Privacy Policy
Last updated: March 25, 2026
1. Who We Are
WRP2P operates the website wrp2p.com, a peer-to-peer rental marketplace. This policy explains how we collect, use, and protect your personal data.
2. Data We Collect
| Data | When | Why |
|---|---|---|
| Email address | Registration | Account creation, login, notifications |
| Name | Registration (Google) or profile | Display to other users |
| Profile photo | Google sign-in (optional) | Display on profile |
| Phone number | Profile (optional) | Contact between users |
| Location data | Posting a listing / searching | Show nearby listings, place listings on map |
| Listing content | Creating a listing | Display on platform |
| Photos | Uploading to listings | Display on platform |
| Messages | Chat between users | Enable communication |
| IP address, browser info | Every visit | Security, abuse prevention |
3. How We Use Your Data
- To provide and operate the platform
- To display your listings and profile to other users
- To enable communication between users
- To improve the platform and fix issues
- To prevent fraud and abuse
- To comply with legal obligations
We do not use your data for targeted advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
4. Third-Party Services
We use the following services to operate the platform:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase (AWS) | Database, authentication, file storage | All account and listing data |
| Google OAuth | Sign-in | Email, name, profile photo |
| Cloudflare | Hosting, CDN, DDoS protection | IP address, request data |
| OpenStreetMap / Nominatim | Map display, geocoding | Search queries (no personal data) |
Each service has its own privacy policy. We encourage you to review them.
5. Data Storage and Security
- Data is stored on Supabase servers (AWS, ap-south-1 region)
- All data is encrypted in transit (HTTPS/TLS)
- Database access is protected by Row Level Security — users can only access their own data
- Photos are stored in secure cloud storage with access controls
- We do not store passwords — authentication is handled via Google OAuth or magic links
6. Data Retention
- Account data is retained as long as your account is active
- When you delete your account, your profile, listings, and messages are permanently removed
- We may retain anonymized, aggregated data for analytics
- We may retain data as required by law
7. Your Rights
You have the right to:
- Access — view the personal data we hold about you
- Correct — update inaccurate data via your profile settings
- Delete — request deletion of your account and data
- Export — request a copy of your data
- Withdraw consent — stop using the platform at any time
To exercise these rights, contact us at privacy@wrp2p.com
8. Cookies
We use essential cookies only:
- Authentication tokens — to keep you logged in (stored in localStorage)
- No tracking cookies — we don't use Google Analytics, Facebook Pixel, or any tracking tools
- No advertising cookies
9. Children's Privacy
WRP2P is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a child under 18, we will delete it promptly.
10. International Data Transfers
Our servers are located in the Asia-Pacific region. By using WRP2P, you consent to the transfer of your data to our servers regardless of your location. We ensure appropriate safeguards are in place for international data transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify users of significant changes via the platform.
12. Contact
For privacy-related questions or requests:
Email: privacy@wrp2p.com