Política de privacidad

Who we are

Wishmap is run by [company name], registered in Malta under number [company number], [registered address] (“Wishmap”, “we”). We are the controller of the personal data described here. Contact us about privacy at [privacy@wishmap.com].

What we collect

We collect only what we need to run Wishmap:

• Account: your email address, and your phone number and first name if you add them; the language you use.
• Wishes: the places you pin on the map, what you are looking for (rent or buy, budget, type of home, dates, requirements) and any notes you write.
• Offers and messages: offers you receive or send, chat messages and viewing times.
• If you list homes: your business details, the homes you list (including the exact address, which we never show publicly) and the documents you upload so we can verify you.
• Technical data: the IP address and browser of your sessions, and records of important actions (for example signing in or sharing contact details), to keep the service secure.
• Text you give our assistant: if you describe your wish in your own words, we send that text to our AI provider to fill in the form for you.

Why we use it

To provide the service you asked for (contract): showing your wish to verified owners and agents, matching homes with wishes, delivering offers, messages and emails.

To keep Wishmap safe and fair (legitimate interest): verifying owners and agents, limiting spam, investigating reports, preventing fraud and abuse.

To improve Wishmap (legitimate interest): counting visits and how features are used, without advertising cookies.

To meet legal obligations, for example keeping records we are required to keep.

Who sees your data

Owners and agents see your wish anonymously (for example “Seeker #K4F2”): never your name, email or phone, until you choose to share them. The public map only shows an area when at least three people are looking there.

We use trusted service providers who process data on our behalf: hosting and storage [hosting provider, Cloudflare], email delivery [Amazon SES], WhatsApp messages [Meta], the AI assistant [Anthropic], and error monitoring [Sentry]. They may only use the data to provide their service to us. Where data leaves the European Economic Area, we rely on adequacy decisions or standard contractual clauses.

We do not sell your data.

How long we keep it

We keep personal data only as long as we need it:

• Closed or expired wishes: 12 months, then we remove your link to them and your notes, keeping only anonymous statistics.
• Text you gave the AI assistant: 90 days.
• Messages: 24 months after the last message in a conversation, or until you delete your account.
• Verification documents: 30 days after our decision; we keep only the result.
• Sign-in links: 7 days. Records of important actions: 24 months.
• When you delete your account, we delete your personal data straight away.

Your rights

You can download all the data we keep about you, and delete your account, at any time on your account page. You can also ask us to correct your data, restrict or object to how we use it, or move it to another service, by writing to [privacy@wishmap.com].

If you are not happy with how we handle your data, you can complain to the Information and Data Protection Commissioner of Malta (idpc.org.mt).

Cookies

We use only cookies that Wishmap needs to work: to keep you signed in, remember your language and keep a wish you have not published yet. Our visit statistics do not use cookies.

Children

Wishmap is for people aged 18 and over.

Changes

If we change this policy in a way that matters, we will tell you by email or on Wishmap before the change takes effect.