Wishplace – Privacy Policy
1. Introduction
This Privacy Policy describes how Wishplace ("the Platform," "the App") collects, uses, and shares your personal information. Wishplace is owned and operated by Alessio Di Salvo, acting as an individual (natural person) based in Spain ("the Controller," "we," "us," or "our").
By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. We are committed to protecting your privacy and ensuring that your personal data is processed in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.
2. Data Controller
Controller: Alessio Di Salvo
Location: Spain (EU)
Contact Email: alessio[at]wishplace[dot]app
For any questions regarding this Privacy Policy or your data, please contact us at the email address provided above.
3. Personal Data We Collect
We collect information that you provide directly to us, as well as information generated automatically when you use the Platform.
3.1 Account and Profile Data
- Identity Information: Name (provided by you during registration or shared by your social login provider, such as Apple or Google).
- Contact Information: Email address (provided by you or shared by your social login provider).
- Profile Information: Profile photo (if uploaded), professional role (optional), and short biography (optional).
- Preferences: Preferred currency (e.g., EUR).
- Authentication Identifiers: Unique identifiers provided by our authentication service (e.g., Firebase UID).
3.2 User-Generated Content (UGC) & Search Preferences
We collect detailed criteria that you input to define your "Wish Places" or property requirements. This data is used specifically for our matching algorithm.
- Property Preferences: Property type, price ranges, number of rooms/bathrooms, surface area (m²), furnishing status, floor preferences, energy class, heating type, availability, pet policies, garden/balcony preferences, and parking requirements.
- Parking Preferences: Type of parking (garage, box, etc.), price range, covered/uncovered status, electric vehicle charging availability, gated access, and security camera presence.
- Geographic Preferences (Wishplace): Location names, search radius, city, region, country, and precise GPS coordinates (latitude/longitude) provided for area-based searches.
- Communication: Messages sent through the Platform's Direct Chat. Note: Messages are encrypted but may be accessed for moderation, investigation of reports, or legal compliance.
3.3 Technical and Usage Data
- Device Info: Device type, operating system version, and unique device identifiers.
- Log Data: IP addresses (anonymized where possible), access times, app crashes, and hardware settings.
- Analytics: Information about how you interact with the App (e.g., features used, time spent).
3.4 Purchase Data
- Transaction Info: We track "Credit" balances and purchase history identifiers.
- Payment Processing: We do not collect or store your credit card or bank details. All financial transactions are handled securely by the Apple App Store or Google Play Store.
4. Purposes and Legal Basis for Processing
Under the GDPR, we process your data based on the following legal grounds:
- Performance of a Contract (Art. 6(1)(b) GDPR): To provide the services you requested, including the operation of our proprietary matching algorithm and recommendation engine which connects your Search Preferences with relevant listings. This also covers account management and Credit usage.
- Consent (Art. 6(1)(a) GDPR): For optional features or when you explicitly choose to share certain data (like profile photos, GPS locations for searching, or property images).
- Legitimate Interests (Art. 6(1)(f) GDPR): To improve our Platform, ensure network and information security, and prevent fraudulent activity or abuse of the service. This includes investigating reports of inappropriate behavior.
- Legal Obligation (Art. 6(1)(c) GDPR): To comply with applicable tax, accounting, or legal requirements.
5. Data Sharing and Third-Party Services
We do not sell your personal data. We only share your information with third-party service providers who assist us in operating the Platform (Infrastructure, Hosting, AI Services, and Analytics).
5.1 User-to-User Sharing (Agencies and Owners)
Important: When you voluntarily initiate a chat or share your contact/profile information with another user (such as a real estate agency, professional broker, or private property owner) through the Platform, that recipient becomes an Independent Data Controller of the information you provide to them.
Wishplace is not responsible for how these third-party users use, store, or protect your data once it has been shared with them. We recommend reviewing the privacy policies or professional practices of any agency or professional user you engage with through the App.
5.2 Service Providers
- Infrastructure & Hosting: Google Cloud / Firebase (Data storage and hosting).
- Authentication: Firebase Auth (Secure login services).
- AI & Search Services: Providers such as Perplexity AI and SerpApi.
- Analytics: Google Analytics for Firebase.
- Legal Compliance: Disclosure to authorities if required by law.
6. International Data Transfers
Wishplace is a global service. While the Controller is based in Spain, your data may be stored and processed in countries outside the European Economic Area (EEA), primarily the United States (via Google/Firebase). We ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention
- Account Data: Retained as long as your account is active.
- UGC & Preferences: Wishes, search criteria, and images are retained until you delete them or your account is closed.
- Anonymized Data: We may retain aggregated, anonymized data for statistical purposes indefinitely.
- Deletion: If you request account deletion, we will remove your personal data from our active databases within 30 days, subject to any legal retention requirements.
8. Your Rights (GDPR)
If you are located in the EEA, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data ("Right to be forgotten").
- Right to Restriction: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
To exercise these rights, please contact us at alessio[at]wishplace[dot]app. You also have the right to lodge a complaint with your local Data Protection Authority (e.g., the AEPD in Spain).
9. Security
We implement industry-standard technical and organizational measures (such as AES-256-GCM encryption for communications and secure access controls) to protect your data. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure.
10. Children's Privacy
Wishplace is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a minor has provided us with personal data, we will take steps to delete it immediately.
11. Multilingual Versions
This policy may be translated into several languages for user convenience. In the event of any discrepancy or conflict between the English version and any translated version, the English version shall prevail.
12. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the "Last Updated" date at the top of this document.
13. Contact Us