Privacy Policy

Last updated: September 3, 2026

1. Who We Are

PropGhost is operated by Swisky (KvK: 42056446), a sole proprietorship based in Hengelo, Netherlands. We are the data controller for personal data collected through this Service. Contact: hello@propghost.com.

2. What Data We Collect

• Account data: email address and encrypted password when you register.
• Billing data: subscription plan and Stripe customer ID. We do not store card details — these are handled by Stripe.
• Usage data: saved properties, alerts, and filters you set.
• Log data: IP address, browser type, and pages visited for security and debugging.

3. How We Use Your Data

• To provide and improve the Service.
• To process payments via Stripe.
• To send you property alerts and digest emails (only if you opt in).
• To comply with legal obligations.

We do not sell your personal data to third parties.

4. Legal Basis (GDPR)

We process your data on the basis of:

• Contract performance — to deliver the Service you signed up for.
• Legitimate interest — for security, fraud prevention, and service improvement.
• Consent — for marketing emails, which you can withdraw at any time.

5. Data Retention

We retain your account data for as long as your account is active. After deletion, data is removed within 30 days except where required by law (e.g. financial records retained for 7 years).

6. Third Parties & International Transfers

We share data with the following processors, some of whom are based outside the EU. Where data is transferred outside the EU/EEA, this occurs under Standard Contractual Clauses (SCCs) approved by the European Commission.

• Stripe (US) — payment processing. Covered by SCCs. See stripe.com/privacy.
• Mapbox (US) — map rendering and satellite imagery. Your IP address is transmitted to Mapbox when viewing maps. Covered by SCCs. See mapbox.com/legal/privacy.
• Google Fonts (US) — web font delivery. Your IP address is transmitted to Google servers when loading fonts. Covered by SCCs. See policies.google.com/privacy.
• PDOK / Kadaster / KvK — public registry data. No personal data is shared with these sources.

7. Your Rights

Under GDPR you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we limit how we process your data.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw consent for marketing at any time without affecting prior processing.

To exercise any of these rights, email hello@propghost.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl.

8. Automated Decision-Making

PropGhost does not use automated decision-making or profiling that produces legal or similarly significant effects on you, as referred to in Article 22 of the GDPR.

9. Cookies

PropGhost uses only strictly necessary cookies (session/authentication). We do not use tracking or advertising cookies. Strictly necessary cookies are exempt from cookie consent requirements under Dutch law.

10. Security

Passwords are hashed using bcrypt. All data is transmitted over HTTPS. We apply industry-standard security practices to protect your data.

11. Changes

We may update this policy from time to time. We will notify you by email for material changes. The date at the top of this page reflects the most recent update.