Privacy policy

Last updated: 27 September 2026

What changed in version 1.6. Invoices are kept for seven years, with no ten-year exception. The leftover consent record in your browser is now deleted, and where a visit came from is no longer stored in your browser at all. This page now lists what the site keeps in your browser’s session storage, says what a landlord’s listing shows, and says that Cloudflare can process data outside the EU. Waitlist addresses are stored by Resend in the United States under the standard contractual clauses; to leave the list, reply to our welcome email or write to privacy@vond.house.

Introduction

Vond ("we", "us", "our") is a housing platform for Utrecht. This policy explains how we collect, use, and protect personal data when you join our pre-launch waitlist or use our service, and the rights you have under the General Data Protection Regulation (GDPR, in Dutch the AVG) and the Dutch act that implements it, the Uitvoeringswet AVG (UAVG).

Who is responsible for your data (the controller)

The data controller will be the Dutch general partnership (vennootschap onder firma) that is currently being registered to operate Vond. That entity does not exist yet, so we are not able to publish its legal name, KvK number or registered address here. This section will be completed with all three as soon as registration is finished, and before the service launches. In the meantime, every request below is handled by the people building Vond. For any privacy question, or to exercise your rights, contact privacy@vond.house.

What data we collect

Waitlist

If you join our pre-launch waitlist, we collect your email address together with your explicit consent to be contacted. We use it only to tell you when Vond opens and to share occasional launch updates, never for advertising. You can unsubscribe at any time via the link in every email, which stops all further contact, and you can ask us to erase your address entirely. See Your rights under GDPR below.

Your address is not the only thing stored against your waitlist entry, so here is the complete list. Six of these are recorded without you typing them, at the moment you tick the consent box:

source, utm_medium, utm_campaign and referred_by: where you came from, read off the link you arrived on. If a friend shared a referral link, that is the one that tells us to credit them.
signup_page: which form on which page you used, so we can tell which one actually works.
locale: whether you are reading the site in English or Dutch, so we write to you in that language.

One is a choice you make on the form itself, before you sign up:

role: a room or a roommate, whichever you pressed. Nothing is preselected, so this field carries your answer or it is not stored at all, and the forms that have no such choice on them never record it.

The remaining four you give us yourself, by answering the optional questions on the screen after you sign up. You can skip that screen and nothing is stored:

budget, bedrooms and neighborhood: what you are looking for, so we know what kind of housing to go and find.
heard_from: how you found out about us, in your own words.

One naming detail, because the list above is the literal set of fields and we would rather it matched: the campaign a visit came from arrives in the address bar as utm_source, but it is stored on the contact as source. There is no field called utm_source.

The landlord form on our founding-landlords page writes to the same list, with three of these rather than all eleven: source, signup_page and locale. It has no role, because that page has only one path.

None of this is advertising data and none of it is shared. It answers two questions we cannot otherwise answer: which channels are worth our time, and what people are actually asking for. Erasing your address erases all of it, since every one of these is stored on the contact record rather than separately.

Account information

When you create an account we collect your email address and display name. For landlords, we also collect business details including company name, billing address, and whether they rent out as a private person or as a company.

Listing data

Landlords provide property addresses, photos, descriptions, pricing and availability when they create a listing, together with their name and one way to reach them, which they choose. A published listing, including that name and contact channel, is shown to the people who view it on Vond, so that a tenant can reach the landlord directly.

Usage and operational data

To keep the service running and secure we generate server-side operational logs, for example request timestamps and error reports. We do not build advertising profiles, and we do not follow you across other websites.

Visit statistics

We count visits to this website using Cloudflare Web Analytics. It records the page requested, the site that referred you, and coarse technical information: country, browser, operating system, device type, and how the page was loaded. It is measured by a small script Cloudflare adds at its edge. There is nothing here for you to accept or switch off, because nothing is stored on your device.

We are quoting Cloudflare directly rather than characterising it ourselves. Cloudflare states that its Web Analytics “does not use any client-side state, such as cookies or localStorage, to collect usage metrics, and never ‘fingerprints’ individual users”; that they “don’t ‘fingerprint’ individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics”; and that “Cloudflare Web Analytics do not log query strings to avoid collecting potentially sensitive data”. Your IP address necessarily reaches Cloudflare in the course of any web request, as it does for every site on the internet. What the statements above address is whether it is then used to identify you.

