Privacy Policy

1. Who is responsible

The operator of Apartio is the data controller for the processing described here. For any privacy question, or to exercise your rights, contact [email protected].

2. What we collect

Account data: your first and last name, email address, mobile number, and the password you set (stored only as a secure hash). For a Google sign-in, we receive your name and email from Google, not your Google password.

Listing data: the content you publish - property details, descriptions, photos, price, and location - and the contact details shown on your listings.

Usage data: technical records such as IP address, device and browser information, and actions on the Service, used to operate it, keep it secure, and produce aggregate statistics.

Consent records: whether and when you accepted the Terms, and whether you opted into marketing.

3. Why we use it, and on what basis

To provide the Service and your account, and to show your listings to buyers (performance of our contract with you). To keep the Service secure, prevent fraud and duplicate listings, and understand usage (our legitimate interests). To send service messages you need, and to meet legal obligations. To send marketing, only on your consent.

4. Marketing

By accepting our Terms you agree to receive occasional updates by email or SMS. You can withdraw this at any time from your account or via the unsubscribe link, and we will stop. Withdrawing does not affect service messages, which are necessary to run your account.

5. Who we share it with

Other users: the contact details on your listings are shown to buyers - that is the point of a listing. Do not publish anything there you do not want public.

Service providers who process data on our behalf under contract: hosting and infrastructure, object storage and image processing for photos, email delivery, and SMS delivery. They act only on our instructions.

Authorities or others where the law requires it, or to protect our rights, users, or the Service. We do not sell your personal data.

6. International transfers

Some providers may process data outside Georgia. Where that happens, we rely on safeguards required by applicable data-protection law so your data keeps an equivalent level of protection.

7. How long we keep it

We keep account and listing data while your account is active and for as long as needed for the purposes above or to meet legal obligations, then delete or anonymise it. Original photos are kept to detect duplicates; what browsers receive is resized and watermarked.

8. Security

We use technical and organisational measures to protect personal data - among them encrypted connections, hashed passwords, access controls, and separate database roles for each service. No system is perfectly secure, so we cannot guarantee absolute security.

9. Your rights

Subject to law, you may request access to your data, correct it, delete it, restrict or object to processing, receive a copy in a portable form, and withdraw consent. Much of this you can do yourself from your account. You also have the right to lodge a complaint with Georgia's Personal Data Protection Service.

10. Cookies and sessions

We use strictly necessary cookies to keep you signed in and to remember choices such as your currency and language. We do not use them to track you across other websites.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

12. Changes

We may update this Policy. When we make a material change, we will update the date above and, where appropriate, tell you. Continuing to use the Service after a change means you have seen the updated Policy.

13. Contact

For privacy questions or to exercise your rights, contact [email protected].