Privacy

Bailo, Geneva, Switzerland. Contact: info@bailo.ch.

Your email address, interface language and search criteria (budget, rooms, surface, neighbourhoods).

If you use the document vault: your files are encrypted IN your browser before upload. We only store unreadable bytes, the document type you declare (e.g. "payslip") and its validity date — needed for expiry reminders. No one at Bailo can read your documents; this property is verified by a replayable technical audit.

Your basic-requirements profile (income, debt records, guarantor) stays in your browser: it is never sent to us.

Technically: the IP address and browser at sign-in time, to detect abuse, plus the technical identifier of your notification subscription.

We collect no sensitive data, build no advertising profile, and use no third-party trackers.

To sign you in without a password (single-use sign-in link).

To compare new listings against your criteria and alert you.

To produce aggregate market statistics, which identify no one.

Sign-in links expire after fifteen minutes and are deleted within twenty-four hours.

Sessions expire after sixty days.

Raw scraped page content is purged after thirty days.

The technical event log is purged after ninety days.

Free-tier vault: purged after thirty days of inactivity, with an email warning seven days before.

After you delete your account, your data — vault included — is purged from our servers within thirty days.

Our servers and backups are hosted in Switzerland. Transactional emails and payments may transit through providers established in the European Union or the United States, solely for what they perform (sending an email, taking a payment).

You can export all of your data from your account in one click, and delete your account the same way. You can also write to info@bailo.ch for any access, rectification or objection request.

No advertising cookies, no third-party trackers. The technical session cookie set when you sign in is strictly necessary for the service and requires no consent.

The only audience measurement is Google Analytics, and it exists only with your explicit consent: nothing is loaded or sent before you click “Accept” in the banner, the IP address is anonymised and advertising signals are disabled. You can refuse without any consequence, and change your mind at any time via “Manage cookies” in the footer.

If you choose “Continue with Google”, Google acts as an identity provider: we only receive your verified email address, which joins exactly the same account flow as the magic link. We receive neither your profile nor your contacts, and we store no Google token. Email sign-in always remains available — Google is never required.

The listings we collect are public commercial offers, published by letting agencies on their own websites. They contain no personal data about private individuals, and we collect none. Our crawler is described publicly on the /bot page.