Legal information
Status: Draft — in preparation (v0)
Awaiting legal review — draft
The text below is a temporary draft, not the final legally reviewed version. The binding text will be published after review by a qualified lawyer, together with the public launch.
This draft describes what personal data we process, for what purpose, and for how long. The text is awaiting review by a qualified lawyer.
The controller's name, registered seat, registration number, and electronic and postal contact details appear at the foot of this page and on the Imprint page. We have not appointed a data protection officer: our core activity does not involve regular and systematic monitoring of data subjects on a large scale, nor does it extend to processing special categories of data on a large scale.
Contact and sign-in: email address, the short-lived identifier of the sign-in link, session identifier.
When you sign in with a Google account: we receive your email address and the permanent identifier of your Google account from Google. We store that identifier so that we recognise you at your next sign-in. The only other thing we receive from Google is whether it has confirmed your email address. We neither ask for nor receive your name, your profile picture or your contacts. When you delete your account, we delete that identifier with it.
Calendar connection for sellers: if you connect your Google Calendar, we read your calendar's free/busy status to work out your bookable slots, and record confirmed viewings in your calendar. If a slot moves or is cancelled we update or delete our own entry. We do not touch your other events: we neither read their content nor modify them. If a slot moves or is cancelled we update or delete those entries — we only touch our own. We do not read the content of your other events. You can withdraw that access at any time, at Google or here.
Data provided for the analysis: the address and characteristics of the property, uploaded photographs, and measurements captured with a phone.
Payment data: once charging begins, the fact and amount of payment, and invoicing details. While the analysis is free of charge, no such data arises. We neither see nor store card details — those are handled by the payment provider.
Usage data: error logs, the aggregate statistics kept on listing views, and the events generated when we measure how the service is used. The view statistics contain no visitor identifier — no cookie, no IP address, and no identifier derived from one — so no individual visitor can be identified from them. We describe the usage measurement, and what changes when you are signed in, under “Measuring how the service is used”.
For a phone enquiry: the transcript of the conversation and a fingerprint derived from the calling number with a secret key, from which the number cannot be reconstructed. We do not store the raw phone number.
When you book a viewing: your name, email address, phone number, and the IP address recorded when the booking is submitted. We share your name, email address and phone number with the seller whose listing you booked, so they can contact you; we use the IP address solely to protect against abuse and overload, and we do not pass it to the seller.
Marketplace contact: the content of your expressions of interest and of the messages exchanged about listings, together with their timestamps.
Producing and delivering the ordered analysis, and operating the account: performance of the contract.
Invoicing and retention of accounting records: compliance with a legal obligation.
Operation, protection against abuse and overload, aggregate visit statistics, and measuring how the service is used (linked to your account identifier when you are signed in): legitimate interest. «REQUIRES LEGAL REVIEW: documenting the balancing test and the exact formulation of the legitimate interest.»
Handling telephone enquiries: performance of the contract, or consent.
Partner introduction (for example a mortgage or financial adviser): your consent. We pass the partner only the data your consent covers; the partner processes it as an independent controller, and you can withdraw your consent at any time.
4.1 Processors. We use processors in the following areas: hosting and application operation, database, cache, running background jobs, error logging, email delivery, file storage, payment, artificial-intelligence services, map and geocoding services, and operating the phone line.
«TO BE COMPLETED: an itemised list of processors with name, seat and subject of processing. The database and the cache operate within the European Union (Frankfurt).»
Some providers operate outside the European Union, typically in the United States. In those cases the transfer takes place under appropriate safeguards, typically the European Commission's standard data protection clauses. «REQUIRES LEGAL REVIEW: naming the safeguards per provider.»
4.2 Independent controllers. Google is not our processor. It processes data relating to your Google account and your calendar under its own purposes, means and terms, as an independent controller, not on our instructions. Google's privacy policy explains this (policies.google.com/privacy). This affects you in two places:
Sign-in with a Google account. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) passes us your email address, the permanent identifier of your Google account, and whether Google has confirmed that address. We use these to identify your account. Legal basis: performance of the contract.
Calendar connection for sellers. If, as a seller, you connect your Google Calendar so that your bookable slots follow your real availability, we read your calendar's free/busy status and write confirmed viewings into it. We do not read the content of your other events. You can withdraw that access at any time, both here and in your Google account settings. Legal basis: performance of the contract. «REQUIRES LEGAL REVIEW: for a voluntary, freely revocable connection, consent may also be arguable as the basis.»
Google may also transfer data to the United States. For this it relies on the adequacy decision under the EU–US Data Privacy Framework, or — where that does not cover it — on standard data protection clauses. This transfer is Google's own processing, not ours.
The sign-in link identifier expires within minutes, and expired identifiers are permanently deleted daily.
Accounting records are retained for the period required by law.
We permanently delete the transcripts of phone calls and the fingerprint of the calling number after 30 days.
We keep the view statistics for 180 days, then delete them automatically.
We automatically delete error logs and the events generated by the usage measurement after «TO BE COMPLETED: the actual retention period configured in the error-logging service and in the PostHog project» from the moment they are created.
We keep the data you supply for the analysis — the property's address and characteristics, the uploaded photos and the measurements captured with a phone — together with the finished analysis, for as long as you do not delete that analysis yourself. The session identifier that ties an account-free order to your browser expires after 30 days.
