Privacy policy
What data about you we process, why, for how long and what you can request.
Effective from 9 October 2026. Version 1.5.
This is a translation. In case of any discrepancy, the Latvian version prevails: Latvian version.
In short. We collect only what is needed for your account to work and for notifications to reach you: your email address, your name if you provide it, your search filters and, during the beta programme, also your phone number. We do not sell data, we use ad measurement (Meta Pixel) only with your consent and we do not send marketing emails without your consent. You can delete your account yourself at any time, and your data is then deleted.
1. Who the controller is
Deali is a service of SIA "ReIntellex". The controller responsible for the processing of your personal data is:
- SIA "ReIntellex", registration number 40203659335
- Address: Dzirnavu iela 1, Saldus, Saldus nov., LV-3801
- Email: info@deali.lv
All questions about data should be sent to the email address given above.
2. What data we process
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email address, password | So that your account exists and you can sign in to it | Performance of a contract | For as long as the account exists |
| First name and surname | To address you in emails and in the interface | Performance of a contract | For as long as the account exists |
| Phone number and consent to our contacting you about the Beta (test) programme | So that during the Beta (test) programme we can ask you what works and what does not. For that purpose only: no advertising, no offers, not disclosed to anyone else. In the Beta (test) programme this is a condition of participation. You may withdraw your consent at any time; withdrawal means leaving the beta programme, and the account can be deleted with a single button | Consent (condition of participation in the beta programme) | Until the end of the beta, withdrawal of consent or deletion of the account. After the beta we delete it, unless at that time you separately agree that we may keep it |
| Saved searches: category, filters, selected portals | This is the very essence of the service | Performance of a contract | For as long as the search exists |
| Notification preferences and a log of notifications sent: channel (email or phone), portal, listing and its price, time | To avoid sending the same notification twice, to observe the daily limit and to be able to prove what has been sent | Performance of a contract | 12 months |
| Device notification subscription | So that notifications reach your phone | Your consent given in the browser | Until you revoke the permission or delete the app |
| Usage events in the browser (analytics): page visits (where you came from, for example the link source), steps of registration and search creation, opening the app, notification settings, clicks on listings, device type (phone or computer). They are linked to your account if you are signed in, and to a random tab identifier | To see where people get stuck and whether notifications actually arrive, and to fix it. Our own records only: no advertising or analytics service can see them | Your consent in the cookie bar ("Allow"); it can be withdrawn at any time | 12 months |
| Server events relating to your searches and notifications: search created, edited or deleted, limit reached, first notification sent, notifications switched off or unsubscribed | To see whether the service works as promised and to detect faults in good time | Our legitimate interest in maintaining and improving the service | 12 months |
| Server logs: IP address, time of request, errors, search category and the first characters of the account number. We do not write the full email address to the log | Security, prevention of misuse, troubleshooting | Our legitimate interest in maintaining a secure service | Up to 30 days |
| Payment data: subscription type, amount, date | To provide the paid service and comply with accounting requirements | Performance of a contract and legal obligation | 5 years, as required by accounting rules |
We do not see or store payment card data. It is processed by the payment service provider.
Why a phone number is mandatory during the test period. The Beta (test) programme is a separate offer alongside the service itself: its participants receive all features free of charge and without limits, and in return agree that we may contact them to find out what works and what does not. That is why only those who provide a phone number and give this consent take part in the programme. You may withdraw your consent at any time by writing to us; this means leaving the beta programme, and the account can be deleted with a single button, in which case we delete everything. After the official launch the beta programme ends, and a phone number will no longer be required.
3. Where the data comes from
Almost everything comes from you: you enter your email address, choose filters and allow notifications. If you choose to sign in with Google, Google provides us with your email address, name and profile picture. We never see your Google password.
4. Who we share data with
We do not sell data. Meta receives it only if you have allowed marketing cookies. It is seen only by the service providers without which Deali would not work:
| Who | What they do | Where they are located |
|---|---|---|
| Supabase | Accounts, sign-in, database and recording of usage events | Database in Frankfurt (EU). The company is registered in the USA, so EU standard contractual clauses apply to support access |
| Resend | Delivery of emails | Emails are sent from the EU (Ireland), but account data and sending logs are stored in the USA; the legal basis is the EU standard contractual clauses |
| Hetzner | Servers on which Deali runs | European Union, Helsinki (Finland) |
| Sign-in with a Google account, if you choose it. In this case Google acts as an independent controller for its own purposes, not as our processor | USA, under an adequacy decision of the European Commission | |
| Meta Platforms Ireland Ltd. | Meta Pixel: measuring our Facebook and Instagram ads, only with your consent to marketing cookies. For the collection and transmission of the data we are joint controllers with Meta; afterwards Meta processes the data as an independent controller under its own privacy policy | Ireland (EU); Meta may transfer data to Meta Platforms, Inc. in the USA, under a European Commission adequacy decision |
With each of them, except Google as indicated in the table, data processing terms are in place that prohibit them from doing anything with the data other than providing the service to us.
