Privacy Policy

This policy explains what Dormetrics collects, why, and your rights. We are built on data minimisation: we collect as little as possible, we never build a database of property owners, and we never sell your data.

Who we are (data controller)

The controller is DoArt, a sole proprietorship (eenmanszaak) registered in the Netherlands under KVK 58598464, Helmond, Netherlands. Dormetrics (www.dormetrics.com) is a trade name of DoArt. For any privacy question or request, email hi@dormetrics.com.

What we collect and why

The listing you check — the pasted text, an optional listing URL, photos you add, and any hints (price, city, size, IBAN, contact name) — is processed to produce your risk verdict. Uploaded photos are never stored: they are checked within your request and discarded. Email — your account identifier (captured by Stripe at checkout, when you request a magic link, when you sign up with a password, or from Google when you use Sign in with Google). Owner-confirm credits, purchases & a credit ledger — to run your account and meet accounting obligations. Your saved checks — two records per check. The first is a non-identifying one (a listing reference, the graded band, and whether it was a free or paid check). The second is the report itself, so you can re-open it later: what you gave us (your pasted text, the link, the price/city/size you typed, the contact name, and what your photos were classified as) alongside what came back. Your IBAN is stored masked — the first four and last four characters only, enough for you to recognise it, never the full account number. Photos themselves are still never stored. We keep your newest 20 reports; older ones drop off automatically, and you can remove any of them from your history yourself at any time. An anonymous, signed device ID — to count free checks and limit abuse. Session data(a session ID and your browser's user-agent) — to keep you logged in and let you log out everywhere. Your IP address — used transiently for rate-limiting and bot protection, not stored in your account. If you choose password login we store a salted, one-way hash of your password — never the password itself; magic-link and Google sign-in accounts have no password at all. With Sign in with Google we receive only your verified email and account identifier — never your Google password or contacts. Your language preference — we store your chosen language (English or Dutch) on your account so emails arrive in your language. Referral data— if someone buys through your invite link (or you buy through someone else's), we record the referrer's and the referred buyer's account emails so we can grant the purchase-gated reward exactly once (capped); these records are kept as part of your account and credit ledger and are removed when the account is deleted, except the minimal payment records we must retain by law. Legacy waitlist entries — Dormetrics is now open to everyone; emails from the pre-launch waitlist are kept only until each entry is confirmed as an account or purged.

The owner-confirm check — how we minimise owner data

When you buy an owner-confirm, you give us the property address and the name the “landlord” gave you. We run a forward, address→owner lookup against the public Dutch Land Registry (Kadaster) and return only a match / no‑match / inconclusive result against the name you supplied. We do notsplash the owner's full identity into the app, and we neveroffer a “type a name → see their properties” reverse search. Your owner-confirm request (the property address and the name the landlord gave you) is kept only to deliver and support that check: it sits in our fulfilment queue — together with any internal support note our operator adds to it — and is deleted automatically no later than 30 days after your result is delivered or refunded. The land-registry record itself is never stored, and nothing is ever added to any owner profile, database, or list. There is no owner databaseand no “worst-landlord” list. What your account keeps beyond that window is only a non‑identifying record of your check: a listing reference, the graded band, and the kind of check.

If you are a property owner:we may, at a user's request, check a name against the public Kadaster record for a single address to help that user avoid rental fraud. We obtain that record from the Land Registry (not from you), use it only for that one check, and keep no lasting record of you — no profile, no list. The request itself (the address and the name the user was given) is deleted no later than 30 days after the check is delivered or refunded, and the land-registry record is never stored at all. You have the right to object to this processing under Article 21 GDPR; email hi@dormetrics.com. (Because we keep no owner records beyond that short fulfilment window, notifying each owner individually is not possible or proportionate, so we provide this public notice instead — Article 14(5)(b) GDPR.)

Legal bases (GDPR)

We rely on our (and your) legitimate intereststo run the address→owner verification you requestto protect yourself from rental fraud — a use the EU's highest court has recognised as a valid commercial legitimate interest. We process data to perform our contract with you (account, payments, saved checks); to meet a legal obligation (keeping tax and accounting records under Dutch law); and on your consent where we ask for it (e.g. the legacy launch waitlist). You can object to, or withdraw consent for, processing at any time.

Automated processing & AI

The free risk verdict is generated with automated analysis and AI: an AI model reads the listing text for scam-script patterns, and other checks score price, image, and IBAN signals. It is decision support you choose to run — it produces no legal effect and does not make an automated decision about you in the sense of Article 22 GDPR; the final decision is always yours. You can ask us about the logic involved.

AI & image processing

To grade a listing we send its text to a third-party AI / large-language-model provider for contract- and script-pattern analysis, and any listing images to a reverse-image / web-detection providerto spot photos stolen from elsewhere. Under those providers' commercial / API terms, your inputs are not used to train their models. These calls return signals to us; they are not a stored profile of you.

