Privacy Policy

What we collect

Account information. When you sign in we collect your email address. If you complete your profile, we also store your first and last name. We do not collect a password — authentication is handled via magic links sent to your email.

Listing content. When you post an apartment, we store the details you provide: description, pricing, photos, availability, and the neighborhood of the listing. Photos are uploaded to and served from Amazon S3 cloud storage. Once a photo is uploaded, its direct file URL is publicly reachable on its own — not gated by login — the same way image URLs work on most listing marketplaces, so please don't upload anything you wouldn't want viewable outside the platform. Descriptions and photos may also be processed by AI models to help draft or reformat listing text — see “Artificial intelligence” below.

Usage data. We collect aggregate site-visit counts (total, daily, and monthly) to understand traffic. We do not build individual user profiles from browsing behavior or use this data for advertising.

Cookies. We set a single authentication cookie after you sign in so you stay logged in across page loads. We also use Google Analytics, which sets its own cookies to measure aggregate traffic and usage patterns. We do not use Google Analytics, or any other tool, for ad targeting, and we do not build individual behavioral profiles from it.

Artificial intelligence

We use OpenAI's AI models in a few places to save hosts time: drafting a first-pass listing description from photos you upload, reformatting a plain-text description into cleaner HTML for display, and double-checking whether a listing is a private room or a full apartment based on its description. When we import listings from Craigslist, the same kind of AI model helps us parse a raw posting into structured fields (bedrooms, price, dates, and so on) and produce an internal scam-risk score. AI output is a drafting and formatting aid, not a substitute for what you tell us — hosts can always edit the result before it's shown to anyone. This processing can be switched off platform-wide; when it is, these features fall back to plain, unformatted text rather than blocking anything.

How we use it

• To authenticate you and keep your session active.
• To display your listings and saved apartments to you.
• To send transactional emails — magic-link sign-ins and any confirmations you explicitly request.
• To understand how the platform is being used at an aggregate level so we can improve it.
• To automatically share a published listing's photos and description to our own Instagram and Telegram channels, to help it get seen by more renters.

We do not sell your data, and we do not use it for behavioral advertising. We share it only with the service providers who help us run the platform, listed below — never for their own marketing purposes.

Who we share it with

• Amazon Web Services (S3) — stores listing photos.
• OpenAI — processes listing text and photos for the AI features described above.
• ScrapingBee — retrieves publicly posted Craigslist listings we import into the platform.
• Mapbox — powers our maps and geocodes listing addresses to map pins.
• Resend — delivers transactional email (magic links, confirmations) and our newsletter.
• Google Analytics — measures aggregate site traffic (see Cookies, above).
• Google reCAPTCHA — protects our forms from spam and automated abuse.
• upload-post.com — publishes listings to our Instagram and Telegram channels on our behalf.

Each provider only receives the data it needs to perform its function for us, under its own confidentiality and security terms, and none of them may use it for their own purposes.

How long we keep it

We retain your account information and listings for as long as your account is active. If you delete your account, your profile and listings are soft-deleted immediately and purged from our systems within 30 days. Email addresses in our newsletter list are retained until you unsubscribe.

Your rights

You can view and update your profile at any time from your account settings. You can delete your account from the profile page — this removes your personal information and all your listings. If you want a copy of the data we hold about you, or have any other privacy-related request, contact us and we will respond within 30 days.

Posting a listing also grants us the content license described in our Terms of Use, including the right to display it publicly and share it on our own social channels — that license is explained there in full, not repeated here.

Security

We use HTTPS everywhere, store passwords in hashed form (we don't actually store passwords at all — magic-link auth means there's nothing to hash), and use short-lived signed tokens for authentication. Access to production systems is restricted to the core team.

No system is perfectly secure. If you discover a vulnerability, please contact us responsibly rather than exploiting it.

Changes to this policy

If we make material changes to this policy we will update the date at the top and, where appropriate, notify users by email. Continued use of the platform after changes are posted constitutes your acceptance of the revised policy.