to:
- Accept all cookies
- Reject all non-essential cookies
- Customise your choices by category
You can change your preferences at any time by clicking "Cookie preferences" in the footer of the website or under Settings → Privacy in the mobile app.
Note on essential cookiesStrictly necessary cookies cannot be disabled because the Platform will not function without them. If you reject essential cookies, you will not be able to use Dveller.
Browser controls
Most browsers let you control cookies directly through your browser settings. You can usually:
- View cookies stored on your device
- Delete some or all cookies
- Block cookies from specific sites or all sites
- Set your browser to notify you before accepting cookies
For detailed instructions, visit the help pages of your browser:
- Chrome — support.google.com/chrome
- Safari — support.apple.com
- Firefox — support.mozilla.org
- Edge — support.microsoft.com
Blocking all cookies may affect your ability to use parts of the Platform.
Mobile app tracking
In our mobile app, we use mobile-specific identifiers (like your device advertising ID) and SDKs that perform similar functions to cookies. You can control app tracking through your device settings:
- iOS — Settings → Privacy & Security → Tracking
- Android — Settings → Privacy → Ads → Reset advertising ID / Opt out of ads personalisation
You can also manage notification preferences directly in the app under Settings → Notifications.
Do Not Track signals
Some browsers transmit a "Do Not Track" (DNT) signal. There is currently no industry standard for how sites should respond to these signals. At present, we do not alter our practices in response to DNT signals, but we will revisit this as the legal and technical landscape evolves under the DPDP Act.
Changes to this policy
We may update this Cookies Policy periodically to reflect changes in the technologies we use, legal requirements, or our services. When we make material changes, we will notify you via email, a website banner, or an in-app notice. The "Last updated" date at the top of this page shows when the policy was last revised.
Contact us
For more information about how we handle your data generally, read our Privacy Policy.