Who we share data with (processors)

We use vetted service providers that process data on our behalf under data processing agreements:

• Anthropic (United States) — AI analysis of listing text (contract & script red flags).
• Google Cloud Vision (United States) — reverse-image / web detection on listing photos.
• Kadaster (the Dutch national Land Registry, Netherlands) — accessed directly or through a Kadaster data intermediary — for the live owner-confirm lookup you pay for.
• Supabase — database & hosting for your account, credit ledger, and saved-check records.
• Upstash — caching, rate-limiting, and short-lived tokens.
• Vercel — application hosting and serverless functions.
• Stripe (PCI-DSS) — payment processing, billing details, your email.
• Resend — magic-link and transactional email delivery.
• Cloudflare — bot protection (Turnstile) and abuse prevention.
• Sentry — error & crash monitoring; reports may include your IP and browser user-agent for debugging, with personal data scrubbed.
• Vercel Web Analytics — privacy-friendly, cookieless, aggregated page analytics (no cookies, no cross-site tracking, no advertising).
• Vercel Speed Insights — anonymous, aggregated performance measurements of how fast pages load (no cookies, no cross-site tracking).

We do not sell or rent your personal data, and there is no third-party ad tracking.

International transfers

Some processors are based outside the EU/EEA. Where data leaves the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and appropriate safeguards. A copy is available on request.

How long we keep your data

• Owner-confirm requests — the property address and the name the landlord gave you (plus any internal operator note) are kept only to deliver and support your check, and are deleted automatically no later than 30 days after the result is delivered or refunded. The land-registry record itself is never stored.
• Saved checks — your most recent 20 per account; anonymous device records are purged automatically after ~90 days. The report body (what you gave us and what came back) is deleted after 180 days even if the check itself is still listed, so an old report stops holding your words long before the record of it goes.
• Reports you remove from your history — “remove from my history” takes the report out of your view immediately but does not erase it, because we may still have to answer a complaint or a chargeback about a report you were given. It is deleted on the same 180-day clock as any other report. If you want it gone now, delete your account — that erases everything, including removed reports.
• Sessions — about 90 days, or until you log out.
• Magic links — 15 minutes.
• Purchases & credit ledger / tax records — 7 years (legal obligation).
• Other caches — expire automatically (seconds to days).

Your rights (GDPR)

You can request access, rectification, erasure, restriction, portability, and object to processing, and withdraw consent at any time. While logged in you can download all your data and permanently delete your account or saved checks from the account panel (or via /api/account/export and DELETE /api/account). Deletion removes your account, saved checks, and ledger, except minimal payment/tax records we must retain by law. To exercise any right, email hi@dormetrics.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

We use a small number of first-party cookies only — no third-party ad tracking:

• sd_session — keeps you logged in (HttpOnly; about 90 days).
• sd_device — anonymous device ID for free-check counting and abuse limits (HttpOnly; about 12 months).
• sd_oauth — short-lived “Sign in with Google” security token (HttpOnly; about 10 minutes).
• sd_co — a short-lived checkout security token that binds a payment to this browser (HttpOnly; about 30 minutes).
• sd_ref — first-party, server-only (HttpOnly) referral code so a referrer is credited if you buy; set only if you arrive from an invite link; no cross-site tracking (30 days).
• sd_src — first-party, server-only (HttpOnly) note of which broad channel you arrived from, used only to add one to a daily total. Set only if you arrive from a channel we can name — come here directly and no such cookie is set. No cross-site profile, no record of you as an individual (14 days).
• sd_skip_delete_confirm (local storage) — remembers your “don't ask again” choice for deletions.

For usage measurement we use Vercel Web Analytics, which is cookieless — it counts aggregate page views without cookies, without cross-site tracking, and without profiling you (our legitimate interest in understanding traffic). That is why you do not see a cookie-consent banner.

If we emailed your organisation

This policy covers people who use Dormetrics. We also contact organisations — universities, student bodies, relocation and housing firms — at addresses they publish on their own websites, to offer them the free check for the people they serve. That is a different processing activity with its own source, purpose and retention, so it has its own notice: why you got an email from us. It explains where the address came from and how to stop it permanently — a reply is enough.

Security

We protect data with TLS encryption in transit, HMAC-signed tokens, access controls, and PCI-DSS-compliant payment handling via Stripe. If a data breach poses a risk to you, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours and affected users where required.

Children

Dormetrics is intended for adults renting or helping someone rent a home. We do not knowingly collect data from children. If you believe a minor has used the service, contact us and we will delete the data.

Changes

We may update this policy; we will post the new version with a revised date. Material changes take effect when posted.

Contact

DoArt (trading as Dormetrics), KVK 58598464, BTW NL005056384B70, Helmond, Netherlands. Privacy questions: hi@dormetrics.com. Supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).