Privacy Policy of the Bytometr service
This is an English translation for information only. The Czech version (
zasady-ochrany-osobnich-udaju.cs.md) is the binding text and prevails in case of any discrepancy.
Version 1.0, effective from to be added
This policy explains which personal data we process when operating the website https://bytometr.cz, the MCP server and the Hlídací pes service, why, for how long, and what rights you have. We follow Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the processing of personal data. Capitalised terms (Service, Account, Subscription, Watch…) have the meaning given in our terms and conditions (https://bytometr.cz/obchodni-podminky).
1. Who processes your data
The controller is LIFEGOAL s.r.o., company ID (IČO) 06730981, registered office Harmonická 1384/13, Stodůlky, 158 00 Praha 5, Czech Republic, entered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 287957 ("we").
For personal-data matters write to reality@lifegoal.cz or to the registered office. We have not appointed a data protection officer; the law does not require us to.
2. In short
- To create an Account we need only an e-mail address. We have no passwords.
- Sign-in links, sessions, API keys and tokens are stored only as a fingerprint (hash), not in readable form. The IP address at sign-in and on MCP calls is stored only as an HMAC fingerprint and deleted after 30 days.
- Payment cards are processed by Stripe; we do not see them.
- The website uses no analytics or advertising cookies, only the necessary sign-in cookie.
- Agents' contact details that are part of the listings we take over are not published, not provided in the Service and not used (section 5).
3. Customers and Account users
3.1 Which data, for what and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Account: e-mail, website language, date of creation and last sign-in, role (client / administrator), blocking if any | creating and keeping the Account, communication | performance of a contract, Art. 6(1)(b) GDPR (for a free Account, the website terms of use) |
| Sign-in link: e-mail, fingerprint of the link, HMAC fingerprint of the IP address, time | password-less sign-in; limiting the number of links per address and IP (protection against misuse) | Art. 6(1)(b) and (f) GDPR (security) |
| Browser session: fingerprint of the cookie value, time of creation, expiry, last activity, sign-out | keeping you signed in | Art. 6(1)(b) GDPR |
| API keys: the name you gave the key, its first few characters, fingerprint of the key, time of creation, last use and revocation | MCP client access to the Service | Art. 6(1)(b) GDPR |
| OAuth connections: the application (the name and addresses the AI assistant stated at registration), fingerprints of codes and tokens, scope, times of issue, use and revocation | connecting an AI assistant without sharing a key | Art. 6(1)(b) GDPR |
| MCP usage records: time, tool, query parameters trimmed to what the tool declares (texts at most 100 characters), number of rows returned, processing time, result, error code, authentication method (key / OAuth), which key or application, HMAC fingerprint of the IP address | counting limits, usage statistics in your Account, handling errors and complaints, detecting misuse and data extraction (Article 15 of the terms) | Art. 6(1)(b) and (f) GDPR (security, protection of the database and defence of legal claims) |
| Subscription: Stripe customer and subscription identifiers, price identifier, status, end of the paid period, cancel-at-period-end flag, start of payment delay, amount and currency of the price | managing the Subscription and access, revenue overview | Art. 6(1)(b) GDPR; accounting obligations, Art. 6(1)(c) GDPR |
| Order record: the version of the terms you accepted, the declaration "Jednám v rámci své podnikatelské činnosti" ("I am acting within my business activity"), time, payment session identifier | proving on which terms and with which declaration the Contract was concluded | Art. 6(1)(f) GDPR (defence of legal claims) |
| Hlídací pes: name and settings of the filters (area, deal, type, layout, price and floor-area range, frequency, active / paused), records of sent and failed e-mails (time, number of offers, reason for failure), which offers a Watch has already sent you, fingerprints of the unsubscribe links | sending alerts, ensuring no offer arrives twice, overview of e-mails in your Account | Art. 6(1)(b) GDPR |
| Dashboards: names of dashboards and widgets and widget parameters, as saved by your AI assistant | showing dashboards in your Account | Art. 6(1)(b) GDPR |
| Manual access and Account administration: free access granted by an administrator (until when, reason, by whom), record of administrators' actions on the Account (granting and revoking access, blocking, revoking a key or connection; time, by whom, numeric Account ID, state before and after) | administering the Service, supervising administrators, proving actions | Art. 6(1)(f) GDPR |
| Service e-mails: address and content of the messages we send you (sign-in links, order confirmations, Hlídací pes alerts, notices under the terms) | performance of the contract and notification obligations | Art. 6(1)(b) and (c) GDPR |
The e-mail address is necessary to create an Account; without it you cannot have an Account or a Subscription. Other data arise from how you use the Service.
Payment data. On the Stripe payment page you enter the card, name, billing address and possibly a VAT ID. Stripe processes these data and they do not reach us; we have only the data in the table above. At the first order Stripe receives from us your e-mail and the internal numeric ID of your Account.
