Wroomly LLC ("Wroomly," "we," "us," or "our") operates the website wroomly.app and related services (the "Service"). This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.
We are based in Ann Arbor, Michigan, United States. Wroomly is not affiliated with the University of Michigan.
Contact: delghu@umich.edu · Wroomly LLC, 1912 Geddes Ave, Ann Arbor, MI 48104
1. Who this policy covers
This policy applies to everyone who visits wroomly.app, creates a Wroomly account, or uses Wroomly Match without an account.
You must be 18 or older to create an account. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a person under 18, we will delete it. If you believe a minor has given us information, contact delghu@umich.edu.
2. Information we collect
2.1 Information you give us
| What | Examples | Why we collect it |
|---|---|---|
| Account information | Name, email address, password (stored hashed by our authentication provider), profile photo | To create and secure your account, and to let other users know who they're dealing with |
| Student verification information | Your university Google account: the email address on it, and the fact that the sign-in succeeded | To confirm you control a university login, which we display as a "verified student" blue check |
| Listing content | Neighborhood or address, rent, dates, bedrooms and bathrooms, description, photographs, amenities | To publish your listing to other users |
| Listing screenshots | Images you upload to the "list your place" flow so our AI can extract listing details | To pre-fill your listing automatically. See §2.4. |
| Wroomly Match conversations | What you tell our AI housing concierge about what you're looking for, and the email address you give us for alerts | To understand your search and email you matching listings. No account is required, so sometimes this email is the only information we hold about you. |
| Messages | The content of messages you send other users through the Service | To deliver your messages and to investigate reports of fraud, harassment, or policy violations |
| Reports and support requests | What you tell us when you report a listing or user, or contact us | To investigate and respond |
2.2 Information we collect automatically
- Device and connection data — IP address, browser type, operating system, device identifiers, language settings
- Usage data — pages viewed, listings viewed, searches run, links clicked, referring page
- Approximate location — a general, typically city-level location inferred from your IP address. We do not collect precise GPS location from your device.
- Error and performance data — when something breaks, our error-monitoring provider records what happened, which can include your IP address, the page you were on, and technical details about your session
- Cookies and similar technologies — see §7
2.3 Information we do not collect
- We do not process payments. Wroomly does not collect, hold, or transfer rent, deposits, or any other funds. We never ask for and never store bank account numbers, card numbers, or payment credentials. Any money that changes hands between users happens entirely outside Wroomly.
- We do not run credit checks or background checks.
- We do not collect Social Security numbers or government ID numbers.
- We do not collect biometric data.
If anyone contacts you claiming to be Wroomly and asks for payment details, a Social Security number, or a wire transfer, it is a scam. Report it to delghu@umich.edu.
2.4 How we use AI, and what that means for your data
Two features use artificial intelligence:
- Listing autofill — if you upload a screenshot of an existing post, we send that image to our AI provider to extract details like rent, dates, and bedrooms.
- Wroomly Match — your conversation with our housing concierge is sent to our AI provider to interpret what you're looking for and rank listings.
What this means: the content you submit to these features is transmitted to a third-party AI provider (Anthropic PBC) to generate a response. We have contracted with that provider to process this data on our behalf. We do not permit our AI provider to use your content to train its models.
AI output can be wrong. Always check that an auto-filled listing is accurate before publishing it, and treat Match recommendations as suggestions, not advice. Please don't paste sensitive personal information into the Match chat.
3. How we use your information
- Provide the Service — create your account, publish your listings, deliver your messages, run searches, and send Match alerts
- Verify student status — confirm control of a university Google account
- Keep the Service safe — detect, investigate and prevent fraud, scams, spam, harassment, and violations of our Terms of Service or Trust & Safety Policy
- Communicate with you — verification codes, listing activity, replies, Match alerts, security notices, and policy changes
- Improve the Service — understand which features are used, diagnose errors, develop new features
- Comply with law — respond to lawful requests, enforce our agreements, establish or defend legal claims
We do not use your information to make automated decisions that produce legal or similarly significant effects about you. Wroomly Match ranks listings for your convenience; it does not decide whether anyone may rent a home.
Marketing. We may send occasional emails about Wroomly features or seasonal housing reminders. Every marketing email includes an unsubscribe link, and unsubscribing never affects your ability to use the Service. Match alerts are a service you asked for; each one includes a link to stop them. We do not send marketing texts.
4. How we share your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California and other state privacy laws.
4.1 With other users — the information you choose to publish
When you create a listing or profile, that information becomes visible to other users and, in most cases, to the public internet and search engines. That includes your display name, profile photo, verification badge, listing description, property photographs, neighborhood, price, and dates.
Please do not put anything in a listing, profile, or message that you would not want publicly associated with you. When you message another user, that user sees your message, display name, and profile photo.
4.2 With service providers
We share information with vendors who process it on our behalf, under contract, only to provide services to us:
| Provider | Purpose | What they receive |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | Technical and usage data, IP address |
| Supabase Inc. | Database, authentication, file storage, transactional email | Account data, listings, messages, uploaded photos, email addresses |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Technical error data, IP address, page and session context |
| Anthropic PBC | Listing autofill and Wroomly Match | Screenshots you upload; Match conversation content |
| Indian Type Foundry (Fontshare) | Serving the fonts used on our site | Your IP address, when your browser requests a font file |
If we add or change a provider, we will update this table.
