Privacy policy

Cheia is an independent property-listing project managed by Roman Basinschi. This page describes the current features of cheia.md. For questions about your information, or to request access, correction or deletion, write to roman.basinschi@gmail.com.

Messages and contact requests. When you submit a request from a listing, we store the contact details and message you enter, the language, the listing and the submission time. We use these details to forward your request to the listing contact.

Abuse prevention. We store a cryptographic identifier derived from the IP address and the request time to limit abusive requests. This is a pseudonymous identifier, not a guarantee of anonymity. Technical providers may also process IP addresses in their operational logs.

Recipients. Request details are shared with the listing contact. Vercel hosts the application, DigitalOcean hosts our database and private photo storage, and Resend delivers email. When an owner uses AI drafting, the listing’s facts and up to three of its photos are sent to Google’s Gemini models (via Google Cloud Vertex AI) to generate suggested text; the owner reviews every suggestion before publishing. These providers process the information needed to operate the service, including on infrastructure outside Moldova. We do not sell information entered into forms. After coordinator hours, help-conversation messages can also be sent to these Gemini models (via Google Cloud Vertex AI) for an automatic reply (see After-hours replies).

On your device. A technical cookie remembers your language. Recently viewed listings are saved in your browser’s localStorage: up to eight entries with a title, link, photo and price. Clear them using the option on the page or by clearing this site’s browser data.

Waiting list. We store your email, optional phone number, language, signup time and IP identifier to record the service interest stated on the form and limit abuse. Email is used for a confirmation and the launch announcement. You can request deletion at any time at roman.basinschi@gmail.com.

Retention. Phone reveal events are deleted after 48 hours. IP identifiers on requests and waiting-list entries older than 48 hours are erased. Messages, viewing requests and waiting-list entries are deleted after 12 calendar months. These operations run on a schedule. Local backups are retained for up to 14 days; encrypted off-server backups retain 7 daily, 4 weekly and 12 monthly recovery points. Information deleted from the live database can remain in those recovery copies until their scheduled removal. You can request earlier deletion from the live service at roman.basinschi@gmail.com.

Accounts. When you sign in, we store your email, provider-supplied name and image, account identifier and email verification status. Account information, favorites and saved searches remain until they or the account are deleted. Sign-in links expire after 15 minutes; sessions use an HttpOnly cookie and expire within 30 days without renewal. Google One Tap is optional and uses Google Identity Services when enabled.

Native app accounts. Email codes expire after 10 minutes and permit at most five attempts. App sessions last at most 30 days, use random credentials kept in OS secure storage, and are stored as hashes on the server. Expired codes and sessions are removed during sign-in and scheduled cleanup. Account deletion requires a separate fresh email code, revokes every session, and removes the live account, owned listings and associated data. Private photos enter a retryable deletion queue after upload links expire. Recovery-copy retention is described above. Photo links are valid for one minute; private photo responses are configured to be cached for one minute. Deleted photo versions may remain in private recovery storage for up to 30 days.

Private transaction cases. At your request, we store the case title, property details, optional party names, proposed price and dates, payment and handover notes, questions, condition answers and document-checklist marks. A case may include a dated snapshot of selected details from your own listing. These data, the revision number and save/expiry dates are linked to your account to provide the preparation service. Cases are not public or visible to other users. Enter only information necessary for this purpose and that you are entitled to provide; inform other people whose details you include. We do not request IDNP, identity-document scans or banking credentials, and the workspace does not accept document uploads. Do not put those details in free-text fields. Case content is excluded from analytics and operational error records and is not sent to an AI processor.

Case retention and deletion. A case expires 90 days after its last save or change (progress, costs or a help message) and becomes unavailable; expired records are removed by scheduled cleanup. You can delete a case immediately from the live service. Deleting your account also removes your cases from the live database. Information may remain in recovery copies until their scheduled expiry under the backup policy above. Files you download or share yourself are outside this deletion process. If we recover the database from a backup, all saved transaction cases and their help conversations are discarded before the workspace reopens so deleted cases and conversations cannot reappear. Keep downloaded copies of preparation materials you want to retain.

Document downloads and external services. Draft files are generated when requested and downloaded to your device; Cheia does not keep a separate archive of generated files. The saved case uses the existing Vercel and DigitalOcean infrastructure described above, including processing outside Moldova. Opening an MSign link does not upload your case. You decide whether to submit a downloaded document to a signing service or a professional, whose privacy terms then apply. Cheia does not automatically email or share case documents.

Progress and costs. At your request we also store, with the case, the milestones you mark and their dates, your cost scenario (financing, bank and loan amount, registration speed, any deposit or arvună with its method, bank and amount, the Register value, the buyer type, whether the parties are close relatives, whether anyone signs from abroad and whether cadastral work is needed) and the quotes you record with their dates. They follow the case’s retention and are never shown to other members.

Help conversations. When you ask for help in a case, we store the topic, your messages, the replies and, only if you choose, a summary of the case: your role, the property type, the milestones you marked with their dates and your checklist progress. cheia coordinators (our staff) read the conversation and see your first name from your account and your language; they never see the case’s names, address, price or circumstance answers, nor your e-mail or phone. Resend delivers notification e-mails that contain no message text. A conversation is deleted with its case, at the latest 90 days after it is closed, or at any time when you delete it.

After-hours replies. Outside coordinator hours, when cheia’s AI assistant is switched on, the messages of a help conversation (with IDNP numbers, bank details, phone numbers and e-mail addresses masked) and its topic are sent to Google’s Gemini models (via Google Cloud Vertex AI) to generate an automatic reply labelled as AI; the case’s contents are not sent. A person from cheia still follows up within 1 day. Replies are kept like the rest of the conversation: deleted with the case, at the latest 90 days after it is closed, or when you delete them.

Notary directory. The directory shows notaries’ professional details (name, licence, office address, phone and e-mail) from the Ministry of Justice’s public State Register of Notaries, so you can contact a notary of your choice (legitimate interest). We do not record which notary you contact. A notary can ask us to remove their entry, or to hide it until the ministry corrects its register.

Delete your Cheia account without the app

Usage statistics. We count page views and actions such as searches, map use, contact requests and starting a listing, with broad page, language, device and referring-source categories. We do not use persistent visitor identifiers, track people across sites or record sessions. Form contents, contact details, account or listing identifiers, precise map coordinates and full URLs are not sent to our monitoring system. Optional usage statistics respect Do Not Track and Global Privacy Control. You can also disable them using the control on this page; that choice is stored only in this browser.

Service reliability. We record technical error categories, application code locations, performance measurements and the outcomes of service operations to find failures and keep Cheia working. We exclude error messages, request bodies, credentials and personal contact details from monitoring records. This operational monitoring is separate from optional usage statistics. Records are processed in our existing monitoring infrastructure hosted on DigitalOcean; access is restricted to operators. Monitoring events and errors are retained for 15 days, then removed automatically.

Native app monitoring. Anonymous screen-category counts are sent only after you opt in through Account. Minimal reliability diagnostics are enabled by default and contain only fixed error types, page and operation categories, platform and app version. They exclude raw error messages, stack traces, user identifiers, searches, contact information, location and device identifiers. We do not collect operating-system crash dumps. These records use the same restricted self-hosted monitoring service and are retained for 15 days.