BelgiGuide
Back to home

Privacy policy

Last updated : 17/09/2026

1. Data controller

BelgiGuide ("we") is the controller of your personal data within the meaning of the General Data Protection Regulation (EU 2016/679, hereinafter "GDPR").

For any question, contact: privacy@belgiguide.be.

2. Data collected

  • Account data : email address, authentication tokens (Supabase Auth).
  • Profile : region, status, language, family situation, nationality, priorities.
  • Functional data : housing listings, contracts, inventories of fixtures, photos, payments, reimbursements, subscription, B2B contact requests.
  • Technical data : server logs (IP address, user-agent, timestamp) for security and troubleshooting purposes.

3. Purposes and legal bases

  • Service provision and contract performance — legal basis: contract performance (art. 6.1.b GDPR).
  • Generation of leases and rent receipts — legal basis: contract performance.
  • Operational communications (magic link emails) — legal basis: contract performance.
  • Security and fraud prevention — legal basis: legitimate interest (art. 6.1.f).
  • B2B contact requests — legal basis: consent / pre-contractual measures.

4. Subprocessors

  • Supabase (EU) — database, authentication, file storage.
  • Anthropic (Claude API) — conversational assistant. User prompts pass through it; we do not transmit direct identifiers.
  • Vercel (hosting) — frontend execution.
  • Stripe / Mollie — payments (when the option is activated). Card data never passes through our servers.
  • eIDAS qualified electronic signature provider — when the option is activated (the exact subprocessor will be communicated at activation).

5. Retention period

Account and functional data are kept as long as your account is active. After account deletion, personal data is erased within 30 days, except for legal documents (contracts, receipts) kept for 10 years to comply with Belgian accounting and tax obligations.

6. Your rights

In accordance with articles 15 to 22 of the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability.

You can exercise these rights at any time from your account (page Settings) or by email to privacy@belgiguide.be.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA), 35 rue de la Presse, 1000 Brussels — autoriteprotectiondonnees.be.

7. Cookies

BelgiGuide uses only strictly necessary cookies for the operation of the service (authentication session). See the cookies policy.

8. Security

All communications use HTTPS. Data access is controlled at the database level via Row Level Security (Supabase RLS). Sensitive files (PDFs, inventory photos) are stored in private buckets with per-contract access control.

Privacy policy — BelgiGuide