Privacy Policy
Last updated: 29 April 2026
1. Who we are
DomFlat ("we", "our", "us") is a property management platform for landlords in Bulgaria. Contact: support@domflat.com
2. What data we collect
We collect: • Account data — name, email address, phone number, bank IBAN (optional). • Property data — addresses, lease terms, rent amounts, payment records. • Usage data — pages visited, features used, timestamps (via Google Analytics with your consent). • Technical data — IP address, browser type, device type.
3. How we use your data
We use your data to: • Provide and operate the DomFlat platform. • Send transactional emails (lease reminders, payment alerts, welcome sequence). • Generate lease agreement PDFs and payment receipts. • Improve the platform via aggregated, anonymised analytics. • Comply with legal obligations under Bulgarian and EU law.
4. Legal basis (GDPR)
We process your data under the following legal bases: • Contract performance — to provide the services you signed up for. • Legitimate interests — platform security, fraud prevention, product improvement. • Consent — analytics cookies (you can withdraw at any time via the cookie banner). • Legal obligation — accounting records, tax compliance.
5. Who we share data with
We share data only with trusted processors: • Hetzner Cloud — server infrastructure (EU data centres). • SendGrid (Twilio) — transactional email delivery. • Stripe — payment processing for DomFlat subscriptions. • Google Analytics — anonymised usage analytics (only with your consent). We never sell your data to third parties.
6. Data retention
We retain your account data for as long as your account is active. After deletion, personal data is removed within 30 days, except where retention is required by law (e.g. financial records — 5 years under Bulgarian accounting law).
7. Your rights
Under GDPR you have the right to: • Access — request a copy of your data (Settings → Export data). • Rectification — correct inaccurate data in your profile settings. • Erasure — request account deletion (Settings → Delete account). • Restriction — ask us to limit processing of your data. • Portability — receive your data in a machine-readable format. • Objection — object to processing based on legitimate interests. To exercise any right, email us at support@domflat.com or use the self-service tools in Settings.
8. Cookies
We use one category of cookies: • Analytics cookies (Google Analytics GA4) — only with your explicit consent, set via the cookie banner. You can withdraw consent at any time by clearing your browser cookies or declining via the banner. We do not use advertising or tracking cookies.
9. Security
All data is transmitted over HTTPS. Passwords are hashed with bcrypt. Database access is restricted to internal services only — no direct public access.
10. Changes to this policy
We may update this policy as the platform evolves. Material changes will be notified via email. Continued use of DomFlat after changes constitutes acceptance.
11. Contact & complaints
For privacy questions: support@domflat.com If you are unsatisfied with our response, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) at cpdp.bg.