1. Data Controller
BezAgencije (hereinafter: "we", "the platform") is responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) and Croatian data protection law.
2. Data We Collect
- Account data: email address, name, phone number (if provided), platform role (buyer/seller)
- Listing data: property description, photos, location, price
- Enquiries: messages sent to sellers via contact forms
- Search preferences: filters and saved searches
- Chat history: conversations with the AI assistant
- Payment data: Stripe customer ID, payment status (we do not store card details — Stripe handles this)
- Technical data: IP address, browser type, session cookies
3. Purpose of Processing
- Providing platform services (listing, searching, contact)
- Authentication and account security
- Processing payments for listing publication
- Improving user experience through the AI assistant
- Communicating with users (listing notifications, enquiries)
4. Legal Basis
We process your data based on: performance of a contract (platform use), legitimate interest (security, fraud prevention), and your explicit consent (cookies, AI chat).
5. Data Sharing
We share your data exclusively with the following processors, and only to the extent required to provide the service:
- Supabase — database hosting and authentication (data stored in the EU)
- Stripe — payment processing (we do not store card details)
- Google — sign-in with a Google account (OAuth)
- OpenAI / Google — processing of conversations with the AI assistant
- Sentry — technical error monitoring
- Upstash — abuse protection through rate limiting (processes IP addresses)
- Brevo — transactional email delivery
- Vercel — platform hosting and CDN
We do not sell or rent your personal data to third parties.
6. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent at any time
You can export your data (data portability) and permanently delete your account (right to be forgotten) yourself, at any time, from your profile under "Account & privacy". To exercise any other rights, contact us at privatnost@matchmindz.com.
7. Cookies
We use functional cookies required for platform operation (authentication, sessions). Analytics cookies are used only with your explicit consent.
8. Data Retention
We store your data as long as you use the platform. When you delete your account from your profile, your personal data (account, listings, messages, preferences, chat history) is removed immediately; database backup copies expire within 30 days.
- Anonymous AI conversations: transcripts of conversations with the AI assistant that are not linked to a user account are deleted after 90 days.
- Payment records: payment data is retained for 11 years in accordance with the Croatian Accounting Act (Zakon o računovodstvu). After account deletion these records are pseudonymised — the link to your identity is removed.
9. Contact
For privacy-related questions: privatnost@matchmindz.com
You have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP) if you believe your data is not being processed in accordance with regulations.