Privacy Policy

1. Who We Are

Roamatch is a volunteer opportunity monitoring service that tracks listings from third-party platforms (such as Workaway) and delivers personalized alerts via Telegram. We are not affiliated with Workaway or any other platform we monitor.

2. What Data We Collect

3. How We Use Your Data

We use the data we collect for the following purposes:

• To operate the service — deliver real-time Telegram alerts matching your preferences
• To personalize your experience — match listings to your travel vibe, region, and profile
• To manage subscriptions — verify your plan (Free or Pro) and apply the correct features
• To process payments — via Stripe, to manage Pro subscriptions
• To improve our service — analyze usage patterns in aggregated, anonymized form
• To communicate with you — send service updates, onboarding messages, and support responses via Telegram

We do not use your data for advertising or sell it to third parties.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance — processing is necessary to provide the service you requested
• Legitimate interests — to operate, maintain, and improve Roamatch
• Consent — where you have explicitly agreed, such as receiving marketing communications
• Legal obligation — where required by applicable law

5. Data From Third-Party Platforms

Roamatch collects publicly available volunteer listing data from third-party platforms such as Workaway. We collect only data that is publicly accessible without authentication, including:

• Listing title
• Country and city
• Host type and category
• Star ratings and number of reviews
• Listing URL

We do not collect, store, or share any personal data belonging to hosts or volunteers on those platforms.

6. Telegram

Our service operates through Telegram. When you use our bot:

• Messages and interactions are processed by Telegram under their own Privacy Policy: telegram.org/privacy
• We only access the data Telegram provides to bots (User ID, name, username, and messages sent to the bot)
• We do not have access to your private Telegram conversations outside of our bot

7. Payments and Stripe

Pro subscriptions are processed through Stripe. When you upgrade:

• You are redirected to a secure Stripe Checkout page
• Stripe collects and processes your payment information
• We receive only a confirmation of payment and a Stripe Customer ID
• We never see or store your full card number, CVV, or billing address

Stripe's Privacy Policy: stripe.com/privacy

8. Data Storage and Security

Your data is stored in a secure database hosted on Supabase, a cloud database provider with enterprise-grade security. We implement the following measures:

• All data is encrypted in transit (SSL/TLS)
• Access to the database is restricted to authorized systems only
• API keys and secrets are stored as environment variables, never in source code
• We do not log message content beyond what is necessary for service operation

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

• Account data (Telegram ID, name, preferences) — retained while you use the service
• Alert history — retained for 90 days then automatically deleted
• Payment records — retained for 7 years as required by financial regulations
• Inactive accounts — data deleted after 12 months of inactivity

You can request deletion of your data at any time (see Section 11).

10. Sharing Your Data

We do not sell, trade, or rent your personal data. We may share data with:

• Stripe — to process payments
• Supabase — to store your account data and preferences
• Telegram — to deliver messages via their platform
• Law enforcement — if required by law or to prevent fraud or harm

All third-party providers are bound by their own privacy policies and data processing agreements.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Objection — object to certain types of processing
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us at: privacy@roamatch.com

We will respond within 30 days.

12. Cookies

Our website (roamatch.com) may use cookies for:

• Analytics — to understand how visitors use our site (anonymized data only)
• Session management — to maintain your browsing session

You can control cookie preferences through your browser settings. Disabling cookies may affect some website features.

13. Children's Privacy

Roamatch is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

For significant changes, we will notify active users via Telegram message.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@roamatch.com website: roamatch.com Telegram: @RoamatchBot