Commercial communications are not sent to you without consent or outside the limits of Section 7 of Act No. 480/2004 Coll.
3.2 How long we keep data
The website deletes data under this table automatically (a check roughly every 6 hours), unless stated otherwise.
| Data | Retention |
|---|---|
| Sign-in link (e-mail, IP fingerprint) | deleted 1 day after creation (the link itself is valid 15 minutes) |
| Browser session | deleted on expiry (at most 30 days) or 1 day after sign-out |
| OAuth codes | deleted 1 day after expiry (valid for minutes) |
| OAuth tokens | deleted 30 days after revocation or after the last of them expires (the refresh token is valid 30 days) |
| MCP usage records | IP fingerprint cleared after 30 days; record deleted after 400 days |
| Hlídací pes records of e-mails, sent offers and unsubscribe links | deleted after 400 days |
| Records of received Stripe events (event identifier and type, no content) | deleted after 90 days |
| Account, API keys (revoked ones too), copy of the Subscription, Hlídací pes filters, dashboards, manual access | until the Account is closed (filters and dashboards also until you delete them). Inactive Accounts are not deleted automatically today. |
| Order record (version of the terms and declaration) | for the term of the Contract and then for the limitation period (usually 3 years, Section 629 of the Civil Code), or until a dispute ends |
| Record of administrators' actions | without time limit; after the Account is closed only the numeric ID remains, which can no longer be linked to the e-mail |
| Accounting documents (payment documents) | for the period set by the Accounting Act (accounting documents 5 years from the end of the accounting period, Section 31 of Act No. 563/1991 Coll.); documents issued by Stripe are kept by Stripe under its own rules |
Closing the Account. On a request sent from the Account e-mail to reality@lifegoal.cz we close the Account (first cancelling the Subscription in Stripe). Closing the Account deletes all the above data linked to the Account, except accounting documents, the order record for the period in the table and the record of administrators' actions in pseudonymous form.
Backups. We back up the database every night. Backups are kept for at most 6 months (the last 3 on the server; on the backup storage the last 14 days and the first backup of each of the last 6 months). Deleted data may therefore persist in backups until they are naturally overwritten. We use backups only to recover from a failure; if we restored a backup, we would carry out the deletion again.
4. Website visitors
What we store. Our web server keeps no access log (with IP addresses) of visitors. Views of area and agency pages are counted only as aggregate counts per day and page, without an IP address, a user or browser data. Against flooding of some parts of the website (for example registration of OAuth applications) we use a short-term limit by IP address held only in memory and never stored. Under the rules of our code, the application's operational records (the system journal) contain no IP addresses, e-mails or tokens.
If you request a sign-in link, we store your e-mail and the IP fingerprint under section 3.
Cookies. The website uses a single cookie, reality_session, and only after you sign in. It is strictly necessary (it keeps you signed in), protected (HttpOnly, Secure, SameSite=Lax), valid for at most 30 days and deleted on sign-out. Consent is not required for necessary cookies (Section 89(3) of Act No. 127/2005 Coll., on electronic communications). We use no analytics, tracking or advertising cookies or measurement tags. Should we deploy them in the future, we will ask for your consent in advance with a consent banner and update this policy.
Files loaded from third parties. To show the map and charts your browser loads files directly from these providers on some pages (the map and area pages, the Account, dashboards):
- the MapLibre map library from
cdnjs.cloudflare.com(the cdnjs service, operated by Cloudflare, Inc.); - the ECharts chart library from
cdn.jsdelivr.net(the jsDelivr service); - base-map tiles and fonts from
tiles.openfreemap.org(the OpenFreeMap service).
When a file is loaded, your IP address, browser data and the address of our website (without the path of the specific page; the website sends only its origin under its Referrer-Policy setting) are technically passed to these providers. We pass them no other data. These providers are not our processors; they handle the data under their own rules and may process them outside the EU. The legal basis is our legitimate interest in a working map and charts (Art. 6(1)(f) GDPR).
5. Agents and other persons named in listings (Art. 14 GDPR)
This section is for persons whose data we did not obtain from them.
Which data. The listings from which we compute market statistics, taken over from publicly available real-estate advertising portals, include for some offers a contact of the agent or advertiser: name, telephone, e-mail and web address, as published with the listing. The listings also contain the name of the real-estate agency, which for a sole trader may consist of their name.
Source. Publicly available real-estate advertising portals (data published with the listing).
Purpose and how we handle the data.
- We do not use the contact data: we do not publish them on the website, do not provide them in the Service, via MCP, in dashboards or in Hlídací pes e-mails, do not contact or profile anyone by them. We store them only because they are part of the records we take over, which we keep complete and unchanged so that we can verify and repeat our processing (error checks, recomputing statistics).
