← Domovara

Privacy Policy

This Privacy Policy explains how Domovara, a project operated by a private individual based in Spain ("Domovara", "we", "us"), collects, uses and protects personal data when you use the Domovara website (domovara.com) and the Domovara application (together, the "Service"). We act as data controller for the data described below.

1. Data we collect

• Contact details you submit (waitlist / contact form): name, email, agency name and any message you write.
• Account data (if you register): email, name, role and the agency you belong to.
• Agency operational data you load into the Service: contacts, listings, viewings and related notes. You are responsible for having a lawful basis to process the personal data of your own clients within the Service.
• Assistant content: the text you type or dictate to the AI assistant and the notes you ask it to process. Collected only when you actively use an AI feature.
• Voice recordings: when you use a voice feature, the audio you record is sent for transcription and then discarded — audio is not stored. Collected only while you hold/tap the microphone; on-device dictation (where available) does not leave your device.
• Technical data: IP address, browser/user-agent, and basic usage information needed to operate and secure the Service.

2. How we use it

• To provide and operate the Service and respond to your enquiries.
• To generate the AI-assisted suggestions and replies that are the core of the Service.
• To improve, secure and support the Service.
• To send you service-related communications (and, only with your consent, commercial communications).

3. Legal bases (GDPR)

We process personal data on the basis of: performance of a contract (providing the Service), your consent (e.g. the contact form and marketing), and our legitimate interest in operating and securing the Service.

4. Processors and third parties, including AI providers

We rely on the following sub-processors to run the Service:

• Supabase — database, authentication and hosting of application data.
• Vercel — website and serverless function hosting.
• Anthropic (Claude) — AI model that powers the assistant. The text you type or dictate and the working context of the screen you are on are sent, through our own backend, to Anthropic to generate the response.
• OpenAI (Whisper) — voice transcription. When you record a voice note, the audio is sent, through our own backend, to OpenAI to be converted into text. The audio is not stored after transcription.

Your permission first. The app asks for your explicit consent before sending any of your content to an AI provider, and you can withdraw that consent at any time from the Account menu in the app.

Equivalent protection. We share with these AI providers only the data needed to deliver the feature, under their API terms: they are bound to at least the same level of data protection as this policy, they do not sell your data, and API data is not used to train their models. Your data is never used for advertising.

Some providers may process data outside the EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.

5. Data retention

We keep personal data only as long as needed for the purposes above or as required by law. Waitlist contacts are kept until you ask us to delete them or they are no longer needed.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to its processing. To exercise these rights, contact us by email at hola@domovara.com or via WhatsApp at +34 628 777 555. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

7. Account deletion

You can delete your account at any time directly in the app: open the Account menu (avatar at the top of the home screen) → Delete account → confirm. This permanently deletes your user, your profile and your access to your agency; it cannot be undone. If you prefer, you can also request deletion by email at hola@domovara.com.

8. Security

We apply technical and organisational measures to protect personal data, including access control via row-level security and encryption in transit.

9. Children

The Service is intended for professional use and is not directed at children under 16.

10. Changes

We may update this policy. We will post the new version here and update the "Last updated" date.

11. Contact

Domovara · hola@domovara.com · WhatsApp +34 628 777 555