Privacy Policy
Checked B.V. (“Checked”, “we”) operates checkedviewings.com and the Checked. web app. This policy explains what personal data we collect, why, who we share it with, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Dutch UAVG.
1. Who is the data controller
Checked B.V., Amsterdam, the Netherlands (KvK pending). Contact: privacy@checkedviewings.com.
2. What we collect
Account & profile
- Name, email, phone, target city, budget range, preferred language.
- For Checkers: ID document, IBAN (for payouts), cities covered, languages.
Bookings & viewings
- Listing URL or address, scheduled date, notes for your Checker.
- Media uploaded by your Checker (video walkthrough, photos) and the written report.
- Chat messages between you and your Checker, retained 12 months.
Payments
- Processed by Stripe. We never see or store card numbers.
Operational analytics
- UTM/referrer/click-IDs (gclid, fbclid, ttclid). Captured to attribute marketing channels. Not personal data on its own.
- PostHog product analytics — only with your cookie consent. Tracking is opt-out by default; we honour Do-Not-Track.
Security
- IP address + user-agent on privileged actions (audit log). Retained 24 months.
3. Legal bases
- Contract (GDPR art. 6(1)(b)) — to deliver bookings and reports.
- Legitimate interest (art. 6(1)(f)) — fraud prevention, security logs.
- Consent (art. 6(1)(a)) — analytics cookies, push notifications, marketing email.
- Legal obligation (art. 6(1)(c)) — tax records, KYC for Checkers.
4. Who we share with (processors)
- Supabase — database, auth, storage (EU region).
- Stripe — payments.
- Resend — transactional email.
- PostHog — product analytics (consent-gated).
- Vercel — hosting + edge network.
Each processor is bound by a Data Processing Agreement.
5. Your rights
- Access & portability — download your data any time at /seeker/profile→ “Download my data”.
- Erasure — delete your account from the same screen. Past viewings stay anonymised in our records (lawful basis: operational integrity).
- Rectification — edit your profile any time.
- Withdraw consent — reset cookie consent via the banner.
- Complaint — to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
6. Retention
- Account & viewings: until you delete the account.
- Chat messages: 12 months.
- Audit log entries: 24 months.
- Email logs: 24 months.
7. Changes to this policy
We'll email you if we make material changes. The latest version is always at this URL with a timestamp.