Privacy Policy

1. Who we are

ChatHome is a property search and decision-support platform operating in Luxembourg. It is operated by AnalyticoTech, a French SARL. AnalyticoTech is the data controller (contact: hello@chathome.lu).

2. Data we collect

We collect the following categories of data, subject to your consent choices:

• Strictly necessary: session tokens, authentication state, language preference, security cookies.
• Analytics (with consent): page views, session duration, feature usage events — pseudonymised via Firebase Analytics.
• Personalization (with consent): search history, saved listings, vibe profile — used to tailor AI recommendations.
• Marketing (with consent): no third-party advertising is currently active.
• Search operations: we keep a redacted query or normalized filter summary, request metadata, outcome, and a monthly rotating pseudonym for search quality, reliability, and abuse prevention. We do not store raw account IDs, cookies, sessions, IP addresses, or unreadable request bodies in this dataset.

3. Legal basis

Strictly necessary processing is based on legitimate interest and contract performance (GDPR Art. 6(1)(b) and (f)). All other processing is based on your explicit consent (GDPR Art. 6(1)(a)).

Pseudonymous search-operation logging is based on our legitimate interests in maintaining search quality, reliability, and security (GDPR Art. 6(1)(f)). We apply data minimisation, deterministic redaction, restricted admin access, and short retention.

4. Your rights

Under GDPR, you have the right to access, rectify, erase, restrict, and port your personal data. You may also withdraw consent at any time via the Cookie Settings link in the footer. To exercise any right, contact hello@chathome.lu.

5. Data retention

Session data is deleted on logout. Analytics event data is retained for a maximum of 13 months. The Google Analytics browser identifier cookie may remain for up to 2 years; that cookie lifetime does not extend ChatHome's analytics-event retention. Consent records are retained for 6 months (180 days) per cookie expiry.

Pseudonymous search-operation records are automatically deleted after 30 days.

Email search alerts

When you explicitly turn on the bell for a signed-in saved search, we use your account ID, email address, language, structured search criteria, alert setting, consent-policy version and activation time, plus delivery receipts. If you request an alert without an account, we store your email address, language, structured search criteria, consent-policy version and timestamps, and random confirmation and stop tokens. For an account-free alert, we may keep the wording you typed for up to 30 days; matching continues from structured criteria after that text is removed.

We send alerts only after your explicit consent (GDPR Art. 6(1)(a)): by turning on the bell for a signed-in search, or by submitting and then confirming an account-free alert. Security and abuse prevention rely on our legitimate interests (GDPR Art. 6(1)(f)).

A signed-in saved search, including its wording, remains in your account until you delete it; turning off its bell stops alert emails. Unconfirmed account-free alerts expire after 7 days and stopped ones after 30 days. Account-free search wording and all delivery receipts are removed after 30 days. An active alert remains until you stop it.

Signed-in users can start or stop emails with the saved-search bell and delete the saved search from their account. Every account-free alert email has a one-click stop link. You can also contact hello@chathome.lu to access, correct, export, or erase this data.

6. Connected AI clients (MCP)

When you connect ChatGPT, Claude, or another MCP client, we process your account and credential identifiers and keep a security audit record containing the tool used, a minimized request summary, outcome, and duration. Search summaries may contain normalized filters and query length, but not free-form search text. MCP audit records do not contain lease-document contents or inquiry-message text.

User-provided lease PDFs or text and the resulting report are processed with Google Vertex AI and stored in your user account. Inquiry messages and any contact name or email you provide are stored and shared with the relevant chathome listing owner or agent. For externally managed listings, the tool only returns the agency's public contact details and does not send your message. Our processors include Google Cloud/Firestore, Vertex AI, and, where enabled, Firebase Analytics.

MCP security audit records are automatically deleted after 90 days. Lease analyses and inquiry conversations are retained while your account is active or until you request erasure. Some conversation messages may be retained after account deletion for recipient access and platform integrity, with access limited by conversation permissions.

You can disconnect the client or revoke its credential, use the account privacy page, or contact hello@chathome.lu to access or erase your data. Do not submit payment-card data, government identifiers, health data, passwords, API keys, or authentication codes through MCP tools.

7. Complaints

You have the right to lodge a complaint with the CNPD (Commission Nationale pour la Protection des Données) at cnpd.public.lu.

Related pages