Roogle – a platform operated by TNJ Alpine Technologies Sàrl
Version dated 07.07.2026
Document prepared for publication on Roogle. It should be reviewed and approved by your legal counsel before final publication.
This Privacy Policy informs users of the website https://roogle.app/ and Roogle’s associated services about the processing of personal data carried out by TNJ Alpine Technologies Sàrl in its capacity as data controller.
Roogle is a search and alert platform that allows users to browse, filter, save and receive rental, subletting, lease takeover and temporary accommodation opportunities. At present, Roogle only references listings and information obtained from publicly accessible or publicly viewable sources.
TNJ Alpine Technologies Sàrl applies the principles of transparency, proportionality, purpose limitation, security and data minimisation. The data collected is limited to what is necessary to provide the services, secure the platform, manage accounts, subscriptions, payments, alerts and user requests.
This Policy takes into account the Swiss Federal Act on Data Protection (FADP) and, where the GDPR applies, the European Union General Data Protection Regulation, particularly for users located within the European Union.
1. Main definitions
Account: Personal area allowing users to manage favourites, saved searches, alerts, subscriptions, profiles, preferences and notifications.
Personal data: Any information relating to an identified or identifiable natural person, directly or indirectly.
Credentials: E-mail address, password in protected form or any other authentication method allowing access to the Account.
Platform: The website https://roogle.app/, its pages, interfaces, APIs, user areas and associated services.
Services: Roogle’s features, including structured listing browsing, filters, favourites, saved searches, alerts, access to original sources, subscriptions, Passes, support and analysis or detection features.
Source: A website, social network, channel, forum, community or other public medium through which a rental opportunity may be identified.
User: Any person who accesses, browses or uses Roogle, with or without an Account, under a free or paid plan.
2. Data controller
The data controller is:
- TNJ Alpine Technologies Sàrl, a limited liability company incorporated under Swiss law;
- Registered office: Rue de la Tour-de-l'Ile 4, 1204 Geneva, Switzerland;
- UID: CHE-441.637.740;
- Federal number: CH-660.1.806.026-9;
- Share capital: CHF 20,000;
- Website: https://roogle.app/;
- Contact e-mail: contact@roogle.app;
- Telephone: Not provided;
- VAT number: Not applicable at present, as the company is not yet subject to Swiss VAT.
No formal Data Protection Officer has been appointed at present. Requests relating to personal data may be sent to contact@roogle.app.
3. Sources and collection of personal data
TNJ Alpine Technologies Sàrl collects data directly from the User, particularly when an Account is created, features are used, a subscription or Pass is purchased, alerts are configured, Telegram notifications are activated or a support request is submitted.
Certain data is collected automatically during browsing, including technical data necessary for operation, security, audience measurement, interface improvement or abuse prevention.
Roogle may process information obtained from public sources in order to structure and reference rental opportunities. This information may include the link to the Source, city, country, price, surface area, availability dates, publication date, Source type, images replaced or hidden on Roogle and certain metadata useful for classification or duplicate detection. Roogle limits the reproduction of personal data relating to listing authors as much as possible and prioritises redirection to the original Source.
Users are requested not to communicate sensitive data through forms, support conversations or messages sent to Roogle unless this is strictly necessary for the processing of their request.
4. Minors
The Platform is primarily intended for adult Users or Users who have legal capacity.
Where a minor uses the Services, they confirm that they have obtained the authorisation of their legal representative or are otherwise authorised to do so under applicable law.
5. Data processing activities
The table below summarises the principal processing purposes, applicable legal bases or justifications, categories of data concerned and indicative retention periods.
