Privacy policy

1. Data controller

Provato Playground B.V. (trading as YourNxtHome), Stadionweg 294 H, 1076 PH Amsterdam, the Netherlands. Chamber of Commerce 42042123, VAT NL869441358B01. Email: support@yournxthome.nl.

2. What data do we collect?

We collect the following categories of personal data:

Account data

name, email address, password (stored encrypted), phone number and language preference

Profile data

profile picture and a short description, if you fill those in

Agency data

company name, Chamber of Commerce number, VAT number, business address and the members of the agency

Listing data

address, features, photos, documents and asking or rental price of the homes an agency offers

Search data

your saved homes and, if you create them, your saved searches

Payment data

the transaction history of credit purchases. The payment itself is processed by Mollie; we do not store card or bank details

Technical data

IP address, browser type and device information

3. Legal bases and purposes

We process your data on the following GDPR legal bases:

Performance of the contract

providing the platform, showing listings and processing credit purchases

Consent

placing analytics cookies and sending the email alerts you ask for yourself

Legitimate interest

improving the platform, fraud prevention and security

Legal obligation

tax administration and complying with requests from competent authorities

4. Sharing with third parties and processors

We only share your data where it is necessary for the service. We never sell your data and we do not use it for advertising. The following parties process personal data on our behalf or through us:

Transfers outside the EU. Resend, Sentry and Google are established in the United States. For transfers of personal data outside the European Economic Area we rely on the European Commission's standard contractual clauses or, where applicable, the EU-US Data Privacy Framework.

Mollie (payments)

name, email address and payment details of the payer. Established in the Netherlands (EU)

Resend (email)

your email address and name, for verification, password recovery, notifications and alerts. Established in the United States

Hetzner (hosting)

our servers, database and file storage are hosted by Hetzner in Germany (EU)

PDOK and the Land Registry (addresses and maps)

when we look up an address we send the street, house number, postcode and town to the Land Registry's open data services. When a page shows a map, your browser fetches the map images from PDOK directly, and PDOK sees your IP address. Based in the Netherlands (EU)

Google, via the Gemini API (AI features)

for AI-written texts, the property chat and studio videos we process listing data: address, features and the listing photos. We do not send names, email addresses or documents, and our data is not used to train the models. Established in the United States

Altum.ai (model value)

a property address, to retrieve a model value. Established in the Netherlands (EU)

Google Analytics 4 (website statistics)

only if you consent through the cookie banner. This concerns an anonymised IP address, your device and browser type, the pages you visit and actions such as a search. We do not send names, email addresses or address data, and advertising features are switched off. Google Ireland Limited (EU), with possible transfer to the United States

Sentry (error monitoring)

technical error data that may contain an IP address or user id. Only active once error monitoring is switched on. Established in the United States

5. Retention periods

We do not keep your data longer than necessary for the purpose it was collected for. Account data is kept for as long as you have an active account. If you delete your account we anonymise your data immediately, so that it can no longer be traced back to you. Where the law requires us to keep data longer we do so: invoices and payment data are kept for 7 years for tax purposes.

Listings an agency has offered continue to exist insofar as they belong to that agency's records; they are then no longer linked to you as a person.

6. Security

We take appropriate technical and organisational measures to protect your data against loss, theft and unauthorised access. Passwords are stored encrypted (bcrypt), all traffic runs over HTTPS, and our database is not reachable from the internet.

7. Your rights

Under the GDPR you have the following rights:

Access and portability are in your own hands. Go to your account settings and choose Download my data. You will receive a JSON file with the data we hold about you, in a format you can use elsewhere. For photos and documents the description is in the file; the files themselves you download in the app. You can delete your account in the same place.

For rectification, restriction, objection or a question about your export, email support@yournxthome.nl. We respond within 30 days.

Right of access

you can request which data we hold about you

Right to rectification

you can have incorrect data corrected

Right to erasure

you can have your data deleted

Right to restriction

you can have the processing of your data restricted

Right to data portability

you can request your data in a structured format

Right to object

you can object to the processing of your data

8. Cookies

Which cookies we use and how to change your choice is set out in our cookie policy.

9. Complaints

If you have a complaint about how we handle your data we would like to hear it at support@yournxthome.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority.