Privacy Policy

Last updated: 12/16/2025

1. Data Controller

HomeGrif is operated by instarea s.r.o. We process your personal data in accordance with GDPR (EU) 2016/679.

2. Data We Collect

• Newsletter: Email address, language, IP address, subscription date
• Contact form: Name, email, phone (optional), message
• Calculator: Anonymous usage data (property value, age)
• Cookies: Analytics cookies to improve services

3. Purpose of Processing

• Newsletter: Informing you about HomeGrif news. The newsletter is exclusively for sending information about HomeGrif products and services. We will never sell your data to third parties or use it for advertising purposes of other companies.
• Contact form: Responding to your inquiry
• Calculator: Providing lifetime rent estimates

4. Legal Basis

• Newsletter: Your consent (Art. 6(1)(a) GDPR) - Double opt-in confirmation
• Contact form: Legitimate interest (Art. 6(1)(f) GDPR)
• Calculator: Contract performance (Art. 6(1)(b) GDPR)

5. Data Retention

• Newsletter: Until unsubscription + 30 days for audit
• Contact data: 2 years from last contact
• Calculator data: 1 year

6. Your Rights

Under GDPR, you have the following rights:

• Right to access your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to withdraw consent (at any time)
• Right to lodge a complaint with supervisory authority

7. Third Parties

We DO NOT sell or share your data with third parties for marketing purposes.

We only use services essential for operation:

• Resend: Email delivery (EU servers)
• Render: Application hosting
• PostgreSQL: Database (EU)

8. Security

We protect your data with:

• Transport encryption (HTTPS/TLS)
• Hashed authentication tokens
• Rate limiting against attacks
• Regular security audits

9. Contact

For privacy-related questions, contact us:

Email: privacy@homegrif.com