Privacy & cookies.
This notice explains how Hausu handles personal data when you search, meet potential housemates, create a Passport, apply for a home or work with an agency.
1. Who controls your data
The controller is the legal operator of Hausu. Spanish law requires the operator’s identity and contact information to remain directly available.
If a letting agency independently decides how it uses applicant information received through Hausu, that agency may also be a separate controller and must provide its own privacy information.
2. What we collect
- Account and profile: name, email, profile photo, language, occupation, introduction and account security records.
- Search and housing plans: locations, budget, dates, household preferences, saved homes, projects, votes and collaborators.
- Community activity: notices, replies, reports, blocks and moderation records.
- Hausu Passport: information you add, completeness status, recipient permissions, expiring links and access logs.
- Identity verification: verification status, verified name, document type, provider, method and date. Unless separately explained, Hausu should not receive or retain biometric templates, selfie images or full identity-document images from the verification provider.
- Applications, visits and contracts: application details, viewing attendance, payment status, contract versions, consent records, signatures and assurance results.
- Technical and support data: device, browser, IP-derived security information, timestamps, diagnostics and messages to support.
We do not intentionally collect special-category data for matching. Do not place health, ethnicity, religion, sexual orientation or other sensitive information in free-text fields unless it is genuinely necessary and you understand the disclosure.
3. Why we use it—and the legal basis
| Purpose | Typical legal basis |
|---|---|
| Provide accounts, searches, projects, replies, Passports, applications and contracts | Performance of the service contract |
| Prevent fraud, secure accounts, moderate content and maintain audit evidence | Legitimate interests; legal obligations where applicable |
| Process optional Hausu Identity and optional analytics | Your explicit request or consent, as applicable |
| Process payments and maintain financial records | Contract and legal obligations |
| Send product marketing | Consent, or another lawful basis where specifically permitted |
Where we rely on legitimate interests, we assess necessity, proportionality and the effect on your rights. You may object as described below.
4. Passport, completeness and identity
You choose what each recipient can see. Private links should expire and remain revocable. Original supporting documents require separate, time-limited permission.
Hausu Identity only states that the checked identity document was valid at the verification date and matched the person completing the one-to-one check. It does not verify property ownership, legal residence, financial reliability or good intentions.
Hausu does not use identity status, nationality, facial data or Passport completeness to rank housemate compatibility. Hausu should not make a solely automated decision that produces legal or similarly significant effects on an applicant.
6. How long we keep it
We keep account data while the account is active and for a limited period afterwards for recovery, fraud prevention and disputes. Community and moderation evidence may be retained after content is removed where needed for safety or legal claims. Financial, application and contract records are retained for the periods required by applicable law. Expired sharing links stop providing access, although security logs may remain for a limited period.
Deletion may be delayed where information is required for legal obligations, disputes, fraud prevention or the rights of another person. Retention periods and deletion jobs must be documented internally before production launch.
7. Your rights
Subject to the GDPR and applicable limits, you may request access, correction, deletion, restriction, portability or objection; withdraw consent without affecting earlier lawful processing; and request human review where an automated decision significantly affects you.
Contact [email protected]. We may need to verify the requester without collecting disproportionate information. You may also complain to the Spanish Data Protection Agency (AEPD).
9. Security, children and changes
We use access controls, encryption where appropriate, expiring links, audit trails and data-minimisation measures. No online system is perfectly secure; report suspected compromise promptly.
Hausu is intended for adults able to enter housing arrangements and is not directed to children. We may update this notice when the product or law changes and will highlight material changes.