Legal
Privacy statement
You’re looking for a home. Not a privacy novel. Here’s what we do with your data.
Loading company details…
Company details are temporarily unavailable. Contact us at post@opensein.nl.
On this page
Your data, your home search
We use your data for your account, matching rental alerts and help when you need it. We do not sell your data. The housing market is busy enough already.
What do we keep, and for how long?
| Data | For what | Retention |
|---|---|---|
| Account, contact details and search preferences | For signing in, matching alerts and your account. This includes your consent record, achievements (pages, Easter eggs and actions), gifts and free days. | Until you delete your account. Unconfirmed channels: 7 days. |
| Search together | Your name, household members, saved listings, announced applications, role and points. Household members see your points and role, not your individual achievements. | While you take part; applications 30 days, weekly points 8 weeks. Your total points remain while your account exists. |
| Alerts and messages | Rental alerts sent, their delivery status and service messages. For delivery, troubleshooting and the silence guarantee. | 90 days. Afterwards, alert counts without listings remain until you delete your account. Your daily recap: 1 year. |
| Questions for us | Your question, reply address and the page you were on. To help you and improve our answers. | Search Helper emails: 30 days. Questions to the automated help desk: 90 days. Conversations with us: up to 1 year after closing. |
| Payments, SMS credit and partner commissions | Purchases, withdrawals (name, email and confirmation), usage, delivery status, promotion codes and referrals for administration. Card and bank details stay with the payment provider. | 7 years. When you delete your account, the account link is removed where permitted; your current SMS balance is also deleted. |
| Visits and location | Your first referral source and landing page for partner commissions and reach statistics. An approximate location helps centre the map; only counts per place are retained. | Referral source: 180 days or while your subscription runs. A location you share is not retained after looking up your town. |
| Click activity, only with consent | Pages visited, listings viewed and where you stop. To improve the site. | 180 days. Declining or making no choice means no tracking. |
| Fingerprints to prevent abuse | Hashed fingerprints of verified contact details and accounts prevent duplicate trial days and SMS gifts. A fingerprint of your internet connection flags abuse; it does not automatically lead to refusal. | Contact fingerprints: while your account exists; after free days or an SMS gift, another 12 months after deletion, without an account link. Otherwise deleted immediately. Connection fingerprint: 30 days. |
| SMS verification code | To verify your mobile number. Afterwards it is retained as a fingerprint; for SMS alerts, also as a contact number. | The hashed code: up to 1 day after expiry. The SMS channel: until you remove it. |
| Documents you upload | Your rental application file across your devices, such as income or employer statements. | 3 months; at your request, up to 6 months after upload. One reminder 2 weeks before deletion. You can delete them earlier at any time. |
What is our legal basis?
| Use | Legal basis |
|---|---|
| Alerts and account | Your consent. Stop alerts or delete your account through your account settings. Without a contact channel and search preferences, we cannot send matching alerts. |
| Documents and click activity | Separate consent for each. You can delete documents or turn off tracking at any time; your alerts will keep working. |
| Searching together, payments and support | Performance of our contract. We retain payment records to meet our legal obligations. |
| Preventing abuse, referral source and location | Legitimate interests: allocating free days fairly, paying partners and running and improving the service. You can object to this processing. |
Housing preferences through woonGPT
woonGPT, huisGPT, huurGPT, Clouse and woonPilot are search entrances to OpenSein, at woongpt.nl, huisgpt.nl, huurgpt.nl, clouse.nl and woonpilot.nl. There you choose a chat style yourself: woonGPT, Clouse, Homeini, woonPilot or Blok. What you type goes through our servers to the same AI provider as the help desk. That provider is listed below under our service providers and receives your input, your language and, when you make an amendment, the previously identified housing preferences. We do not keep this input as a chat history. After you confirm, supported preferences are applied to your existing search draft. The normal OpenSein retention periods apply to that draft.
The AI entrance remembers your selected style and language in this browser tab. A partner code and campaign details remain usable there for up to one day when continuing to OpenSein. The existing referral cookies and partner attribution conditions then apply on OpenSein.
Your documents are not an open house
Uploading is optional. Your documents are stored encrypted. Do not include your citizen service number (BSN), document number or a copy of your ID. Delete documents directly in your account; report that you have found a home and we delete your file immediately. We report data breaches as required by law.
Who helps us provide the service?
Our service providers handle the website, storage, messages, support and payments. Their roles and recorded agreements are listed below. Dates appear where recorded.