Retention periods may be adjusted where a longer period is required by law, necessary for the defence of the company’s rights or required to prevent fraud or abuse.
| Purpose | Legal basis / justification | Categories of data | Indicative retention periods |
|---|---|---|---|
| Creation and management of the User Account - Registration, login and authentication - Profile and preference management |
Performance of a contract or pre-contractual measures. Legitimate interest in securing the Service. |
E-mail address, credentials, password in protected form or managed by the authentication provider, User ID, language, preferences, creation date, IP address and technical logs. | For the lifetime of the Account, followed by limited archiving for evidentiary, security or legal compliance purposes. Login logs: limited period, generally up to 6 months unless an incident occurs. |
| Provision of Roogle Services - Structured listings - Filters, favourites and saved searches - Access to original Sources |
Performance of a contract. Legitimate interest in providing, improving and securing the Service. Consent where required. |
Account data, favourites, searches, alerts, cities and countries, filters, clicks to original Sources, recent history, interface settings and technical data. | For the lifetime of the Account or until deletion by the User. Certain technical data may be temporarily retained for security, statistical or evidentiary purposes. |
| Alerts and notifications - Telegram for paying Premium Users - Instant, hourly, daily or weekly frequency |
Performance of a contract where the alert is requested. Consent or User preference depending on the communication channel. Legitimate interest in ensuring deliverability and security. |
E-mail address, alert preferences, cities and countries, filters, frequency, subscription status, Telegram identifier or information necessary for delivery where the User activates Telegram. | Until the alert is disabled, the Account is deleted or the User objects. Deliverability logs: limited period necessary for support and security. |
| Subscriptions, Passes, payments and invoicing - Creation of payment sessions - Premium management - Renewals, cancellations and failed payments |
Performance of a contract. Legal accounting and tax obligations. Legitimate interest in managing unpaid amounts and maintaining evidence. |
E-mail address, Stripe customer identifier, plan, subscription status, billing data, amount, currency and transaction identifiers. Full bank card data is processed by Stripe and is not stored by Roogle. |
For the duration of the contractual relationship, followed by retention in accordance with applicable accounting and tax obligations, which may extend up to 10 years for certain supporting documents. |
| User support - Crisp chat - Responses to requests - Incident follow-up |
Performance of a contract or pre-contractual measures. Legitimate interest in responding to requests, improving the Service and defending the company’s rights. Consent where support involves non-essential trackers. |
Name or username where provided, e-mail address, message content, screenshots or documents voluntarily submitted, technical data useful for diagnosis and Crisp conversation history. | For the period necessary to process the request, followed by retention for up to 2 years in principle. Up to 5 years where the request relates to a contract, dispute or evidentiary requirement. |
| Audience measurement and product improvement - Google Analytics - Microsoft Clarity - Statistics, heatmaps and session replay where activated |
Consent where required for non-essential cookies or trackers. Legitimate interest for strictly necessary or exempt statistics where the applicable conditions are satisfied. |
Online identifiers, cookies, browsing data, pages viewed, events, device, browser, approximate country or city, truncated or otherwise configured IP address and anonymised or pseudonymised interactions. | According to the settings of the relevant tool and the User’s choice. Audience measurement cookies are generally limited to a reasonable duration. Consent choices are retained for approximately 6 months. |
| Marketing and advertising measurement - Meta Pixel - Campaign performance measurement - Audiences and conversions |
Prior consent where required. Legitimate interest only where permitted by law and without placing non-essential trackers. |
Online identifiers, cookies or pixels, pages viewed, conversion events, device, browser, IP address and data transmitted to Meta according to the applicable configuration. | According to Meta’s settings and the User’s consent preferences. Deactivation is possible through the cookie management module or browser and Meta account settings. |
| Transactional e-mails - Account verification - Password reset - Necessary notifications - Service-related messages |
Performance of a contract. Legitimate interest in ensuring security and deliverability. Legal obligations where applicable. |
E-mail address, message content, sending metadata, deliverability logs, errors or bounced messages and the Resend service provider. | For the period necessary for sending, support and proof of delivery, with limited retention according to the provider’s settings. |
| Security, abuse prevention and maintenance - Protection against abusive scraping, attacks and fraud - Logs, monitoring and backups |
