Privacy policy

1. Who is responsible

[to be completed], [to be completed]. Contact for your data: [to be completed].

2. What we collect

• Account: email, phone, password (never stored in clear), language.
• Listings and profile: name or trade name, texts, photos, approximate location, price.
• Verification: for agencies, legal name, trade register number and licence number, as declared.
• Your requests: name, phone and message sent to an advertiser (contact, viewing, call-back), stay requests, reviews, reports.
• Newsletter: your email, if you subscribe.
• Favourites, alerts and, in the app, your phone’s notification identifier.
• In-app purchases: their status only. We never see your bank details.
• Technical data: IP address, device, security logs, app error reports not tied to your account; audience measurement if you accept it.

3. Why

To run the service you ask for (account, listings, passing your requests to their recipient), fight fraud, send you service messages and the alerts you chose, keep the service secure and comply with the law. Audience measurement only happens with your consent.

We do not sell your data and do not use it for targeted advertising.

4. Who sees it

• Everyone: the content of a published listing and the advertiser’s name. The exact address is never shown.
• People who want to contact you: your phone number.
• The person you contact: what they need to answer you.
• Our team, for support, moderation and verification.
• The authorities, when the law requires it.
• Our technical providers, who act on our instructions:

• our servers in Europe: hosting of the site and database, sending emails;
• Cloudflare (United States): storage of photos, photo delivery, encrypted backups;
• Apple, Google, RevenueCat and Expo (United States): in-app purchases and notifications;
• OpenStreetMap (Nominatim): address and neighbourhood search;
• Sentry (United States): technical error reports;
• OpenFreeMap: map display (your browser sends them your IP address).

5. Where your data is

Our servers are in Europe. Some of the providers listed above are in the United States.

6. How long

• Account, profile and listings: until the account is closed, which deletes them. Your requests and reports are then anonymised; published stay reviews may remain.
• Ended listing (sold, withdrawn, refused): 12 months, then deleted.
• Contact, viewing and stay requests: 24 months, then your details are erased.
• Reports: 3 years.
• Technical logs and audience measurement: 12 months.
• Backups: 30 days.
• Newsletter not confirmed or after unsubscribing: 30 days.

7. Your rights

You can access your data, correct it, object to its processing and withdraw your consent. Write to [to be completed]. We answer within one month. You can also edit your information and close your account in the settings.

8. Security

Encrypted connection (HTTPS), protected passwords, encrypted backups. No system is infallible. Yasmi will never ask for your password.

9. Minors

Yasmi is for adults.

10. Changes

We may change this policy. The date of the version in force is at the top of the page; we will tell you about important changes.