Service providers and agreements
“Recorded” means we have registered the agreement. “Not yet recorded” means there is no record. Providers shown in grey are not currently used.
| Party | For what | Sees something of you | Agreement |
|---|---|---|---|
| Netlify | hosting: the site and the functions behind it | always | not yet recorded |
| Supabase | the database | always | not yet recorded |
| Resend | email: confirmations, login links, the file and a question you pass on to us | if you leave an email address | not yet recorded |
| Telegram outside the EU | the Telegram channel: the alerts, what you ask the bot and what you set there Telegram processes outside the EU. A chat with a bot is not end-to-end encrypted: what you send the bot is readable to Telegram and to us. | if you chose that channel | not yet recorded |
| Meta (WhatsApp Business) | the WhatsApp channel | if you chose that channel | not yet recorded |
| Twilio | if you chose that channel | not yet recorded | |
| BudgetSMS B.V. | text messages: your alerts and the code you use to confirm your mobile number | if you confirm your mobile number or turn on text messages | not yet recorded |
| Your browser's push service (Apple, Google or Mozilla) | the push channel | if you chose that channel | not yet recorded |
| Discord | the Discord channel | if you chose that channel | not yet recorded |
| Signal (own server) | the Signal channel | if you chose that channel | not yet recorded |
| Mollie | the payment provider | if you buy a pass | not yet recorded |
| Stripe | the payment provider | if you buy a pass | not yet recorded |
| Evomi | the proxy we fetch listings through; sees nothing of you, only the providers' sites | never for your data | not yet recorded |
| Scaleway | the help desk and woonGPT entrances: identifying answers and analysing housing preferences For the help desk, your question is sent with your language, whether you use the free plan or Zoekpas, and whether alerts are enabled. A follow-up within ten minutes also includes the topic key, never your previous text. The help desk chooses an answer from our own list. For the five woonGPT entrances (woonGPT, huisGPT, huurGPT, Clouse and woonPilot), your input, language and any previously identified housing preferences go to the same provider. The model returns structured preferences. You review what is applied to your search draft. | when you ask a question | not yet recorded |
Some services process data outside the EU. For transfers by our service providers, we use European standard contractual clauses; you can request a copy from us. Telegram processes data outside the EU and bot chats are not end-to-end encrypted: Telegram and we can read them.
Cookies: a quick bite
We use our own cookies for sign-in, language and referrals. The visit cookie remembers your first referral source and helps count visitors by town. It can be linked to your account when you sign up or pay. We only track click activity with your consent. Separately, your account records achievements such as Easter eggs found.
For the rent check, we count use, imports and the landlords and property features entered, without linking them to your account. We do not store advert text or addresses for these statistics.
Choose “Rather not” at the bottom to stop tracking. No choice means no consent either. You can delete cookies in your browser and change your tracking choice at the bottom.
Which cookies do we use?
| Cookie | Purpose | Duration |
|---|---|---|
os_account | Stay signed in | 90 days or until sign-out |
os_inlogcode, os_aanmeldcode | Bind sign-in and sign-up codes to your browser | 15 minutes / 48 hours |
os_google, os_nieuw, os_wa | Secure Google sign-in or passkeys; temporarily store your Google ID, email and name for a new account | 10 / 15 / 10 minutes; verification cookies removed sooner after use |
os_lang | Remember your language | 1 year |
os_ref, os_s | The last partner click for commission; a sharing link for free Search Pass days | 30 days (configurable up to 90) / 14 days |
os_bz | A random visit ID for referrals and counts; click activity only after consent | 180 days; the site also works without it |
os_beheer, os_portaal | Sign-in for administrators / partners | 8 hours / 30 days or until sign-out |
os_geo_proef | Only during a location test: a test flag, not a location | 1 day |
We use no advertising trackers or external analytics. Your approximate town comes from your connection. “Use my location” sends a rounded location to our server once to find your town; we do not retain that location.
You hold the key
In your account you can view, change, download and delete your data. You can withdraw consent, object or ask us to restrict processing. Email the contact address above; we respond within one month. You can also complain to the Dutch Data Protection Authority.
After deletion, only the exceptions listed above remain, such as legally required payment records and temporary anti-abuse fingerprints. We remove your account link where permitted. Withdrawing consent does not affect earlier lawful processing.
Updated on 29 September 2026. When you sign up, we record which version applied.