Privacy Policy

1. What data we collect

Owner enquiries (lead form): name, phone, optional email, property details (area, size, bedrooms, status) and your preferred contact channel.

Accounts: name, email, password (hashed), role (tenant / landlord), and the content you add — listings, photos, applications, messages, lease documents.

Technical data: IP address, device and browser information, pages visited — via cookies and similar technologies only with your consent (see Cookie Policy).

2. Why we process it (legal bases)

To respond to your enquiry and provide our services — performance of a contract or steps before entering one (Art. 6(1)(b) GDPR).

To operate, secure and improve the platform — legitimate interest (Art. 6(1)(f)).

Analytics and advertising measurement — only with your consent (Art. 6(1)(a)).

Compliance with Greek tax and rental law (e.g. lease registration) — legal obligation (Art. 6(1)(c)).

3. Who receives your data

Service providers acting under our instructions: hosting (Hetzner Online GmbH, Germany), file storage (Cloudflare R2), email delivery (Resend), analytics (Google Analytics, Microsoft Clarity — consent-based), maps (Google Maps).

Our operations team receives new enquiries through an internal notification channel.

We never sell personal data. Landlords and tenants only see each other’s data as needed to arrange a tenancy.

4. International transfers

Our servers are in the EU (Germany). Where a provider processes data outside the EEA (e.g. Google, Microsoft, Cloudflare, Resend), transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

5. How long we keep it

Enquiries: up to 24 months after last contact. Accounts: while active and up to 12 months after deletion request, unless law requires longer. Lease-related records: as required by Greek tax law (typically 5 years).

6. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Consent can be withdrawn at any time (for cookies — via "Cookie settings" in the footer).

Write to hello@mamaxo.ai. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

7. Security & changes

Data is encrypted in transit; access is restricted to staff who need it. We will post any material changes to this policy on this page with a new "last updated" date.