Legitimate interest in securing Roogle. Legal obligations in the event of an incident. |
IP address, login logs, user agent, timestamps, errors, technical identifiers, sensitive actions and administration records. | Limited period proportionate to the risk, generally up to 6 months for standard logs. Longer retention may apply in the event of an incident, fraud, dispute or legal obligation. |
| Management of data subject rights requests - Access, rectification, deletion, objection and portability |
Legal obligations under the FADP and GDPR. Legitimate interest in documenting the handling of requests. |
Identity, e-mail address, request content, proof of identity where necessary and processing history. | For the period necessary to process the request, followed by limited archiving for evidentiary purposes, generally up to 6 years depending on the legal risk. |
| Data obtained from public Sources - Structuring of listings - Duplicate detection - Redirection to the original Source |
Legitimate interest in providing a search and alert engine. Data minimisation measures. Respect for the rights of data subjects. |
Public information relating to the listing, including the Source link, city, country, price, surface area, dates, offer type, publication date, Source and non-sensitive elements necessary for indexing. Personal contact details are avoided, hidden or limited where possible. |
For the period during which the listing remains relevant and current. Expired, deleted or obsolete listings may be archived, deleted or made non-public in accordance with Roogle’s rules. |
6. Cookies, trackers and consent
Roogle uses cookies and similar technologies to operate the website, maintain User sessions, secure the Platform, remember preferences, measure website traffic, improve the product, provide online support and measure certain marketing campaigns.
Strictly necessary cookies may be placed without consent where they are essential for the requested Service.
Non-essential cookies, including Google Analytics, Microsoft Clarity, Meta Pixel and, depending on how it is deployed, the Crisp widget, are subject to prior consent where required by law.
A separate Cookie Policy provides further details about the categories of trackers, their purposes, the relevant service providers and the methods available for managing preferences.
7. Recipients and processors
Personal data may be disclosed, within the limits of their respective responsibilities and on a need-to-know basis, to the following recipients:
- Authorised personnel within TNJ Alpine Technologies Sàrl;
- Hetzner Online GmbH for hosting;
- Supabase for authentication, database management and certain backend services;
- Stripe for payments, subscriptions and billing-related information;
- Resend for sending transactional e-mails;
- Telegram where a Premium User voluntarily activates Telegram notifications;
- Google Analytics for audience measurement where the User has given consent;
- Meta Pixel for advertising measurement where the User has given consent;
- Microsoft Clarity for behavioural analysis, heatmaps and session replay where the User has given consent;
- Crisp for online support and the management of support conversations;
- External advisers, accountants, lawyers and administrative or judicial authorities where necessary or legally required.
At present, the declared operational service providers for Roogle are Hetzner, Supabase, Stripe, Resend, Telegram, Google Analytics, Meta Pixel, Microsoft Clarity and Crisp.
This Policy must be updated if additional service providers are introduced.
8. Hosting and location of data
The website is hosted by:
Hetzner Online GmbH
Industriestr. 25 91710 Gunzenhausen Germany
Technical services may be operated through Supabase, Stripe, Resend, Telegram, Google Analytics, Meta Pixel, Microsoft Clarity and Crisp.
Depending on the relevant service provider and its infrastructure, certain data may be processed or accessed from Switzerland, the European Union, the European Economic Area, the United States or other countries.
9. International data transfers
Where personal data is transferred to a country that does not benefit from a level of protection recognised as adequate by the competent authorities, the company endeavours to rely on appropriate safeguards.
These may include standard contractual clauses, contractual data protection commitments, data minimisation settings, supplementary technical measures or any other mechanism recognised under the FADP or, where applicable, the GDPR.
The use of services such as Google Analytics, Meta Pixel, Microsoft Clarity, Crisp, Telegram, Stripe, Supabase or Resend may involve international processing or access.
Non-essential trackers are activated only after consent where such consent is required.
10. Security measures
TNJ Alpine Technologies Sàrl implements technical and organisational measures appropriate to the level of risk in order to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures include:
- Secure HTTPS connections;
- Access management and restriction to authorised personnel;
- Secure authentication and session management;
- Protected password storage or delegation to an authentication provider;
- Access tokens and authorisation controls;
- Rate limiting and anti-abuse mechanisms where necessary;
- Regular backups and restoration procedures;
- Technical logging and security monitoring;
- Separation of environments where applicable.
