privacy | GamLuWaas

1. Introduction

Welcome to GamLuwaas ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our real estate platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gamluwaas.com (the "Site") and use our services.

Please read this Privacy Policy carefully. By accessing or using our Site and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our services:

Account Information:
Email address
Full name
Password (encrypted, we cannot see your actual password)
Phone number
Profile image (optional)

Landlord Property Owner Information:
Business name (optional)
Contact information
Professional credentials (optional)
Years of experience (optional)
Business description (optional)

Property Listing Information:
Property title and description
Monthly rent and security deposit amounts
Property address and GPS coordinates (latitude/longitude)
Property images and media
Room type (entire place, single room, etc.)
Amenities and features
Availability dates
Minimum and maximum stay requirements
Target tenant preferences

Inquiry and Communication Data:
Messages sent between renters and landlords
Contact request

Payment Information:
Listing credit purchases
Transaction history
Note: We do not store your credit card details. All payment processing is handled securely by our payment provider (Waychit).

2.2 Information Automatically Collected

When you access our Site, we automatically collect certain information:

Device and Usage Information:
IP address
Browser type and version
Operating system
Device type (mobile, tablet, desktop)
Referring website
Pages visited and time spent
Click patterns and interactions
Date and time of access

Location Information
Approximate location: Derived from your IP address (cityregion level)
Precise location: Only with your explicit permission when using the "Nearby Properties" feature or "Use Current Location" button
You can disable location services in your browser settings at any time

2.3 Information from Third Parties

We may receive information about you from third-party services:

Authentication Providers (Clerk)
Account verification status
Login activity and security events
OAuth provider data (if you sign in with Google, etc.)

Payment Processors (Waychit)
Payment confirmation status
Transaction references
Payment method type (without sensitive card details)

Communication Services
Email delivery status
Email open rates (for transactional emails)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain Our Services:
Create and manage your user account
Facilitate property listings and searches
Process rental inquiries between landlords and potential tenants
Enable location-based property searches
Process payments for listing credits

3.2 To Improve User Experience:
Personalize property recommendations
Show nearby properties based on your location
Remember your preferences and settings
Analyze usage patterns to improve our platform

3.3 To Communicate with You:
Send account-related notifications (security alerts, password resets)
Deliver inquiry notifications between renters and landlords
Send transactional emails (payment confirmations, listing approvals)
Provide customer support

3.4 For Security and Fraud Prevention:
Verify user identities
Detect and prevent fraudulent activities
Protect against unauthorized access
Ensure compliance with our Terms of Service

3.5 Legal Compliance
Comply with applicable laws and regulations
Respond to legal requests and court orders
Protect our rights, privacy, safety, or property

4. Legal Basis for Processing (GDPR Compliance)

If you are in the European Union, we process your personal data based on the following legal grounds:

Consent: When you explicitly agree to specific processing (e.g., location services)
Contract Performance: To fulfill our contractual obligations to you
Legal Obligation: To comply with applicable laws
Legitimate Interests: For fraud prevention, security, and service improvement

5. How We Share Your Information

5.1 With Other Users:

For Landlords:
Your profile information (name, business name, contact details) is visible to renters who contact you
Your property listings are publicly visible on the platform

For Renters:
When you contact a landlord, they will see your name and the message you send
Your contact information is shared only when you initiate communication

5.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our platform:

All third-party service providers are contractually obligated to:
Use data only for the specified purposes
Maintain appropriate security measures
Comply with applicable data protection laws

5.3 For Legal Reasons:
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 Business Transfers
If GamLuwaas is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email andor a prominent notice on our Site of any change in ownership or uses of your personal information.