- We store them separately from the other listing data, in a table with restricted access: our automated processing may only write to it and cannot read it.
- We use the agency name for statistics on agencies as firms. An agency whose name may be the name of an individual is not shown on the website or via MCP.
- We do not keep photos from listings: we download them only to compute a fingerprint for recognising duplicate listings and delete them at once.
Legal basis. Legitimate interest (Art. 6(1)(f) GDPR) in complete and verifiable source data. In the balancing we took into account that these are data you published yourself for business contact, that we keep them separate from other data, provide them to no one and do not use them.
Recipients. Only the provider of our server and backup storage (section 6).
Retention. For these data we have no automatic deletion period yet. They are stored in the database, in the archive of the original files taken over and in backups (section 3.2). We will set a deletion period and add it to this policy. On your request or objection we will delete your contact data under the rules below.
Your rights. You have the rights under section 9, in particular the right to object to the processing (Art. 21 GDPR): if you write to reality@lifegoal.cz, we will delete your contact data unless we demonstrate compelling legitimate grounds that override your interests. On request we will tell you which data we hold about you and from which specific source they come (Art. 15 GDPR).
Why we do not inform you individually. We do not use the contact data and therefore do not contact you; informing you individually would involve a disproportionate effort and would itself mean further processing of your data. We therefore publish the information in this policy (Art. 14(5)(b) GDPR).
6. Who receives the data
Processors (processing data only on our instructions):
- Hosting providers with servers in the EU — operation of the servers running the website, the MCP server, the database and our mail server, and the backup storage for database backups and the archive of files taken over.
Independent controllers and other recipients:
- Stripe (Stripe Payments Europe, Limited, Ireland, and other companies of the Stripe group) — payments, subscription management and payment documents. Stripe acts as our processor and, for some purposes (for example fraud prevention and its own legal obligations), as an independent controller; details at https://stripe.com/privacy.
- Providers of map and chart files (cdnjs / Cloudflare, jsDelivr, OpenFreeMap) — only the data your browser technically sends when loading a file (section 4).
- Accountants and tax advisers, if we use them, to the extent of accounting documents.
- Public authorities, where the law requires it.
E-mails are sent through our own mail server running on the server above; we use no third-party mailing service.
AI assistants are not our processors. You choose and contract the AI assistant (for example Claude or ChatGPT) yourself. What you write to it and what our Service answers is processed by its operator under your contract with it, not on our instructions. From the AI assistant we receive only the tool-call parameters (section 3.1) and the data it states about itself when registering an OAuth connection.
7. Transfers outside the EU
Data may be transferred outside the European Economic Area by Stripe (the Stripe group, whose parent company is in the USA) and by the providers of map and chart files (section 4). Stripe bases transfers to the USA on the EU–US Data Privacy Framework, under which it is certified, and on the standard contractual clauses approved by the European Commission. We ourselves transfer no data outside the EEA.
8. Automated decision-making and security
We carry out no automated decision-making with legal effects and no profiling within Art. 22 GDPR. Only the technical limits of the Service agreed in the contract are applied automatically (for example refusing calls above the daily limit). Blocking an Account is always decided by a person.
Security. The website and the MCP server communicate only in encrypted form (HTTPS). We use no passwords; sign-in links, sessions, API keys and OAuth tokens are stored only as SHA-256 fingerprints. IP addresses are stored only as an HMAC-SHA256 fingerprint with a server secret key. Administration is protected by a second factor (TOTP) and administrators' actions are recorded. Database access rights are separated by roles; agents' contacts are in a table that automated processing cannot read.
9. Your rights
You have the right:
- of access to your data and to a copy (Art. 15 GDPR);
- to rectification of inaccurate data (Art. 16 GDPR);
- to erasure (Art. 17 GDPR), for example by closing the Account;
- to restriction of processing (Art. 18 GDPR);
- to portability of data you provided to us and which we process under a contract, in a machine-readable format (Art. 20 GDPR) — for example dashboard and filter definitions;
- to object to processing based on legitimate interest (Art. 21 GDPR).
Exercise your rights by e-mail to reality@lifegoal.cz. If you write from an address other than the Account e-mail, we may ask you to verify your identity. We will reply without undue delay, at the latest within one month (in complex cases the period may be extended by two further months; we will inform you).
10. Complaint to the supervisory authority
You have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Praha 7 – Holešovice, Czech Republic, e-mail posta@uoou.gov.cz, website https://uoou.gov.cz.
11. Changes to this policy
We update this policy when the way of processing changes (for example when a new tool or supplier is deployed). We publish the new version at https://bytometr.cz/ochrana-osobnich-udaju; we inform customers of a material change by e-mail.
Version 1.0, effective from to be added.