We keep your account data — your email address and the sessions belonging to your sign-ins — until the account is closed. A session ends when it is revoked or when it expires. After the account is closed we keep only what the law or the other party's legitimate interest requires.
We keep expressions of interest and the messages exchanged about listings after your account is closed too, because the other party is involved in them. We delete an exchange permanently once the listing and both parties' accounts are gone and no message has been exchanged in it for a year.
We keep the name, email address and phone number given when booking a viewing, and the IP address recorded with it, together with the listing the booking belongs to. «TO BE COMPLETED: the actual retention period for viewing bookings and the IP address recorded with them — there is no automatic deletion process for these today.»
Content deleted by the user disappears from the interface immediately and is permanently deleted once the retention period expires.
We use only cookies strictly necessary for the service to work: the identifier of a signed-in session, and the temporary session identifier of a visitor who has not signed in, which makes it possible for your order to be attached to your account later.
We set no analytics, profiling or advertising cookies.
You can ask for access to the data we hold about you, for it to be corrected or erased, and for the processing to be restricted, and you can ask for your data in a portable form. You can object to processing based on legitimate interest.
You can submit your request on the Contact page or at the controller's contact address published at the foot of this page; we answer within the statutory deadline.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or bring court proceedings.
We transmit data over an encrypted connection, we limit access to those who need it, and signing in uses no password — only a single-use link.
If you order an analysis without an account, we keep the email address you gave when ordering.
We send the finished analysis to that address. If you clear the data stored in your browser, that same address is how you get back to the analysis later from any browser.
We keep your email address together with the analysis: if you delete the analysis, we delete the address too. You can do that at any time on the Account page, under “Your data in this browser”; you do not need to register for it.
If the email address appears on an accounting record, it stays on that record, because the law requires us to keep the record.
Today there is one situation in which you can upload a title deed: when you want to show that you own the home. The upload is voluntary, and you can post a listing without one. If we verify your ownership, the “Verified owner” badge appears on your listing.
If we introduce a listing fee in future, we may also ask for a title deed to refund it. We delete such a document once the claim has been decided; we keep the decision and its reason, not the document itself.
We delete the title deed uploaded to show ownership on the 30th day after the decision, whether or not we confirmed your ownership. We keep the decision, its date and its reason, but not the document. We also give the exact deletion date in the message about the decision.
Only the person reviewing them can open these documents, and we log every access.
We measure how the site is used: how many analyses are started, how many are completed, how many expressions of interest arrive and how many viewing appointments are booked. That shows us where the flow stalls and what is worth improving.
The measurement is carried out on our behalf by a service called PostHog, acting as a data processor. It stores the data in the European Union, in a Frankfurt data centre.
We store nothing persistently in your browser for the measurement. We set no cookie and write nothing to your browser's storage. The visitor identifier lives only in the memory of the open tab and is discarded when the tab is closed or reloaded. That is why we ask for no cookie consent, and why we do not recognise you between visits while you are not signed in.
Once you are signed in, measurement works differently: we then link the measurement data to your account identifier. That identifier stays the same across visits and devices, which is what lets us see whether you come back. What makes this possible is your account, not the fact that we measure without cookies: the absence of cookies does not stop us linking your visits once you are signed in. You can read the legal basis for measurement below.
Measurement events never carry your email address, name, phone number, exact address, message text or the text you type into the search box. For measurement, we do not record your screen or collect what you enter in forms.
The legal basis for the measurement is our legitimate interest: we want to understand how our service works so we can improve it. You can object to the measurement at any time on the Contact page.
You can block measurement: use tracking protection or a content blocker that also blocks PostHog. You can use every feature without measurement.
If you ask us to work out what purchase price fits your budget, we process the following data: your household's monthly net income, your existing monthly repayments, your available down payment, the number of earners, and the price band computed from these. The computation runs in our own system under fixed rules; we do not pass the data to any bank or mortgage broker.
The seller never sees your numbers. If you book a viewing with a confirmed prequalification, the seller only sees that your prequalification is confirmed and whether the listing price falls inside or outside your band — never an amount.
Retention: a draft is valid for 30 days from creation, a confirmed prequalification for 90 days from confirmation. Within 90 days after expiry we permanently delete the financial figures from the record, and we keep the remaining entry, which no longer contains financial data, for at most 24 months after expiry before deleting it too.
You can delete your prequalification at any time. On deletion — as on deleting your account — we delete your financial data immediately, not on the schedules above.
If you explicitly ask a named mortgage broker or financial advisor partner to contact you, we process the following data: the name and email address you provide (and your phone number, if you give one), together with the evidence of your consent — when you consented, which version of the notice text you saw, and in which language. We hand your details over only after your explicit consent, and only to the partner you chose.
You can withdraw your consent at any time. We then notify the partner to stop the contact, and your request is closed as withdrawn on our side. A later renewed consent is recorded as a new, separate entry.
Retention: after withdrawal, or after you delete your data, we delete the contact details, and we permanently remove the remaining entry within 12 months. If the referral led to an actual, completed brokerage, we keep a skeleton record containing no personal data for 8 years from completion, as required by the Hungarian Accounting Act.