Nemo Privacy Policy
Operational draft — have counsel review it per country. In the EU a disclaimer cannot wipe out all liability: GDPR, consumer law and the DSA apply. After payment you may edit the listing; the fee is not refunded except where the law requires it.
1. Data controller
Controller: Nemo Listings s.r.o. (demo operator), Prague, Czech Republic.
Privacy contact: globusnemo@gmail.com. DPO contact (if appointed): globusnemo@gmail.com.
If you are in the EU/EEA you may complain to your national supervisory authority. In Czechia that is the Úřad pro ochranu osobních údajů (ÚOOÚ).
2. Data we process
Profile: name, email, country, language, seller type (private / agency / wholesale).
Listings: property details, address, price, photos, video, 3D, plan and VIP status.
Search and alerts: saved filters and whether notifications are on.
Payments: amount, plan, tariff country, payment status and PayPal id. Card number and CVV never land on the Nemo server.
Technical: interface language, language cookie, security logs.
Contact form: first name, last name, email, phone, company, country, topic and message. Used to reply to you and delivered to globusnemo@gmail.com.
Chat: message text. If a Grok/OpenAI key is set, the message is sent to that provider. Without a key, replies stay local.
3. Purposes and GDPR legal bases (Art. 6)
Contract (Art. 6.1.b): publishing, display, tariffs, payment, alerts for a saved search.
Contact-form messages: consent (Art. 6.1.a) and pre-contract / support steps (Art. 6.1.b).
Consent (Art. 6.1.a): optional marketing if you switch it on; withdrawal does not affect processing already done.
Legitimate interests (Art. 6.1.f): security, tariff fraud prevention, moderation, product improvement, balanced against your rights.
Legal obligation (Art. 6.1.c): accounting, regulator requests, DSA complaint records.
4. Retention
Account and listings: while the account is active, then up to 24 months after last activity unless the law requires longer.
Payment records: as long as tax and accounting law of the operator’s country requires (typically 5–10 years).
Saved searches and alerts: until you disable them or delete the query.
DSA notices and security logs: up to 12 months, longer if a dispute is open.
Contact-form messages: up to 24 months after we reply, unless the law requires longer.
Chat without an API key is not used to train external models. With a key, the provider’s policy applies.
5. Recipients
PayPal for payments. The listing is published only after PayPal confirms capture of the charged amount (Orders API / webhook), except a genuine first-free listing.
AI provider (xAI / OpenAI) only if you use chat or AI hero-photo selection with a key configured.
Hosting and email to run the site.
Public authorities on a lawful request.
We do not sell personal data. Transfers outside the EEA need a GDPR tool (adequacy decision, SCCs, etc.).
6. Your rights
Access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, withdrawal of consent.
Email globusnemo@gmail.com. We reply within one month (extendable by two months for complex requests, with notice).
You can turn off all alerts on the Alerts page. Account deletion is requested by email to globusnemo@gmail.com.
7. Cookies and language
Necessary cookies: interface language (lang) and session, so the site remembers your language. We do not set analytics or ads cookies without consent.
8. Children
The service is for people who can enter contracts in their country. It is not directed at children under 16.