In the event of a security breach likely to result in a high risk to the privacy, personality or fundamental rights of the persons concerned, the company will take the measures required by applicable law.
These measures may include notifying the competent authorities and, where necessary, the persons concerned.
11. Automated analysis, artificial intelligence and absence of automated legal decisions
Roogle may use automated processing to structure listings, detect duplicates, identify inconsistencies, compare prices, improve the relevance of alerts or display risk or quality indicators.
These features are provided for informational and search assistance purposes.
They do not constitute automated decision-making that produces legal effects or similarly significantly affects the User within the meaning of the GDPR.
They do not replace the User’s own verification or the information available from the original Source.
12. Rights of data subjects
Subject to the conditions and limitations provided by applicable law, data subjects may have the following rights:
| Right | Description |
|---|---|
| Right of access | Obtain information about the personal data being processed and, where applicable, receive a copy. |
| Right to rectification | Request the correction of inaccurate or incomplete personal data. |
| Right to erasure | Request the deletion of personal data where its continued retention is no longer justified. |
| Right to object | Object to certain processing activities based on legitimate interests or to certain communications. |
| Right to restriction | Request the temporary restriction of certain processing activities. |
| Right to data portability | Receive certain personal data provided by the User in a structured format where the GDPR applies. |
| Right to withdraw consent | Withdraw consent at any time for processing based on consent, including non-essential trackers. |
| Right to lodge a complaint | Contact the competent supervisory authority where the data subject considers that their rights have not been respected. |
13. Exercising data protection rights
Requests relating to personal data may be sent by e-mail to:
To facilitate the processing of the request, the data subject is invited to clearly indicate:
- The purpose of the request;
- The Account or e-mail address concerned;
- The relevant Roogle or Source links, where applicable;
- Any information that may help identify the data concerned.
The company may request additional information or proof of identity where necessary to prevent identity fraud or to process the request correctly.
Documents submitted for this purpose will be retained only for the period strictly necessary.
Where the GDPR applies, the standard response period is one month from receipt of the complete request. This period may be extended under the conditions provided by the GDPR.
14. Complaints to supervisory authorities
In Switzerland, data subjects may contact the Federal Data Protection and Information Commissioner (FDPIC) if they consider that their rights have not been respected.
Where the GDPR applies, Users may also lodge a complaint with the competent supervisory authority in their place of residence, place of work or the place of the alleged infringement.
For Users located in France, the competent authority is the CNIL.
15. Account deletion and alert deactivation
Users may request the deletion of their Account or disable certain features, including e-mail or Telegram alerts, from their personal area where the relevant feature is available, or by contacting contact@roogle.app.
Deleting the Account results in the deletion or anonymisation of associated data where its continued retention is no longer necessary.
However, certain data may be temporarily retained where necessary for security purposes, compliance with a legal obligation, invoicing, evidence or the defence of the company’s rights.
16. Links to third-party websites
Roogle may contain links to original Sources or third-party websites, including social networks, forums, groups, listing platforms or partner websites.
The company has no control over the privacy policies of these third-party websites.
Users are encouraged to review the relevant privacy policies before providing personal data or continuing to browse those websites.
17. Changes to the Privacy Policy
TNJ Alpine Technologies Sàrl may amend this Policy to reflect changes to the Services, applicable regulations, service providers or internal practices.
The applicable version is the version published on https://roogle.app/ on the date it is consulted.
In the event of a material change, the company may inform Users through any appropriate means, including through the website, the Account area or by e-mail where relevant.
18. Contact
For any questions relating to this Policy or the processing of personal data by Roogle, Users may contact:
- TNJ Alpine Technologies Sàrl
- Rue de la Tour-de-l'Ile 4, 1204 Geneva, Switzerland
- E-mail: contact@roogle.app
- Website: https://roogle.app/