Privacy policy

PisoPass S.L., Carrer ___, 08000 Barcelona, NIF B-00000000.

Your name, date of birth, email address and phone number. Your ID check (see “Your ID check with Didit” below). The documents you upload: bank statements, payslips, if you are self-employed your tax returns (Renta, Modelo 130 and 303), your work contract and any other paper you add. What you tell us: your net income and how you earn it (employed, self-employed or other), your employer and your contract (its type, since when, until when if fixed-term, whether your probation period is over), your move-in date and household. The flats you apply for and your messages to agencies. A person at PisoPass checks your documents by hand. If you choose to confirm your work email, we email a 6-digit code to it. We keep only its domain and a masked version (for example c•••@acme.es), never the full address, and we don't contact your employer. Our send log shows that address masked too. If you record or upload a video (optional: your intro video, or one for a single flat), it shows your face and voice: that is personal data too. Agencies see it on the links you choose as soon as it's uploaded; PisoPass can block it if it isn't right for agencies, and then emails you why. We don't use it to identify you, and no face recognition or other biometric processing is done with it. If you write a few lines about yourself (“About you”) or a note for a flat (optional), we keep that text as you wrote it; agencies see it right away; PisoPass can block it if it isn't right for agencies, and then emails you why. Once we have blocked a video or text of yours, we look at the ones you add or change after that before agencies see them. When an agency replies on one of your links (an invitation to a viewing, a question, or “not this time”), we keep what it entered: agency name, contact person, phone, email, website, proposed times and place, what it asks for and its message. To investigate abuse, we also keep a coded form of the internet address (IP address) the reply came from, never the address itself, for 30 days: it can only be matched against an address someone already has, for example together with the authorities.

Coming soonIncome read from your bank through open banking. We'll update this policy before it starts.

To check your ID we work with Didit (Didit Technologies, didit.me) as our processor. On Didit's page, not ours, you show your passport or ID card and take a live selfie; Didit checks that the document is genuine, that the selfie is a live person and that the face matches the photo on the document. Comparing your face with the photo on your ID uses biometric data (Art. 9 GDPR): only for this check, only when you start it, and done by Didit, not by us. PisoPass never sees your ID photo or selfie. Didit checks them and deletes them right after the check. We only keep the result. Didit deletes the photos and the face data as soon as its result is in (we have it do so through its API), at the latest after the retention period set in our Didit account (30 days). Only if Didit's own staff review a check by hand (“In Review”) may they look at the photos; Didit then deletes them once that review is done. Where Didit processes the data is set in our agreement with Didit: [placeholder: data location (EU?), to be confirmed before launch]. From Didit we get the result: whether each part passed, its scores and warning codes, the name and date of birth on your ID, and the type of document. We ask for your date of birth to compare it with your ID; agencies only ever see your age. If the name and date of birth fit the ones you entered (small differences such as accents, a second surname or a middle name are fine), your ID counts as checked and your Pass takes the name as written on your ID. If they differ, we show you both and you decide: use the ones on your ID, or tell us something is wrong and a person at PisoPass looks at it. We never store your document number, personal number, address, nationality or the country that issued the document. You have up to 3 tries; for more, write to us.

When you pay, Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland) processes your payment for us. You enter your card details on Stripe's page, not ours: we never see or store your card number. Stripe may also use payment data to prevent fraud and to meet its legal duties, under its own privacy policy (stripe.com/privacy). We keep, as a customer at Stripe, your name and email address; for each payment what you paid, when, for which plan, whether it is a subscription and until when it runs, any refund, and when you asked us to start your Pass right away. Stripe keeps its records of payments and invoices as the law requires; we delete our copy with your account. [placeholder: Stripe's role (processor or independent controller) and where it processes the data, to be confirmed before launch]

Your ID check: the name and date of birth Didit read from your ID, and the type of document, as soon as the check is decided (right away when they fit your Pass); the result of each try (passed or not, scores, warning codes) 30 days after your Pass ends. Didit deletes its copy, the photos and the face data included, right after the check (after a review by Didit's staff, once it is done), at the latest after the retention period set in our Didit account (30 days); if you delete your account, we have Didit delete anything still left at once. An ID file uploaded before we checked IDs with Didit: deleted as soon as we've checked it. Your date of birth: like your name, with your account. Bank statements and tax returns (Renta, Modelo 130 and 303, which say much more than your income): 7 days after we've checked them. A document we reject: 30 days after the rejection. All other documents: 30 days after your Pass ends. Documents of a Pass that was never paid: 30 days after you uploaded them. A confirmed work email (its domain and masked address): until you remove it, at the latest 30 days after your Pass ends, or 30 days after you confirmed it if your Pass was never paid; a code we sent that wasn't typed in, after 15 minutes. Your intro video: until you delete it (you can, any time), at the latest 30 days after your Pass ends; one we blocked, 30 days after we blocked it; replaced by a new one, right away. A video you made for a single flat: as soon as you stop or delete that link, at the latest when your Pass ends; replaced by a new one, right away. Your “About you” text: until you change or delete it (you can, any time), at the latest with your account. Agencies' replies on your links: until you delete them (you can, any time), at the latest 30 days after your Pass ends, and never longer than 180 days after they arrived; the coded form of the internet address a reply came from, 30 days after it arrived. Your note for a flat, and your message to an agency when you send your Pass through its agency link: at the latest 30 days after your Pass ends, and never longer than 180 days after you wrote it; with the link if you delete it. The details of an agency's answer to your application (contact person, phone, email, website, proposed times and place, what it asks for) and its message to you, also in the application's history: 30 days after your Pass ends, and never longer than 180 days after the answer; whether it invited you, asked for more or declined, and when, stay with the application. What we checked stays on your Pass as a result (for example “ID checked on 14 Sep”) while your account exists. Accounts without a login and without a valid Pass for 12 months are deleted, and you can delete yours any time.

Only the agencies you send a link to (yourself, or through an agency's own PisoPass link) or apply to, and only until you stop the link or your Pass ends. They see your name and your age (never your date of birth), marked “from ID” once your ID is checked, your check results and which documents you added, and the domain of your work email if you confirmed it (never the address); your ID itself, its photos, number and type, and your nationality are never shared. They can download a file only if you allow it, and always with a watermark. The video you chose for a link (your intro video, or one you made for that flat), from the upload on and only on that link, unless PisoPass blocked it or is still checking it; your “About you” text and your note for that flat, unless PisoPass blocked them or is still checking them. The video plays in their browser, without a download button. What an agency enters when it replies on your link is shown to you exactly as it entered it, and nobody else sees it except PisoPass staff handling abuse; agencies without a PisoPass account are not checked by us, and your dashboard says so. If you're an agency replying on a renter's link: what you enter is shown to that renter as you wrote it and emailed to them, and kept at most 30 days after their Pass ends and never longer than 180 days; the renter can delete it sooner. The contact details, times and place you give with an answer to an application are kept just as long. To investigate abuse, we keep a coded form of the internet address you replied from for 30 days (never the address itself); it can only be matched against an address someone already has, for example together with the authorities.

Access, correction, deletion, portability and objection. Write to [email protected].