6. Data Storage and Security

6.1 Where We Store Your Data
Your data is stored in secure cloud environments:

Primary Database: Sanity.io (US-based servers)
Authentication Data: Clerk (US-based servers)
Payment Data: Waychit (Gambia-based service US-Based servers)

6.2 Data Security Measures
We implement appropriate technical and organizational measures to protect your data:

Encryption: All data transmitted between your browser and our servers uses TLS 1.3 encryption
Password Security: Passwords are hashed using bcrypt with salt
API Security: Rate limiting and authentication required for all API endpoints
Access Controls: Role-based access controls for internal systems
Regular Audits: Security assessments and penetration testing
Data Minimization: We only collect data necessary for our services

6.3 Data Retention

You can request deletion of your account and associated data at any time (see Section 9).

7. Cookies and Similar Technologies

7.1 What Are Cookies
Cookies are small text files stored on your device when you visit websites. They help us provide you with a better experience by remembering your preferences and enabling certain features.

7.2 Types of Cookies We Use

7.3 Third-Party Cookies
Some of our third-party service providers may also use cookies:

Clerk: Authentication session cookies
Sanity: Content delivery optimization

7.4 Managing Cookies
You can control cookies through your browser settings:

Chrome: Settings > Privacy and security > Cookies
Firefox: Settings > Privacy & Security > Cookies
Safari: Preferences > Privacy > Cookies
Edge: Settings > Cookies and site permissions

Please note that disabling cookies may affect the functionality of our platform.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

8.1 Access and Portability
Right to Access: Request a copy of the personal data we hold about you
Right to Portability: Receive your data in a structured, machine-readable format

8.2 Correction and Deletion
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data
Right to Restriction: Limit how we use your data

8.3 Objection and Control
Right to Object: Opt-out of certain data processing activities
Right to Withdraw Consent: Withdraw previously given consent (e.g., for location services)

8.4 How to Exercise Your Rights
To exercise any of these rights, please contact us at:

Email: privacy@gamluwaas.com
Address: [Sukuta Highway Albaraka Junction]
Response Time: Within 30 days

We may need to verify your identity before processing your request to protect your privacy and security.

9. Account Deletion

9.1 How to Delete Your Account

You can delete your account at any time by:

Logging into your dashboard
Navigating to Profile Settings
Clicking "Delete Account"
Confirming the deletion

9.2 What Happens When You Delete
Upon account deletion:
Your profile information is permanently deleted
Your property listings are removed from public view
Your inquiry messages are anonymized (message content remains but attribution is removed)
Payment records are retained for legal compliance but disassociated from your identity

9.3 Data That May Be Retained
We may retain certain data even after account deletion:
Aggregated, anonymized analytics data
Legal compliance records (e.g., payment history for tax purposes)
Data required to resolve disputes or enforce agreements

10 .International Data Transfers

GamLuwaas operates in The Gambia, but our service providers may be located in other countries. When we transfer your data internationally, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs): For transfers to service providers in the US and EU
Adequacy Decisions: Transfers to countries with EU adequacy decisions
Data Processing Agreements: All third-party providers sign DPA agreements

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Voice Data Processing (Speech-to-Text)

12.1 How It Works
Our platform offers an optional speech-to-text feature to help users input text (e.g., property descriptions). When you click the "Speak" button:

Your browser requests microphone permission
If granted, audio is processed locally in your browser
Transcribed text is sent to our servers (audio is not stored)

12.2 Voice Data Privacy
No Storage: We do not store or record your voice audio
Browser API: Uses the Web Speech API built into your browser
Optional: You can always type instead of using voice input
Permissions: You can revoke microphone access in your browser settings at any time

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

13.1 How We Notify You
Material Changes: We will notify you via email at least 30 days before changes take effect
Minor Changes: Changes will be posted on this page with an updated "Last Updated" date
Continued Use: Your continued use of our services after changes constitutes acceptance

13.2 Review History

April 17, 2026: Initial privacy policy published

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GamLuwaas Privacy Team

Email: privacy@gamluwaas.com
Website: gamluwaas.comprivacy
Mailing Address: [Sukuta Highway Albaraka Junction]

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of The Gambia, without regard to its conflict of law provisions. Any disputes arising under this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of The Gambia.

16. Acceptance of Privacy Policy

By using GamLuwaas, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our Site or services. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

GamLuwaas
Making your first home journey simple and stress-free.