Privacy policy

Last updated 8 August 2026

Who is responsible for your data

Plaz is the data controller for the personal data you give us when you use the app. Plaz is a platform that connects tenants and landlords directly. We are not a rental agency: we do not visit, rent out or manage homes, and we never take payment for a property.

Company name, registered address and RCS number are published in our legal notice. Data protection contact: hello@plaz.lu.

What we collect

  • Account data: name, email address and password (stored encrypted).
  • Housing profile: budget, preferred commune, property type, move-in date, number of occupants and employment situation. You choose to provide this.
  • Listings you publish, including photos, price and address area.
  • Applications you send and messages you exchange with the other party.
  • Reports you file about a listing or a person.
  • Basic technical data needed to run and secure the service.

Why we use it and on what legal basis

  • To run your account and show your listings or applications — contract performance.
  • To calculate your match score and show homes that fit your profile — contract performance, based on the profile you filled in.
  • To prevent fraud, scams and abuse, and to review reports — legitimate interest.
  • To answer support requests — legitimate interest.
  • To meet legal obligations in Luxembourg — legal obligation.

We do not sell your personal data and we do not use it for third-party advertising.

Who can see your data

Landlords see the application you send them: your name, move-in date, number of occupants, employment situation and your message. Tenants see the landlord contact name attached to a listing. Other visitors never see your email address or your housing profile.

We use processors for hosting, database and email delivery. They act on our instructions and store data inside the European Union where possible.

How long we keep it

  • Account and housing profile: until you delete your account.
  • Listings: while online, plus a short archive period after removal.
  • Applications and messages: up to 24 months after the last message.
  • Reports: up to 36 months, so we can spot repeat behaviour.

Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest.

You can delete your account and personal data yourself at any time from Profile → Delete my account. That removes your profile, your applications and takes your listings offline immediately.

For any other request, write to hello@plaz.lu or hello@plaz.lu. We answer within 30 days. You can also complain to the Luxembourg data protection authority, the CNPD (Commission nationale pour la protection des données).

Storage on your device

We store your session and your saved homes on your device so the app works. See the cookie policy for details.

Contact and support