Privacy Policy
Last updated: 27 July 2026
HomeReview (homereview.nl) processes personal data of visitors and users of our property analysis service. Below we explain what data we process, why, how long we keep it, and which rights you have under the GDPR.
Who is responsible
HomeReview, the Netherlands · info@homereview.nl. We are the controller for the personal data described below. For privacy questions: privacy@homereview.nl.
What we collect
- Addresses you search. An address on its own is not personal data, but combined with your IP address it can be. We treat it as personal data.
- Technical data. IP address, browser type and pages visited, recorded automatically by our hosting and analytics.
- Contact details. If you email us, we hold your address and the content of your message.
- Account data. If you sign in with Google: your email address and name (via Google), and the reports you save. We never receive or store passwords.
We do not ask for and do not want financial data, identity documents, or anything about your health or background.
Why, and on what basis
- Producing the report you asked for — performance of a service you requested.
- Managing your account and saved reports — performance of a contract.
- Keeping the site secure and working — legitimate interest.
- Understanding how the site is used, in aggregate — your consent (via the cookie banner).
- Replying to your message and sending email you asked for — legitimate interest or your consent.
We do not sell personal data, and we do not use it for advertising.
Who processes it for us
- Vercel — hosting and delivery of the site
- Supabase — database, storage and account data (EU)
- Google — sign-in with Google (OAuth)
- PostHog — usage statistics, only after your consent
- Resend — sending report links and account email
- Zoho — our mailbox, so any email you send us is stored there
Each of these acts on our instructions under a data processing agreement. Some may process data outside the European Economic Area; where that happens it is covered by the European Commission's Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.
Public data sources
Reports are built from public registers including BAG, CBS, EP-Online and publicly available WOZ information. These describe buildings and areas, not you. We send the address you entered to those sources to retrieve the data; we do not send them anything identifying you.
How long we keep it
- Your search history (the address you searched and, if signed in, your account email): until you delete your account.
- IP address: up to 7 days (for rate limits and abuse prevention), then removed from the logs.
- Email addresses you enter to send a report: kept with that report.
- Analytics: 12 months, then aggregated only.
- Email correspondence: 24 months.
- Account data: until you delete the account, then 30 days.
Cookies
For sign-in we set one necessary session cookie; it is required for the site to work and needs no consent.
For statistics we use PostHog. It sets cookies only after you accept them via our cookie banner. If you decline, they are not placed and you can use the site normally. You can change your choice at any time. See also our cookie policy.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable format. You can object to processing based on legitimate interest, and withdraw consent at any time.
Email privacy@homereview.nl. We reply within one month. If you are unhappy with how we handle it, you can complain to the Autoriteit Persoonsgegevens.
Changes
We will update this page when our processing changes, and change the date at the top.