We may also disclose data to authorities where required by law, for example in the course of an investigation.
5. Whether data leaves Europe
The servers and the database are in the European Union: Deali runs in Helsinki, Finland (Hetzner), and accounts with their searches are stored in Frankfurt (Supabase).
In two cases, however, some data does reach the USA, and we say so plainly:
- Emails. Emails are sent from Europe, but the service provider Resend is a US company, and the sending logs (address, time, email subject) are stored in the USA. The legal basis is the European Commission's standard contractual clauses.
- Sign-in with Google, if you choose it. The legal basis is the European Commission's adequacy decision on the EU-US Data Privacy Framework. If you do not wish this, use the regular sign-in with email.
- Meta Pixel, if you allow marketing cookies. Meta Platforms Ireland may transfer data to Meta Platforms, Inc. in the USA; the basis is the European Commission adequacy decision on the EU-US Data Privacy Framework.
A copy of the standard contractual clauses can be requested by writing to info@deali.lv.
6. How long we keep data
We keep account data for as long as the account exists. When you delete your account in the settings, the account and your searches are deleted immediately, with no possibility of recovery. Only what is required by law is kept longer, for example accounting records of payments made.
If an account has not been used for two years, we send a reminder by email and delete it after 30 days.
7. Your rights
- To know what data about you is held and to receive a copy of it.
- To rectify inaccurate data. You can change your name, phone number and email address in the settings.
- To erase data. You can delete your account yourself in the settings at any time.
- To restrict processing or to object to processing based on legitimate interests.
- To receive your data in a portable format, so that you can take it elsewhere.
- To withdraw consent, for example to notifications or to participation in the beta programme. Withdrawal does not affect what took place before it.
- To lodge a complaint. Please write to us first; if you are not satisfied with the reply, you may contact the Data State Inspectorate of Latvia (dvi.gov.lv).
To exercise your rights, write to info@deali.lv. We reply within one month at the latest, usually sooner. There is no charge for this, unless requests are manifestly unfounded or excessive.
8. Automated decisions
We do not carry out profiling and do not take automated decisions that would produce legal effects for you. Matching search filters against listings is a technical operation, not a decision about you.
9. Listing data
Deali shows publicly available listings from other portals. From a listing we collect only what is needed for searching and notifications: the title, price, location, technical details (for example floor area, number of rooms, year, mileage), time of publication, image link and a link to the original listing.
We do not collect the seller's contact information (name, phone number, email address) from listings. It may appear on Deali only if the seller has entered it in the listing title themselves; in that case it is shown to the same extent as it is public on the portal, and we do not use it for contact, do not enrich it and do not store it separately.
The legal basis is our legitimate interest in providing the search service.
Deali is not affiliated with any listing portal and does not cooperate with them. Portal names and data are shown for information purposes only, and each listing on Deali is a link to the original, so that the user can view it at the original source.
We do not inform listing authors individually, as this would involve a disproportionate effort (Article 14(5)(b) GDPR); therefore this policy is publicly available, and we remove a listing upon a single request.
If you are the author of a listing and would like it no longer to appear on Deali, write to us and we will remove it from display. The listing itself can only be deleted on the portal where it is published.
10. Cookies
Deali uses technical cookies without which the site would not work (for example the sign-in session and your settings), and analytics cookies that help us understand how the service is used. Analytics cookies operate only with your consent, and you can change your choice at any time. More details: cookie policy.
With your separate consent we also use marketing cookies (Meta Pixel) to measure our ads on Facebook and Instagram. They are off by default.
11. Security
The connection to Deali is encrypted. Passwords are stored not as text but as an irreversible hash, and we cannot see them. Access to the database is limited to those who need it for their work, and each account can see only its own data, which is ensured by database-level access rules.
If a personal data breach occurred that endangers your rights, we would report it to the Data State Inspectorate of Latvia within 72 hours and, if the risk is high, also to you.
12. Changes to this policy
If we change the policy materially, we will notify you by email or in the app at least 14 days in advance. Non-material amendments, for example clarifications of wording, are made without separate notice, but we always update the date at the top of the page.