Privacy Policy
Last updated: 30/12/2025
OffRez Systems ("OffRez", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the OffRez mobile application and related services.
1. Information We Collect
Personal Information:
- Name, email address, and phone number
- Account role (student or landlord)
- Profile information (institution, gender, program, referral code)
- Payment information (processed securely through Paynow payment gateway)
Property Information (Landlords):
- Property listings, descriptions, and images
- Location data (address, coordinates if provided)
- Rental prices and availability
Usage and Technical Data:
- Device information (model, operating system, unique device identifiers)
- IP address and network information
- App usage patterns and interactions
- Crash reports and performance data
Communication Data:
- Messages exchanged within the platform
- Booking requests and inquiries
- Support communications
2. How We Use Your Information
- Provide and operate the OffRez platform
- Connect students with verified off‑campus rentals
- Enable landlords to manage listings and vacancies
- Communicate updates, alerts, and support messages
- Improve performance, security, and user experience
3. Data Sharing and Third-Party Services
We do not sell your personal data. We may share your information in the following circumstances:
- With other users: When you contact a landlord or student through the platform, relevant contact information is shared to facilitate communication.
- Service providers: We use trusted third-party services to operate our platform:
- Firebase (Google): For authentication, database storage, and cloud services
- Paynow: For secure payment processing
- WhatsApp Business API: For communication and notifications
- Cloudflare R2: For image and file storage
- Email service providers: For sending transactional and notification emails
- Legal requirements: We may disclose information if required by law, court order, or government regulation.
- Business transfers: In the event of a merger, acquisition, or sale, user data may be transferred as part of the business assets.
All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.
4. Data Security & Retention
Security Measures:
- Encryption of data in transit using SSL/TLS protocols
- Secure authentication and access controls
- Regular security assessments and updates
- Secure payment processing through certified payment gateways
- Limited access to personal data on a need-to-know basis
Data Retention:
- Account data: Retained while your account is active and for up to 2 years after account deletion for legal and business purposes
- Transaction records: Retained for 7 years as required by financial regulations
- Property listings: Retained until deleted by the landlord or account closure
- Communication logs: Retained for up to 1 year for support and dispute resolution
- Analytics data: Aggregated and anonymized data may be retained longer for service improvement
You can request deletion of your data at any time by contacting us or using the account deletion feature in the app.
5. Your Rights and Account Deletion
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information through your account settings or by contacting us
- Deletion: Request deletion of your account and associated data
- Data Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications while still receiving essential service notifications
Account Deletion:
You can delete your account at any time through the app settings or by contacting us at offrezsystemsltd@gmail.com. Account deletion will remove your profile, listings (for landlords), and booking history. Some data may be retained for legal compliance (e.g., transaction records) as described in our retention policy. Deletion requests are typically processed within 30 days.
6. Children's Privacy
OffRez is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at offrezsystemsltd@gmail.com and we will delete such information from our systems.
If you are between 13 and 18 years old, you must have your parent's or guardian's permission to use OffRez.
7. International Data Transfers
OffRez operates primarily in Zimbabwe. Your data may be processed and stored on servers located outside Zimbabwe (including in the United States and other countries) through our third-party service providers such as Firebase (Google) and Cloudflare. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
8. Cookies and Tracking Technologies
Our mobile app and website may use cookies, local storage, and similar technologies to:
- Maintain your login session and preferences
- Analyze app usage and improve performance
- Provide personalized content and features
You can control cookies through your device settings, though disabling certain cookies may affect app functionality.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending an email notification to registered users for significant changes
- Displaying an in-app notification when you next open the app
Your continued use of OffRez after such updates constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you may delete your account as described in Section 5.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 30 days.