Privacy Policy

1. Who We Are

One Place is an AI-powered real estate search engine operated by:

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

• Email address (required for account creation)
• Name (optional, for personalization)
• Authentication credentials (securely hashed, never stored in plain text)

2.2 Property Search Data

• Search queries and filters
• Saved properties and favourites
• Location preferences
• Chat conversations with our AI search assistant

2.3 Automatically Collected Data

• Device information — device type, browser, OS
• Usage data — pages visited, time spent, click patterns
• Geolocation — country and city from IP address
• Cookies — as described in our Cookie Policy

3. How We Use Your Data

We use your data for:

• Providing property search services and personalized results
• Processing AI-powered search queries
• Sending essential account notifications
• Improving our services through aggregated analytics
• Preventing fraud and abuse
• Complying with legal obligations

Legal Basis for Processing (GDPR)

• Contract: Processing necessary to provide our services
• Legitimate Interest: Analytics and service improvements
• Consent: Marketing communications
• Legal Obligation: Compliance with laws

4. Third-Party Data Processors

• Cloudflare, Inc. — Infrastructure, hosting, and content delivery
• AI Providers — For search query processing and property analysis (data minimized, not stored by providers)

We do not sell or transfer user data to third parties outside of the approved use cases described in this policy.

5. Data Retention

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion ("right to be forgotten")
• Portability: Receive data in machine-readable format
• Restriction: Limit processing of your data
• Object: Object to legitimate interest processing
• Withdraw Consent: Withdraw consent at any time

Exercise these rights by contacting [email protected]. We respond within 30 days.

7. Cookies

We use cookies to provide our services:

• Essential Cookies — Required for core features. Cannot be disabled.
• Analytics Cookies — Help us understand usage. Requires consent.
• Marketing Cookies — For personalized content. Requires consent.

See our full Cookie Policy for details, including cookie management.

8. Data Security

We protect your data with:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Password hashing using industry-standard algorithms
• Access controls and authentication
• Regular security assessments

9. International Data Transfers

Our primary processing occurs in the EU. For transfers outside the EU, we use:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such data, we will delete it promptly.

11. Changes to This Policy

We will notify you of changes by posting the updated policy on this page, updating the "Last updated" date, and sending email notification for material changes.

12. Contact Us

Questions about this policy? Contact us:

Supervisory Authority

You may lodge a complaint with the Estonian Data Protection Inspectorate: