Privacy Policy — NL Housing Alerts

Last updated: 2026-07-08

1. Data controller

The operator of NL Housing Alerts (KVK pending) is the data controller under the EU General Data Protection Regulation (AVG/GDPR).

Contact: support@example.com

2. Data we collect

Data	Purpose
Email address	Account, login OTP, support
Password (hashed)	Authentication
Search filters (cities, rent, bedrooms)	Monitoring
Telegram chat ID	Deliver alerts
Subscription status	Billing and access
Seen listing IDs	Avoid duplicate alerts
OTP codes (temporary)	Two-step login

We do not collect or store:

Regional Woonnet/DAK portal passwords
BSN or inkomensverklaring
Device MAC addresses

3. Legal basis

Contract performance (providing the Service)
Legitimate interest (fraud prevention, service improvement)

4. Hosting

Data is stored on EU-based servers (Hetzner DE/NL recommended). Configure DATABASE_URL accordingly.

5. Retention

Account data: until deletion request or 2 years after subscription expiry
OTP codes: 15 minutes
Seen listings: while subscription active; purged 90 days after expiry

6. Your rights

You may request access, correction, deletion, or portability via support@example.com. You may complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

7. Processors

Sub-processors may include: hosting provider (Hetzner), email (SMTP/Resend), payment (Stripe, Mollie), Telegram (message delivery only).

8. Security

Passwords hashed with bcrypt. HTTPS required in production. Session cookies HttpOnly.

9. Changes

We will notify registered users of material privacy changes by email.