Privacy Policy

1. Who we are

Apartspace is an apartment rental platform (a CRM for owners and a marketplace for guests). The controller of your data is the Apartspace platform operator. Privacy questions: privacy@apart-space.com.

2. What data we collect

Account data (email, name, phone, city, avatar); listing and booking data; correspondence with owners; conversations with the AI assistant Solomiia; technical security logs (IP address, sign-in events). We do not collect data the service does not need.

3. Why, and on what legal basis

Contract performance: account, bookings, messages, settlements. Legitimate interest: security, abuse protection, service improvement. Consent: remembering your accessibility needs (Solomiia always asks before saving; consent is withdrawable by deleting the data) and digest emails.

4. Who we share with

Google (Gemini API, paid tier with data-for-training disabled) — processing of Solomiia chat texts. Hetzner (EU) — hosting and storage. Telegram — notifications, if you connected the channel yourself. We never sell your data or share it with ad networks.

5. How long we keep it

Anonymous Solomiia conversations — 90 days. Security logs — 12 months. Account data — while the account is active. Booking and finance records — statutory accounting periods; after account deletion they are anonymized. Backups — 14 days.

6. Your rights

Self-service in your profile: download all your data (JSON), correct your profile, delete your account and personal data (irreversible; business records are anonymized). You also have the right to restrict or object to processing, withdraw consent, and complain to a data-protection supervisory authority.

7. Special categories of data

If you mention special needs (accessibility, mobility), Solomiia uses that only within the current conversation. She may remember them for future searches only after your explicit consent, which we record with a timestamp.

8. Security

Encrypted connections (TLS), tenant data isolation, access logging, rate limiting and abuse protection. We will notify you and the supervisory authority of incidents threatening your rights within the GDPR deadlines.

Cookies have their own page: Cookie policy.