Privacy policy
Last updated: 2026-09-15
This policy explains what personal data this site processes, why, for how long, and what you can do about it. It applies to the site itself and to the messages exchanged through it.
1. Who is responsible
The operator named at the top of this page is the data controller for account and listing data, and processes the messages exchanged between users on behalf of the parties to that conversation.
2. What we collect
- Account data: your name, e-mail address, password (stored only as a hash), language, country and notification preferences. - Listing data: property details, photos, location, price and the status of the advertisement. - Messages: the content of the inquiries you send and replies you receive through the site. - Payment data: the plan, amount, currency and the Stripe identifiers for the transaction. Card numbers never reach our servers. - Technical data: a keyed hash of your IP address (for abuse prevention), your session, and server logs. We do not run advertising trackers and we do not sell personal data.
3. Why we process it and on what legal basis
- To create your account and publish your listing — performance of a contract.
- To take payment and keep accounting records — contract and legal obligation.
- To deliver your messages and notifications — contract.
- To prevent fraud, spam and abuse, and to keep the site secure — legitimate interests.
- To respond to your requests and to comply with the law — legal obligation.
- To send marketing e-mails, if you ever opt in — consent, withdrawable at any time.
4. Who receives your data
We share data only with service providers that process it on our instructions: Stripe (payments), our hosting provider (servers and database), and our e-mail delivery provider (transactional e-mail). Each is bound by a data processing agreement. When you contact a seller, your message and the name you provide are delivered to that seller inside the site, and by e-mail notification. We do not publish your e-mail address or your exact address.
5. Transfers outside the EU
Some providers are established in the United States. Where data is transferred outside the European Economic Area, it is protected by an adequacy decision (such as the EU-US Data Privacy Framework) or by Standard Contractual Clauses with additional safeguards.
6. How long we keep it
- Listings and photos: until you delete them, plus up to 30 days in backups.
- Messages: 24 months after the last message in the conversation, then deleted.
- Account data: while your account is open; after a deletion request, identifiers are erased 30 days later.
- Invoices and payment records: as long as tax law requires (7 years in Belgium). Payment records are kept in anonymised form after account deletion.
- Technical logs and session records: a few weeks.
7. Your rights
You have the right to access your data, to have it corrected, to receive a portable copy, to object to or restrict certain processing, and to have your data erased. - Download a machine-readable copy of everything we hold from your account page (Export my data). - Request deletion from your account page (Delete my account). Your listings disappear immediately and the data is erased after a 30-day grace period, unless we must keep it for tax or legal reasons. - Write to the contact address above for anything else. If you are in the EU or the UK you may also complain to your national supervisory authority (in Belgium: the Data Protection Authority, APD/GBA). In the United States you may contact your state attorney general.
8. Security and automated decisions
Data is transmitted over HTTPS, passwords are hashed with bcrypt, sessions are stored server-side and expire, and access to the admin panel is restricted and logged. We take no decision about you by automated means that produces legal effects.
9. Changes
We may update this policy as the service evolves. The current version is always on this page, with the date at the top. Material changes are announced by e-mail to account holders.
support@example.com