Privacy policy

Controller

The controller for personal data handled through Nestivi is siltra GmbH, Bodenacherstrasse 58, 8121 Benglen, Schweiz. Write to support@siltra.ch. The same details are on the Impressum.

Impressum

What this notice covers

It covers the Nestivi website: search, accounts, listings, inquiries, saved homes, saved searches, and alert emails. It does not cover a landlord’s own mailbox after they reply outside Nestivi, or sites you open from a map credit or another external link.

Account

If you create an account while the database is connected, Nestivi stores your email, display name, optional phone number, interface language, and role (seeker, landlord, agency, or admin). Sign-in with a password or a magic link is handled by Supabase Auth. Nestivi does not keep a copy of your password in its own tables. A sign-in cookie keeps the session. Nestivi does not ask for identity documents, payment cards, or sensitive data such as health, religion, or biometrics. Do not put those in an inquiry.

Listings

If you publish a home, Nestivi stores the text, the price in francs, the Swiss address, and the photos or floor plans you upload, with your account as the owner. A published listing is visible to anyone who opens the site. You can edit it or archive it. Archived listings are hidden from search and from the public listing page.

Inquiries

An inquiry stores the name, email, optional phone, message, and optional visit time you submit. If you are signed in, it is also tied to your account. The listing owner can read it, and so can you. Owners can keep private notes on an inquiry. Those notes are not shown to the seeker.

Saved homes and saved searches

Saved homes are the listings you mark, stored on your account. A saved search stores the name you give it, the filters, the language, and whether you asked for email. Email stays off until you turn it on. Alerts then go to the email on your account. You can turn email off, or delete the search, on the saved-searches page.

Listing views

Opening a listing can record a view so the owner sees a count. A signed-in view is stored with your account id. An anonymous view is stored against an httpOnly cookie named heim_viewer (SameSite=Lax, up to 400 days), which Nestivi sets when that cookie is missing. The same viewer is not counted again inside a 30-minute window. The cookie is not an advertising cookie and is not used to follow you across other sites.

Language

The language of the interface is stored in this browser under the key heim-lang. That value stays on your device. If you save a language on your account, that choice is stored with your profile and is used for alert emails.

Analytics and speed

The site loads Vercel Analytics and Vercel Speed Insights. Analytics measures page views. Speed Insights measures loading performance. Nestivi does not use advertising cookies and does not show a consent banner for this measurement. The footer states the same limit for Analytics.

Maps

When a map is shown, your browser requests tiles from Esri (ArcGIS Online). Esri receives the technical data needed to serve the tile, such as your IP address and the tile coordinates. Nestivi does not attach your account email or name to that request.

Hosting

The site is hosted on Vercel. Serving a page uses ordinary connection data: IP address, user agent, the URL, and the time. Nestivi does not run a separate marketing-log product on top of that.

When data is not stored

If the Supabase project is not connected, publishing or an inquiry can show a success message and is not stored. Saved homes, saved searches, and accounts need that connection. A success message on an unconfigured copy is not a record.

Why the data is used

• To run the features you use: account, search, listing, inquiry, saved home, saved search.
• To send an alert email only after you turn it on.
• To show a listing owner the view count for their own listing.
• To keep the beta reliable and to measure visits and speed.
• To show a map.
• To answer a message you send to the contact address.

Swiss law

The FADP allows a private controller to handle personal data unless a rule forbids it. A justification is required where that handling violates personality rights, which includes processing sensitive personal data. Nestivi does not request sensitive personal data.

In short: account, listing, inquiry, and saved-search data are collected because you use those features. Alert emails depend on the switch you set. View counts, security of the service, and basic measurement support running the beta. They are not used to build advertising profiles.

This notice does not claim a GDPR Article 6 assessment for the European Union. Nestivi is aimed at homes in Switzerland. If you write from abroad, the request is still handled under this notice and the FADP.

Processors and other recipients

Listing text you publish is shown to visitors. An inquiry is shown to you and to the listing owner. Nestivi does not sell personal data. The beta uses these providers:

• Supabase — authentication, database, and file storage for accounts, listings, photos, inquiries, saved homes, saved searches, and view rows. The project region is chosen in the Supabase dashboard. This notice does not state a country for that region, because the app does not fix one.
• Vercel — hosting, serverless functions, the daily job that sends saved-search alerts, Analytics, and Speed Insights.
• Resend — delivery of saved-search alert emails, only when an API key is configured and you opted in. If the key is missing, Nestivi skips the email and leaves the in-app count as it is. Until a sender is verified, the from-address may be Resend’s onboarding address.
• Esri — map tiles, requested by your browser when a map is open.

Transfers abroad

These providers can handle data outside Switzerland, including in the United States and in other regions they operate. Under the FADP, a disclosure abroad needs an adequate level of protection or another safeguard the Act allows. This notice does not publish a completed set of transfer contracts, or a confirmed hosting country.

How long data is kept

• Account data stays while the account exists. This beta has no self-serve button that deletes an account. Signing out ends the session and does not erase the account. You can ask for deletion at support@siltra.ch.
• You can edit or archive your listings, delete a saved search, and remove a saved home yourself.
• Inquiries and the owner’s private notes stay with that listing’s inbox until they are deleted on request, or the account and listing are removed. A fixed retention period is not published yet.
• The viewer cookie lasts up to 400 days. View rows are kept so owners can see counts. A deletion schedule for those rows is not published yet.
• Alert emails are handed to Resend to deliver. Nestivi does not keep a separate copy of those emails in the app.
• Hosting and analytics retention follow those providers. Nestivi does not promise a shorter period than their tools keep.

Your rights

Under the FADP you can ask whether Nestivi holds personal data about you, ask for a copy, ask for inaccurate data to be corrected, and ask for deletion or another limit where the Act allows it. Where the right to data portability applies, you can ask for the data you provided, in a common electronic format.

Write to support@siltra.ch. If you have an account, include that email so the right record can be found. Nestivi may ask you to show that you control the address. An ordinary request is free. A request can be refused or limited where the FADP allows it, including where it would harm another person’s rights.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC).

FDPIC — edoeb.admin.ch

Security

Access to the database is limited by the project’s access rules. This beta is not a claim that every risk has been removed. Use an inquiry for a message about a home, not for secrets.

Changes

The date under the title is when this text was last updated. If Nestivi starts taking payments or changes a provider, this notice will be updated.