Privacy notice
Last updated: October 14, 2026 · Version 2026-10-08
Provisional version. The final text is being prepared with our legal advisers and will replace this page; account holders will be notified when it changes.
This page explains which personal data domusdesk processes, for what purposes and with which providers.
Two different roles
The data an agency, professional or owner enters about its own clients, landlords and tenants belongs to that organisation, which is its controller: domusdesk processes it on the organisation's behalf as a processor. For that data the organisation's own privacy notice applies, and it is the first one to contact. For the data of the accounts of people who use domusdesk, domusdesk decides how it is used.
Account data
Name, email, password (kept only as a cryptographic hash, never in clear), second-factor settings, organisations and roles, and records of sign-ins and sessions.
What we use it for
To give you access to the service, to protect it (limits on sign-in attempts, a bot check at sign-up, error monitoring), to send you service emails such as verifications, invitations and reminders, and to manage the subscription through Paddle. We do not sell data and we do not use advertising.
Cookies
We use only the technical cookie that keeps you signed in. The sign-up page loads Cloudflare Turnstile's bot check and the Subscription page loads Paddle's checkout, each under its own rules.
Providers
Vercel (hosting), Neon (database), Scaleway and Backblaze (document storage and its backup copy), Upstash (attempt limits), Resend (email), Sentry (error monitoring), Cloudflare (bot check), Paddle (payments). The full register, with where processing takes place, will accompany the final notice.
Your rights
You can ask for access to, correction, erasure, restriction or portability of your data, and object to its processing, by writing to portezuelos.info@gmail.com; you can also complain to the Italian data protection authority (Garante per la protezione dei dati personali). If an agency entered your data, write to that agency first.
Final version
The final notice, with retention periods and the controller's details, is being drafted with our data protection law firm and will replace this page.
SHA-256 digest of this text: 3799dff3853548c3143d2f601e17fadc1af5673b834714b3298cd434e5eaaf6c
For any question, write to portezuelos.info@gmail.com