Privacy policy

Last updated: January 1, 2024

• Registration details: first name, last name, email address, phone number (optional).
• Listing data: property description, photos, price, address, contact information.
• Usage data: IP address, browser type, page views, search queries, time spent on the Platform.
• Payment data: payment history (but not card details – those are handled by Stripe).
• Communication data: messages sent via chat system, emails, phone call recordings (with consent).

• Provide and improve Platform services and functionality.
• Ensure Platform security, prevent fraud and abuse.
• Communicate with you – respond to inquiries, send important notifications about your account and service changes.
• Analyze usage statistics for platform improvement and marketing purposes.
• Fulfill legal obligations and respond to law enforcement requests.

• Account creation and maintenance, listing hosting, chats and other core platform functions — performance of a contract: data is processed so that we can provide the services you use.
• AI search — performance of a contract: the query you enter is processed to produce your search answer.
• Analytics (Google Analytics) — consent: data is collected only after your active consent, which you can withdraw at any time in the cookie settings.
• Payments (once paid services are introduced) — performance of a contract and legal obligations: compliance with tax and accounting requirements.
• Platform security, fraud prevention and abuse blocking — legitimate interest: we protect the platform and its users.
• Marketing messages — consent: we currently do not send marketing messages; if we start, we will send them only after receiving your consent, which you can withdraw at any time.

• The platform uses cookies to ensure proper operation, analyze traffic, and improve user experience.
• Necessary cookies: required for basic Platform functions (login, security).
• Analytics cookies: used to collect traffic statistics (Google Analytics).
• Marketing cookies: used to provide personalized offers.
• For more information, see our Cookie Policy.

• Your data may be transferred to our partners: payment processing (Stripe), data storage (Supabase, PostgreSQL), analytics (Google Analytics), email sending.
• Data is transferred only to the extent necessary for the provision of a specific service, and only to trusted partners who comply with GDPR requirements.
• Your personal data is never sold to third parties.
• System notifications (e.g., about registration or your submitted request) are sent through the platform's own email delivery system.

• The platform's AI search feature uses OpenAI services: the search text you enter, together with supporting context data, is transmitted to the OpenAI API to produce an answer in natural language.
• Real estate market data analysis tools also use OpenAI models to generate market insights.
• The amount of data transferred for these purposes is limited to what is necessary for the feature to work; for more on OpenAI data processing, see the OpenAI Terms of Service and Privacy Policy.

• Some service providers (Stripe, Google, OpenAI) provide services from the USA, so your data may be transferred outside the European Economic Area (EEA). Such transfers are carried out in compliance with the GDPR requirements for international data transfers.

• Account data: processed while the account is active. Account deletion requests are reviewed manually and data is deleted in accordance with statutory retention obligations.
• Listing data: processed while the listing is active or until you delete it.
• Chat and inquiry data: kept as long as needed to provide the services.
• Analytics data: collected only with your consent.
• Cookies: stored in your browser no longer than specified in the cookie policy.

• We use industry-standard security measures: SSL/TLS encryption, firewalls, access control.
• We regularly perform security audits and updates.
• Access to personal data is strictly restricted – only authorized employees who need it to perform their job functions.
• Despite all measures, no online system can guarantee 100% security. In the event of a data security breach, we will immediately inform affected users.

• Right to be informed: you can find out what data of yours we process.
• Right to erasure: you can request deletion of your data ("right to be forgotten").
• Right to rectification: you can request correction of inaccurate data.
• Right to restrict: you can request restriction of data processing.
• Right to data portability: you can receive your data in a structured format.
• Right to object: you can object to direct marketing.
• To exercise your rights, write to us at: privatumas@kvartalai.lt.
• To exercise your rights, send a request by email to info@kvartalai.lt or use the platform contact form. We may need to verify your identity so that data is disclosed only to you. Requests are handled in accordance with the procedure and time limits set out in the GDPR.