Privacy & cookies.
This notice explains how Hausu handles personal data when you search, meet potential housemates, create a Passport, apply for a home or work with an agency.
1. Who controls your data
The controller is the legal operator of Hausu. Spanish law requires the operator’s identity and contact information to remain directly available.
If a letting agency independently decides how it uses applicant information received through Hausu, that agency may also be a separate controller and must provide its own privacy information.
2. What we collect
- Account and profile: name, email, profile photo, language, occupation, introduction and account security records.
- Search and housing plans: locations, budget, dates, household preferences, saved homes, projects, votes and collaborators.
- Community activity: notices, replies, reports, blocks and moderation records.
- Hausu Passport: information you add, completeness status, recipient permissions, expiring links and access logs.
- Identity verification: verification status, verified name, document type, provider, method and date. Unless separately explained, Hausu should not receive or retain biometric templates, selfie images or full identity-document images from the verification provider.
- Office-phone verification: subscriber or representative identity, tax identifier, service address, evidence documents, declared use, authorisation statement, provider references and review status when a professional requests a regulated phone number.
- Applications, visits and contracts: application details, viewing attendance, payment status, contract versions, consent records, signatures and assurance results.
- Technical and support data: device, browser, IP-derived security information, timestamps, diagnostics and messages to support.
We do not intentionally collect special-category data for matching. Do not place health, ethnicity, religion, sexual orientation or other sensitive information in free-text fields unless it is genuinely necessary and you understand the disclosure.
3. Why we use it—and the legal basis
| Purpose | Typical legal basis |
|---|---|
| Provide accounts, searches, projects, replies, Passports, applications and contracts | Performance of the service contract |
| Prepare and transmit an office-phone verification pack requested by a professional customer | Steps requested to provide the service; compliance with applicable telecommunications obligations |
| Prevent fraud, secure accounts, moderate content and maintain audit evidence | Legitimate interests; legal obligations where applicable |
| Process optional Hausu Identity and optional analytics | Your explicit request or consent, as applicable |
| Process payments and maintain financial records | Contract and legal obligations |
| Send product marketing | Consent, or another lawful basis where specifically permitted |
Where we rely on legitimate interests, we assess necessity, proportionality and the effect on your rights. You may object as described below.
4A. Office-phone verification
When an authorised professional requests a Spanish office number, Hausu collects the minimum information and evidence shown in the setup flow and sends it to the selected telecommunications provider and its verification providers. The provider performs the regulatory review and independently decides whether to approve or reject the request. Hausu’s extraction and consistency checks assist with data entry only: they do not authenticate a person, certify a document, provide legal advice or guarantee approval.
The person submitting the pack must be the proposed subscriber or an authorised representative, must check every prefilled field against the original evidence, and must not submit another person’s information without authority. Hausu records the wording version, authorising name and time of authorisation to evidence the instruction.
4. Passport, completeness and identity
You choose what each recipient can see. Private links should expire and remain revocable. Original supporting documents require separate, time-limited permission.
Hausu Identity only states that the checked identity document was valid at the verification date and matched the person completing the one-to-one check. It does not verify property ownership, legal residence, financial reliability or good intentions.
Hausu does not use identity status, nationality, facial data or Passport completeness to rank housemate compatibility. Hausu should not make a solely automated decision that produces legal or similarly significant effects on an applicant.
6. How long we keep it
We keep account data while the account is active and for a limited period afterwards for recovery, fraud prevention and disputes. Community and moderation evidence may be retained after content is removed where needed for safety or legal claims. Financial, application and contract records are retained for the periods required by applicable law. Office-phone evidence is retained only while needed to complete provider review, administer the number, meet applicable record-keeping duties or resolve a dispute, then deleted or irreversibly minimised under the approved retention schedule. The telecommunications provider may retain its own regulatory record under its notice and legal obligations.
Deletion may be delayed where information is required for legal obligations, disputes, fraud prevention or the rights of another person. Retention periods and deletion jobs must be documented internally before production launch.
7. Voice cloning
Voice cloning is optional and available only to authorised workspace administrators. Before creating a clone, Hausu records who authorised it, the speaker’s legal name, the intended AI phone-agent use, the notice version, and a cryptographic fingerprint of the sample. The recording is sent to our contracted voice processor to create a private voice and is not kept as a Hausu file. The provider retains the sample and derived voice while the clone exists under its service terms.
Use only your own voice or a voice for which you hold explicit, documented permission covering AI-generated business calls. Do not clone public figures or impersonate anyone deceptively. Callers are informed that they are speaking with an AI assistant. The speaker may withdraw permission by asking the workspace administrator to delete the voice, or by contacting [email protected].
8. Your rights
Subject to the GDPR and applicable limits, you may request access, correction, deletion, restriction, portability or objection; withdraw consent without affecting earlier lawful processing; and request human review where an automated decision significantly affects you.
Contact [email protected]. We may need to verify the requester without collecting disproportionate information. You may also complain to the Spanish Data Protection Agency (AEPD).
10. Security, children and changes
We use access controls, encryption where appropriate, expiring links, audit trails and data-minimisation measures. No online system is perfectly secure; report suspected compromise promptly.
Hausu is intended for adults able to enter housing arrangements and is not directed to children. We may update this notice when the product or law changes and will highlight material changes.