Privacy Policy

Last updated: May 2026

1. Data Controller

Reverdin Studio — Corso Vittorio Emanuele II 154, 00186 Rome, Italy.
Partita IVA: IT17458801002 · DPO: dpo@propveri.eu

2. Data We Collect

Identity documents — passport or national ID for KYC verification.
Income data — pay slips, tax certificates, or banking transactions.
Open Banking data — bank account balances and transaction history via Tink (PSD2).
Account data — email address, authentication method, notification preferences.
Usage data — anonymized analytics via Umami (no personal identifiers).

3. Legal Basis

Processing is based on your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)) and on the performance of a contract (Art. 6(1)(b)) when you use Propveri to build and share your rental file.

4. How We Use Your Data

To verify your identity and income documents.
To generate your rental dossier and PDF report.
To send you status notifications and renewal reminders.
To comply with legal and regulatory obligations.

We never use your data to make automated decisions about your solvency. The rental decision remains with the landlord or agency.

5. Data Processors

Your personal data is processed by authorized third-party service providers (Data Processors) under Data Processing Agreements (DPA):

Sumsub (Identity Verification) — processes your identity documents and biometric data for KYC verification. Sumsub Privacy Policy
Tink AB (Open Banking) — processes your banking data for income and expense verification via secure API connections. Tink Privacy Policy
Stripe Inc. (Payments) — processes payment information. Stripe Privacy Policy
Hetzner Online GmbH (Hosting) — servers located in the European Union.

6. Data Retention

Your rental dossier and associated documents are retained for the duration of your active subscription, plus a maximum of 12 months. Identity documents and Open Banking connections are deleted upon revocation of consent or account deletion.

7. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise your rights:

Manage your consents in your account settings.
Request data export or deletion by emailing dpo@propveri.eu.
Lodge a complaint with the Garante per la protezione dei dati personali (Italy).

8. Cookies and Analytics

Propveri uses Umami, a privacy-first analytics tool that collects no personal data and sets no tracking cookies. Session management uses a secure, HTTP-only authentication cookie.

9. Contact

For any privacy-related question: dpo@propveri.eu