The legal basis, stated as our position rather than as settled law. Because nothing is written to or read from your device, we take the view that this falls outside the consent requirement in Article 5(3) of the ePrivacy Directive, and that our legitimate interest under Article 6(1)(f) GDPR, namely knowing whether the site works and whether anyone is reading it, covers the limited data Cloudflare processes on our behalf. We would rather be straightforward that this is our reading than present it as resolved: European supervisory authorities do not speak with one voice on edge-measured analytics, and a decision could land the other way. If it does, we will change this and say so here.

One caveat about the numbers themselves. Browsers running an ad or tracker blocker are likely to block this script, so what we see is an undercount rather than a full picture. We do not try to work around that.

Communications

Messages exchanged between landlords and tenants through the platform are stored to facilitate the service and to resolve disputes.

How we use your data

We use personal data to:

Operate and maintain the platform
Facilitate connections between landlords and tenants
Improve and develop the product
Communicate service-related updates (you can opt out of non-essential communications at any time)

Legal basis for processing

We process your data on the following legal bases under GDPR Article 6:

Contract: processing necessary to provide the service you have signed up for
Legitimate interest: improving and securing the platform, fraud prevention
Consent: for joining the waitlist and for any marketing communications. You give this consent explicitly, and you can withdraw it at any time without affecting processing carried out before withdrawal.
Legal obligation: where we must keep certain records, for example for Dutch tax purposes

Data sharing

We do not sell your personal data. We share data only with:

The infrastructure providers that run the service on our behalf: Cloudflare (website hosting and content delivery through Cloudflare Pages, and visit statistics through Cloudflare Web Analytics, see Visit statistics above), Resend (email delivery and waitlist management, stored in the United States under the European Commission’s standard contractual clauses), and Microsoft 365 (Exchange Online, EU region), which holds the hello@vond.house mailbox that sends and stores your invoice. As the product backend launches we will use Amazon Web Services in its EU region (Frankfurt, eu-central-1) for database and file storage, and we will keep this list current.
Our bank, which receives the bank transfer when you pay an invoice (there are no invoices during the current beta)
Competent authorities if required by law

Special-category (sensitive) data

We do not ask for, and we have no need for, special categories of personal data within the meaning of Article 9 GDPR, such as data revealing racial or ethnic origin, religion, health, sexual orientation, or political opinions.

Because listings and messages are free text, you could in principle include such information yourself (for example in a message to another user). Please do not. We never use this information for profiling or advertising, and we do not process biometric or genetic data. If you have included such a detail anyway, tell us and we remove it.

Payments and billing data

Vond is free during the current beta and we hold no payment information about you today. The only charge on Vond is the success fee a landlord pays per placement, set out in our Terms of Service. This section describes how billing will work when we start charging it, so you know in advance.

If you are a landlord, we send you the invoice by email from hello@vond.house after the move-in, and you pay it by bank transfer. The invoice refers to the placement by the listing id and the move-in date, and never names the tenant. We do not take card payments, we use no payment processor, and we hold no card data.
We keep only what invoicing and our legal duties require: your billing name and address, your email address, each invoice with its number, date, amount and btw, the listing id and move-in date it refers to, and whether and when it was paid. A bank transfer shows us the name and account number (IBAN) it was sent from, and we keep that with the invoice. On their own, the listing id and move-in date are pseudonymous rather than directly identifying, since neither names the tenant; we keep them, like the invoice they appear on, for the tax retention period below.
The legal basis is performance of your contract (Article 6(1)(b)) and our legal obligations to keep accounting records (Article 6(1)(c)).
Invoices and related financial records are kept for 7 years, counted from the end of the year they belong to, as Dutch tax law requires.

Data retention

We keep personal data only as long as we need it for the purposes described in this policy. Our specific retention periods are being finalised, and will be published here before the service launches.

Two things hold regardless. You can ask us to erase your data at any time. See Your rights under GDPR below. And where Dutch law requires us to keep certain records, for example for tax purposes, we keep them for as long as the law requires.

