This draft is not an approved production notice. Contact messaging, viewing requests and first-run onboarding are live. They do not create an application or collect documents.
The information used
The contact account contains your verified email, first and last name, preferred language and optional phone number. A connection records the agency, property, sharing choices, notice version and consent time. Messages and viewing activity stay associated with that connection. This flow does not ask for qualification answers or documents.
What the agency sees
The connected agency sees your name, property conversation and viewing activity. Your email and phone are disclosed only when you select each option. Other agencies cannot open this connection. Authorised operators may review reported concerns and redact messages with an audit record.
Your connection and sharing choices
Connection consent is an explicit choice after the agency and property are identified. Email and phone sharing are separate, unchecked options. You can change these choices or end the connection in your conversation. Ending it immediately prevents further agency access and messages; it does not delete your account.
Viewing appointments
The viewing calendar records requested, confirmed, replaced and cancelled appointments, the time, and optional notes of up to 500 characters. Dates are stored in UTC and displayed in Europe/Luxembourg time. Internal agency notes are not visible to tenants. Google Calendar and Microsoft 365 are used only after this person connects them. Tokens stay encrypted in the EU. This option stays off until calendar sync is enabled.
Notifications and access records
Email notifications may announce new activity or a viewing reminder and link to sign-in. You can choose immediate, daily or no email. They do not include message text, phone numbers or private property details. In-app alerts stay inside the signed-in account.
Search, assignment, invitations and blocking
You can search only your authorised conversations, assign an agency member, invite a tenant the agency already knows, and block an agency. An invitation still requires the tenant’s verified consent. Blocking immediately prevents further agency access.
Proposed retention for review
The proposed schedule closes a connection after 90 days without activity and removes or irreversibly anonymises message content 90 days after closure or revocation, unless a documented legal need applies. Final periods, backup deletion and any exception require approval before launch. This proposal is not an approved retention commitment.
Access, correction and deletion
Your signed-in account provides contact-detail editing, connection withdrawal and data export, restriction and deletion controls. These rights remain accessible when the contact feature is paused. You can also use the existing rights and privacy contact routes.
What must be approved before launch
The responsible owner and privacy adviser must confirm controller roles, lawful bases, processors, transfers, retention, security review and any required impact assessment. Production activation is a separate decision. This draft makes no legal-compliance claim.
Open your data-rights controls · Existing privacy information