Privacy policy

1. What data do we collect?

We collect the following personal data:

• Email address — when you create an account or previously signed up for the waitlist.
• Contact details — your name, email address and message when you contact us.
• Phone number — for verification via WhatsApp (OTP).
• Housing preferences — city, budget, desired surface area, number of rooms and other search criteria.

2. Why do we process this data?

• Service delivery — to filter rental homes by your search criteria.
• Contact — to respond to your question or message.
• Notifications — to inform you by push and Telegram about new homes that meet your search filters.
• Previous waitlist registrations — to inform you about the availability of Nestd.
• Improvement — to improve our service.

The legal basis for processing is your consent (sign-up) and our legitimate interest (service improvement).

3. Sharing with third parties

We only share your data with service providers necessary for Nestd to function:

• Supabase (EU) — database and authentication.
• Meta (WhatsApp Cloud API) — for sending verification codes via WhatsApp (OTP).
• Telegram — for sending rental alerts.
• PostHog (EU) — privacy-conscious analytics for pages, campaigns and product usage.
• Meta Pixel — only on public marketing pages for ads measurement and optimization.

We never sell your data to third parties.

4. Property data

Nestd collects publicly available rental property listings from various housing platforms. This concerns no personal data but public property information.

5. Retention period

We retain your personal data for as long as you have an active account or your previous waitlist registration remains on record. When you unsubscribe or delete your account, we delete your data within 30 days, unless otherwise required by law.

6. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), secured databases and restricted access to personal data.

7. Your rights

Under the GDPR you have the following rights:

• Access — you may request what data we hold about you.
• Rectification — you can have incorrect data corrected.
• Erasure — you can request deletion of your data.
• Restriction — you can have processing restricted.
• Portability — you can receive your data in a common format.
• Objection — you can object to processing based on legitimate interest.

To exercise your rights, contact us at privacy@nestd.nl.

8. Cookies

Nestd uses functional storage (localStorage) for language preference and theme. We also use PostHog analytics with EU hosting to understand which pages and campaigns work, and Meta Pixel only on public marketing pages to measure and optimize Meta campaigns. We disable automatic PostHog click capture and session recordings, do not send email addresses or sensitive housing preferences in analytics events, strip unknown query parameters from analytics URLs and do not sell data.

9. Complaints

Have a complaint about how we handle your data? Please contact us at privacy@nestd.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority.

10. Contact

Muba B.V.
Email: privacy@nestd.nl
Website: nestd.nl