4.3 With property managers and listing partners
Some listings on Wroomly are posted by property management companies rather than students. If you contact one of those listings, your message and the contact details you provide go to that company, and their own privacy practices apply to what they do with it.
4.4 For legal and safety reasons
We may disclose information when we believe in good faith it is necessary to comply with a law, regulation, subpoena, or court order; enforce our Terms of Service; detect or prevent fraud or security issues; or protect the rights, property, or safety of Wroomly, our users, or the public — including sharing information with law enforcement where we believe there is a risk of serious harm.
4.5 Business transfers
If Wroomly is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may transfer as part of that transaction. We will notify you before your personal information becomes subject to a materially different privacy policy.
5. How long we keep information
| Data | Retention |
|---|---|
| Account information | While your account is active, then deleted or de-identified within 90 days of account deletion |
| Listings | While published, plus 12 months after removal, for dispute resolution and safety records |
| Messages | 24 months from the date sent, then deleted |
| Wroomly Match conversations and alert emails | 12 months after your last interaction, or until you unsubscribe and ask us to delete |
| Uploaded screenshots used for listing autofill | Deleted within 30 days of processing |
| Error and performance logs | 90 days |
| Records related to a safety report, ban, fraud investigation, or legal claim | As long as necessary to resolve the matter and for any applicable limitations period |
We may retain de-identified or aggregated data indefinitely; such data can no longer reasonably be linked to you.
6. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS/TLS), hashed password storage, access controls, and hosting with established providers.
No system is completely secure. We cannot guarantee that unauthorized parties will never defeat our safeguards. You are responsible for keeping your password confidential and for activity under your account. Tell us immediately at delghu@umich.edu if you suspect unauthorized access.
If a breach affects your personal information, we will notify you and any applicable regulators as required by Michigan and other applicable law.
7. Cookies and tracking
We use:
- Strictly necessary cookies — to keep you signed in and maintain your session. The Service will not work without these.
- Functional storage — to remember preferences such as recent searches.
We do not use advertising or retargeting cookies, and we do not run third-party advertising trackers.
Your choices: most browsers let you block or delete cookies in settings; blocking strictly necessary cookies will break sign-in. We honor the Global Privacy Control (GPC) signal as a valid opt-out of any sale or sharing of personal information. Because we do not sell or share personal information, this does not change our practices, but we recognize the signal.
Do Not Track: there is no consistent industry standard for browser "Do Not Track" signals, and we do not currently respond to them. We do honor GPC as described above.
8. Your privacy rights
8.1 Rights available to everyone
You may access, correct, delete, and export your personal information, and opt out of marketing email. Much of this you can do yourself in account settings.
To make a request, email delghu@umich.edu. We respond within 45 days and may extend once by another 45 days where reasonably necessary, telling you why. We will ask you to verify your identity — typically by confirming control of the email address on the account. We will not discriminate against you for exercising any privacy right.
If you used Wroomly Match without an account, email us from the address you gave us and we will delete your conversation and alert subscription.
8.2 If you are a California resident
Under the CCPA as amended (CPRA), you have the rights above plus the right to know the categories of personal information collected, the sources, the business purposes, and the categories of third parties it is disclosed to; the right to limit use of sensitive personal information; and the right to opt out of sale or sharing.
We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that would require a right to limit.
Categories collected in the preceding 12 months, using CCPA's statutory categories:
- Identifiers — name, email address, IP address, account identifiers
- Customer records — hashed password, profile information
- Internet or network activity — browsing and usage data on our Service
- Geolocation data — approximate, city-level, derived from IP address
- Visual information — profile photographs, property photographs, uploaded screenshots
- Education information — the fact that a university sign-in was verified
- Inferences — housing preferences you describe to Wroomly Match, used to rank listings for you
You may designate an authorized agent to make a request on your behalf, with proof of authorization.
8.3 If you live in another US state with a privacy law
Residents of states including Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Rhode Island, Indiana, Kentucky, Iowa, Tennessee, Utah, and Washington have similar rights to access, correct, delete, and obtain a portable copy of their data, and to opt out of targeted advertising, sale, and certain profiling. We do not engage in those activities.
Appeals: if we decline your request, reply to our decision or email delghu@umich.edu with "Appeal" in the subject line. We respond within 45 days. If we deny your appeal, you may contact the Michigan Attorney General or the attorney general of your state.
8.4 If you are in the UK, EU, or EEA
Wroomly serves people renting in Ann Arbor, but we recognize international students may use it from abroad. Where UK or EU GDPR applies, our legal bases are:
- Performance of a contract — providing the Service you signed up for
- Legitimate interests — keeping the Service safe, preventing fraud, and improving the Service, balanced against your rights
- Consent — for marketing email and Match alerts, withdrawable at any time
- Legal obligation — where we must retain or disclose information by law
You also have rights to object to and restrict processing, and to lodge a complaint with your local supervisory authority. Your data is stored and processed in the United States; where required we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
9. Links to other sites
Listings and messages may link to third-party websites, such as a property management company or a university housing page. We do not control those sites and are not responsible for their privacy practices.
10. Changes to this policy
We may update this policy. If we make a material change, we will notify you by email or a prominent notice on the Service at least 14 days before it takes effect, and update the "Last updated" date above. Continued use after a change takes effect means you accept the updated policy.
11. Contact us
All privacy questions, requests, security concerns, and safety reports: delghu@umich.edu
Wroomly LLC · 1912 Geddes Ave · Ann Arbor, MI 48104