Privacy Policy

Villia ("we", "us") provides a rental-alert service for the Amsterdam housing market. This policy explains what personal data we collect, why, and the choices and rights you have. We are committed to processing personal data in line with the EU General Data Protection Regulation (GDPR).

Who is responsible

The controller of the personal data described in this policy is:

For privacy questions and requests, email privacy@villia.nl.

Data we collect

• Account data: your email address and password (stored as a salted hash, never in plain text).
• Search preferences: the filters you configure (city, price range, bedrooms, etc.), used to match you with listings.
• Usage data: which listings you've viewed and which listings we've emailed you about, so we can show you what's new.
• Email delivery data: whether the emails we send you were delivered or bounced, reported back to us by our email provider.
• Billing data: if you subscribe, payment processing is handled entirely by Stripe - we never see or store your card details ourselves. We keep your Stripe customer ID, subscription status and billing period.
• Technical data: basic server logs (such as IP addresses and request details) used to keep Villia secure and running. They are rotated automatically and kept only for a limited period.

We do not collect data from the rental websites we monitor beyond the public listing details themselves (price, address, photos, etc.), and we never scrape or store personal information belonging to landlords, agents, or other renters.

Why we process it

We process your data to provide the service you signed up for: matching new listings against your searches, emailing you when one appears, and operating your account and subscription. This is necessary to perform our contract with you (GDPR Art. 6(1)(b)). We also process limited technical data, such as server logs, to keep Villia secure and reliable, based on our legitimate interest (Art. 6(1)(f)), and keep billing records where the law requires it (Art. 6(1)(c)). You can stop match emails at any time by pausing or deleting your searches, or by deleting your account.

Who we share it with

We use a small number of service providers to run Villia, each acting under a data processing agreement and only using your data to provide their service to us:

• Resend - delivers match notification emails.
• Stripe - processes subscription payments.
• Hetzner Online GmbH - hosts our servers, located in Germany.

We do not sell your personal data to anyone, for any purpose. We do not share your data with the agencies whose listings we show; when you click through to an original listing you leave Villia, and that website's own privacy policy applies.

International transfers

Some of our service providers process data outside the European Economic Area: for example, Resend stores email data in the United States, and Stripe may process payment data there as well. These transfers rely on safeguards recognised under the GDPR, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

We retain your account data for as long as your account is active. If you delete your account, your searches, match history, and viewing history are deleted immediately and any active subscription is cancelled. Invoices and other billing records are kept for as long as tax law requires (currently seven years in the Netherlands). Server logs are rotated automatically and kept only briefly.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data at any time, from Account in your dashboard.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To use any of these rights, email privacy@villia.nl. We respond within one month.

Cookies

We use a single essential cookie to keep you signed in. It is strictly necessary for the service to function and is not used for advertising or cross-site tracking, so no cookie consent banner is required for it.

Children

Villia is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as the service evolves. We'll post the updated version here with a new "last updated" date; material changes will also be communicated by email.

Contact

Questions about this policy or your data can be sent to privacy@villia.nl or by post to the address above.