Terms & Conditions and Privacy Notice

FindYourSpace ("the App") is a non-commercial demonstration and prototype created for educational and testing purposes only.

The App is not operated by, affiliated with, or connected to any registered company, business, or other legal entity. It does not provide any real commercial service, and no genuine bookings, payments, rentals or transactions take place through it.

You may create a profile and use the App purely for testing and evaluation. Listings, spaces and any other content are sample data and should not be treated as real offers.

You must be at least 18 years old to create an account and use the App.

Because this is a demo, the service is provided "as is" and "as available", without any warranties of any kind. It may be changed, suspended, or shut down, and data may be removed, at any time and without notice.

The data controller — the party that decides why and how your personal data is processed — is the FindYourSpace project maintainers, an informal, non-commercial group of individuals operating this demonstration.

For any request, question, or concern — including about this notice or your personal data, or to exercise your rights — you can contact us at: findyourspacegr@gmail.com.

To let you create and use an account, we process a limited amount of personal data that you provide:

• Your first and last name;
• Your email address (used for authentication and account-related communication);
• Your password, which is stored securely in hashed form by our authentication provider (we never see it in plain text);
• An optional profile picture, if you choose to upload one;
• Any content you create in the App, such as space listings and favourites;
• The fact that you accepted these Terms & Conditions, together with the date and time of acceptance.

Please do not upload real, sensitive, or special-category personal data (for example data about health, religion, political opinions, or third parties) into this demo.

We process your personal data on the basis of your consent (Article 6(1)(a) of the EU General Data Protection Regulation 2016/679 — "GDPR"), which you give by accepting these terms when you create your account.

You may withdraw your consent at any time by deleting your account (see section 6). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Your personal data is used solely to operate the demonstration: to create and secure your account, to let you sign in, to display your profile and the content you create, and to let you delete your account.

We do not sell your personal data, and we do not use it for advertising or automated decision-making that produces legal effects.

You can delete your account at any time in one of two ways:

• From within the App: go to your Profile page and use the account deletion option ("Danger Zone") available there;
• By email: send a deletion request to findyourspacegr@gmail.com from the email address linked to your account.

When you request deletion, your account is marked for removal and your personal data is deleted within 30 days. Some information may be retained for a short period only where strictly necessary to complete the deletion process.

As a data subject in the EU/EEA you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you;
• Right to rectification — to have inaccurate or incomplete data corrected;
• Right to erasure ("right to be forgotten") — to have your data deleted;
• Right to restriction of processing;
• Right to data portability — to receive your data in a structured, commonly used format;
• Right to object to processing;
• Right to withdraw consent at any time.

To exercise any of these rights, contact us at findyourspacegr@gmail.com. We will respond without undue delay and within the time limits set by the GDPR.

You also have the right to lodge a complaint with a supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA — Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr.

We do not share your personal data with third parties for their own purposes, and we never sell it. Your data is handled on our behalf by the following categories of service providers ("processors"), who are bound by data processing agreements and may only act on our instructions:

• Supabase — authentication, database, and file storage;
• our hosting provider, which serves the application.

Your account data is stored within the European Union / European Economic Area (our Supabase project is hosted in an EU region), so your personal data is not transferred outside the EEA. Were any transfer outside the EEA to occur, it would be protected by appropriate safeguards such as the EU Standard Contractual Clauses.

The App uses only strictly necessary cookies — essentially a session cookie set by our authentication provider so you can stay signed in. We do not use analytics, advertising, or tracking cookies, so no cookie-consent banner is required.

We take reasonable measures to protect your data, but because this is a demonstration project you should not rely on it for storing important or sensitive information.

We may update these Terms & Conditions from time to time. The "Last updated" date at the top reflects the latest version. Significant changes may require you to accept the updated terms again.