COMFY LEGAL
Privacy Policy
This policy explains what Comfy ("Comfy", "we") collects when you use comfy.mn, why, and the choices you have. Last updated 2026-10-10.
What we collect
Account: your mobile number, used to sign you in with a one-time code, plus the name, optional email and language preference you enter.
Listings: details about a property you list, including photos, address, rent and features. The exact address is shown only to Comfy staff and to a renter whose application for that property has been approved.
Applications: your requested move-in date, monthly income, employer and identity documents you upload when applying to rent. These are visible only to you and to Comfy staff who review applications.
Leases and payments: lease terms, repayment schedules, payments recorded against them and owner payouts.
Technical: IP address, browser type and the pages you visit, collected through standard server logs and error monitoring.
How we use it
To sign you in, operate your account, publish listings, review applications, prepare leases and keep a record of payments and payouts.
To send you one-time sign-in codes by SMS and transactional notifications about your own activity, such as an application decision or a payment reminder. We do not send marketing messages.
To comply with legal obligations, prevent fraud and resolve disputes.
Mobile information and SMS
You opt in to receive SMS by entering your mobile number on our sign-in page and requesting a code. Message frequency varies with your activity. Message and data rates may apply.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who help us deliver the service, such as our SMS and hosting providers, is permitted only for that purpose. Text messaging opt-in data and consent will not be shared with any third parties.
Reply STOP to any notification to stop receiving notifications, or HELP for assistance. You can also contact support@comfy.mn. Stopping notifications does not prevent sign-in codes you request yourself.
Who we share it with
Service providers that process data on our behalf: Supabase (database, authentication and file storage, hosted in Seoul, South Korea), Vercel (web hosting), Twilio (SMS delivery) and error-monitoring tooling. They may process your data only to provide their service to us.
Between users, only as needed to complete a rental: an owner sees the status and first name of an applicant, and a renter with an approved application sees the property address. Contact details are exchanged through Comfy staff.
Authorities, when required by Mongolian law.
Storage and retention
Your data is stored outside Mongolia with the providers named above. By using Comfy you consent to this transfer.
Account data is kept while your account is active. Identity documents and income details from applications that were declined, withdrawn or expired are deleted twelve months after the decision. Lease, payment and payout records are kept for the period required by Mongolian accounting and tax law.
You can ask us to correct your details or delete your account by writing to support@comfy.mn. Records we must keep by law are retained but no longer used for any other purpose.
Security
Data is encrypted in transit, access is restricted by role, identity documents are stored in private storage reachable only through short-lived links, and all staff actions on applications, leases and payments are logged.
Contact
Questions about this policy: support@comfy.mn.
This document is reviewed with legal counsel before Comfy signs its first lease. The date above is the version you agreed to.