Privacy Notice

Personal data we collect and why

• Account data (name if provided, email, login credentials or Google sign-in identifier) — to create and secure your account and authenticate you. Legal basis: performance of a contract.
• Property and document data (addresses, prices, sizes, floor plans, technical specifications, photos and other files you upload) — to generate your assessment. Legal basis: performance of a contract.
• Support messages — to answer your enquiries. Legal basis: legitimate interests in supporting customers.
• Usage and telemetry, device identifiers, IP address — for security, fraud and abuse prevention, service reliability and product improvement. Legal basis: legitimate interests.
• Order and entitlement records (plan status, subscription and purchase references) — to give you the access you paid for and to meet legal and accounting obligations. Legal basis: contract and legal obligation.
• Marketing contact data, where you opt in — legal basis: consent, withdrawable at any time.

AI processing

Content you submit is sent to our AI model providers to generate your report. Do not upload personal data about other people that is not necessary for the assessment.

Who we share data with

• Service providers and subprocessors: cloud hosting, database and storage, AI model providers, analytics and support tooling.
• Paddle.com, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting providers.
• Authorities or third parties where required by law or to protect legal rights.

We do not sell your personal data.

International transfers

Some providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or EU Standard Contractual Clauses together with appropriate technical safeguards.

Retention

Account, property and report data is kept while your account is active and for up to 12 months after closure, unless you delete it earlier. Order and tax records are kept for as long as required by law (typically 6–7 years). After that, data is deleted or anonymised.

Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, row-level database authorisation and private file storage scoped to your account.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent. Email info@apartmentcheck.com.cy and we will respond within one month. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority.

Cookies

We use essential cookies and local storage for authentication and security; these are required for the Service to work. Any analytics or marketing cookies are only set with your consent, and you can manage or clear cookies at any time in your browser settings.