Your rights under GDPR

Under GDPR you have the right to:

Access a copy of the personal data we hold about you
Rectification of inaccurate or incomplete data
Erasure ("right to be forgotten") in certain circumstances
Data portability: receive your data in a structured, machine-readable format
Restriction of processing in certain circumstances
Object to processing based on legitimate interests

You also have the right to withdraw consent at any time (for example, to leave the waitlist), and to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Roommates produces no score between two people. There are exactly two compatibility labels, and they are labels rather than numbers on purpose. Each names one thing your two sets of answers are compared on: area_fit, the neighbourhoods you each named, and lifestyle_fit, your answers on smoking, pets, tidiness, noise and daily rhythm. Each label comes back as matching or not matching, or is left out entirely when either of you has not answered that part. Both sides see the same two labels. A label is a statement about two sets of answers you each filled in yourself. It is not a percentage, not a rating of a person, and not the outcome of anything we looked into about either of you.

What is automated is the order, and only the order. The roommate deck is sorted by how recently each person last updated their profile, most recent first. Nothing else moves anyone up or down, the two labels above carry no weight in it, and no payment changes anyone’s position. Rooms are listed newest first unless you choose to sort them by price, which is your own choice on your own screen. None of this decides anything about you: a landlord chooses which interests to accept, and a person chooses who to reply to.

To exercise any of these rights, email privacy@vond.house. We will respond without undue delay and within one month, as required by GDPR Article 12(3). Exercising your rights is free unless a request is manifestly unfounded or excessive.

Cookies and similar technologies

This website sets no cookies at all. Not advertising cookies, not analytics cookies, and not a session cookie either. No page here returns a Set-Cookie header, and our visit statistics are measured without any client-side state (see Visit statistics above).

Two things are kept in your browser’s local storage. Both are strictly necessary within the meaning of Article 5(3) of the ePrivacy Directive, and neither is sent anywhere as an identifier. A third entry, left over from an older version of this site, is deleted on your next visit:

your language choice, so the site is not in the wrong language on your next visit
your sign-in session, once accounts work, so that being signed in survives a page reload
a leftover consent record from the cookie banner this site used to show. Nothing reads it, and the site now deletes it from your browser.

Two more things are kept only while the tab is open, in your browser’s session storage: where you had scrolled to on the pages you visited, so the back button returns you to the same place; and that you closed the sign-up bar at the bottom of the page, so it stays closed until you close the tab. Where your visit came from, if you arrived on a link that names a campaign or a referral code, is held only in the page’s memory and is never written to your browser.

This is why there is no cookie banner. A banner whose options all lead to the same behaviour is a click-through, not a choice. If we later add something that does write to your device and is not strictly necessary, such as an embedded video or map, a payment widget, a chat widget or an advertising pixel, a real consent request comes back before it loads, and this section changes with it.

Security

We protect your data using encryption in transit (TLS), access controls that limit which team members can access personal data, and regular review of our security practices. No system is perfectly secure; if you believe your account has been compromised please contact us immediately.

Children

Vond is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If you believe we have received data from a minor, contact us and we will delete it promptly.

International data transfers

Not all of your data stays in the EU. The waiting list, which is nearly all the personal data we hold today, sits with our email provider Resend in the United States. The Ireland region on our sending domain only decides where Resend sends our email from; Resend documents that stored data stays in the United States whichever region is chosen. That transfer is made under the European Commission’s standard contractual clauses (Implementing Decision (EU) 2021/914, module two). The United States has no general adequacy decision: the Commission’s 2023 decision covers only companies certified under the EU-US Data Privacy Framework, and for Resend we do not rely on it. The clauses are published on EUR-Lex, and you can ask us for a copy at privacy@vond.house. Cloudflare, which serves this website, can also process data outside the European Economic Area, including in the United States. Its self-serve terms incorporate its data processing addendum, which relies on the EU-US Data Privacy Framework for transfers to the United States and on the standard contractual clauses for other transfers. The mailbox that sends and stores invoices runs on Microsoft 365 in its EU region. If we add another processor outside the EU, we name it under Data sharing above, with the safeguard GDPR Chapter V requires, before it handles your data.

Changes to this policy

We may update this policy as the service evolves. Material changes will be announced via email or a prominent notice on the platform. Continued use of the service after changes are effective constitutes acceptance of the updated policy.

Language

This policy is published in English and in Dutch. Both versions are authentic. For users in the Netherlands, the Dutch version prevails if the two conflict.

Contact

Questions or complaints about this policy can be directed to privacy@vond.house. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Version 1.6, 27 September 2026.