Privacy · Siia

Who is responsible

The Siia team runs siia.ee and decides how personal data is used on it. For questions about your personal data, write to the address at the end of this page.

What we collect

Account: your e-mail address, your name and, if you sign in with Google, your Google account identifier.
Contact details: phone number and city, if you add them. You verify the number in Telegram: Siia receives from Telegram only the number you share yourself, and your Telegram chat identifier, kept until the check is done (at most 30 minutes).
Listings: address, photos, description, price and the other details you enter about the property.
Activity: homes and searches you save, messages, viewing requests, reservations, reviews and reports you send.
Technical data: IP address, browser type and the pages you open, kept in server logs.
Visit statistics: which pages are opened and which buttons are clicked, counted with PostHog on its EU servers. This works without cookies and does not tell us who you are.

Why we use it

To show who is selling: your name appears with your listings, and your phone number only if you choose so.
To run the service: publishing listings, delivering messages, arranging viewings and reservations.
To notify you about things you asked for, such as price changes and new matches.
To keep the site safe: investigating reports and stopping fraud.
To meet legal duties, for example accounting rules.

Who sees what

Other people see your first name and the initial of your surname, your listings and reviews about you.
A seller sees your name and message when you write or ask for a viewing.
Your phone number is shown only to signed-in people, and only on listings where you switched it on.
We do not sell personal data and there is no advertising tracking on Siia.

How long we keep it

Account data: for as long as you have an account.
Listings: while they are live and up to 12 months after they end, so that disputes can be resolved.
Messages: until you or the other person deletes the account, at most 24 months after the last message.
Server logs: up to 90 days.
Records the law requires, such as accounting documents: for the period the law sets.

Your rights

You can ask to see your data, correct it, delete it, limit its use or receive a copy to take elsewhere. You can object to a use you do not agree with. Write to us and we answer within one month. You can also complain to the Estonian Data Protection Inspectorate.

Cookies

Siia uses only the cookies it needs to work: one that keeps you signed in and one that protects forms. There are no advertising or third-party tracking cookies.

AI assistants

You can use Siia through an AI assistant such as ChatGPT or Claude. The assistant connects to the Siia server at siia.ee/mcp and asks it for what you need.

Siia receives only the requests the assistant sends: search filters, the listing you ask about and, for your own listings, the details you ask to change. Siia does not receive your conversation with the assistant.
Searching works without an account. The requests are kept in server logs like any page visit (IP address, time, request), up to 90 days, and are counted for the rate limits.
Answers contain only what the site shows to everyone. Phone numbers, e-mail addresses and the full names of private sellers are never sent to an assistant.
To manage your listings, you connect the assistant to your Siia account. Claude and ChatGPT open the Siia sign-in for this and ask for your consent; other assistants use a personal access token. A connected assistant can see your own listings (drafts included) and create, change, publish, pause and mark as sold only your own listings. It cannot see or change your messages, your account or anyone else's data. For each connection Siia keeps the assistant's name, when it was connected and last used, and what it may do, not your conversation.
You can disconnect an assistant at any time on the "AI access" page (Connected assistants) and revoke a token on the same page. "Sign out everywhere" in your account settings also ends every assistant connection. A connection made by signing in lasts up to 30 days without use; a token stops working on its own after a while.
What the assistant does with the answers is decided by its provider (for example OpenAI or Anthropic) under its own privacy policy.