Privacy Policy

1. Who is responsible for your data

The controller of personal data is a private individual, the owner of the Chilli Villi project.

No legal entity has been registered for the project yet: the service has no registration number and no registered address, and we do not put a guess in their place.

Once registration happens, the full name, registration number and address will be published here and in the other service documents.

For any data question, write to [email protected] with "Personal data" in the subject line.

2. What we process

Data you give us yourself:

• signing in via Telegram — your numeric Telegram identifier and display name;

• signing in another way — your email address, or an external account identifier if you sign in through one;

• preferences — the language and theme you chose;

• the content of your messages to support and to the bot.

Data generated by using the service:

• in-app actions — cards viewed, likes and dislikes, favorites, saved searches and their parameters;

• a guest-session identifier — a random number linking one browser's actions before you sign in;

• the fact and date you accepted these documents, and which version;

• subscription details — plan, period, activation requests and their status.

Technical data:

• our server request log stores the IP address, browser string (user-agent), time and request path. This is used for security, abuse prevention and debugging;

• technical error and performance records.

Where you came from (only with your analytics consent):

• campaign tags from the page address (utm_source, utm_medium, utm_campaign and similar) and the ad-to-bot referral parameter. We keep the first touch — the campaign you first arrived through.

What we do not collect: payment credentials, card numbers and banking data — payment happens outside the service; precise location; the content of your Telegram messages outside the conversation with our bot; special categories of data (health, beliefs, biometrics and the like) are neither requested nor used.

3. Why we do it and on what basis

• To provide the service — show the catalog, keep favorites and searches, recognise you on your next visit, open paid access. Basis: performance of our contract with you (Terms of Use and the offer).

• To send notifications about new matches for a saved search. Basis: performance of the contract and your explicit opt-in; you can turn notifications off at any time in the bot.

• To keep the service safe — limit abuse, automated data collection and attacks, and investigate incidents. Basis: our legitimate interest in protecting the service.

• To understand how the product is used and improve it — product analytics: we record which feature ran and how it ended, and link those events to your account or to a guest-session identifier. For as long as the retention period in section 7 runs, these records are not anonymized; when you sign in, the guest session is linked to your account, so earlier actions become attributable to you as well. Basis: our legitimate interest.

• To measure advertising performance (campaign tags, web analytics). Basis: your consent, given by tapping "Accept all" in the cookie banner. Without consent this processing does not happen.

• To comply with the law — retain settlement records and respond to lawful requests. Basis: legal obligation.

4. Cookies and browser storage

We use a minimal set. Here is the complete list.

Essential (always active; the service does not work without them):

• refresh_token — the authentication cookie, so you do not sign in on every visit;

• NEXT_LOCALE — a cookie holding your interface language;

• cc_currency — a cookie holding the currency prices are shown in;

• cc_consent — your choice in the cookie banner (kept in the browser so we do not ask again);

• the guest-session identifier, the chosen theme and the "hide viewed" switch (cc_hide_viewed) — in browser local storage.

Optional (only after "Accept all"):

• cc_utm — the first-touch advertising campaign you arrived through;

• cc_visit_sent — a housekeeping flag so the visit event is sent once per session;

• web analytics counters, where connected.

Declining optional cookies does not degrade the service — you simply are not counted in campaign statistics. You can disable cookies entirely in browser settings, but then signing in will not work.

You can change or withdraw your choice at any time: the "Cookie settings" link in the footer of any page brings the banner back. On withdrawal we immediately delete what the optional cookies had gathered — the campaign tag and the advertising pixel's cookies.

We record the choice itself and every change to it on our side: without that record we could not demonstrate that consent was given or withdrawn, and we are required to be able to. The record holds only the choice, the date and your session — no advertising identifiers and nothing about what you looked at.

5. Who we share data with

We do not sell your data and do not pass it to advertisers, data brokers or listing authors.

We use providers without whom the service does not run, and give them only the necessary minimum:

• hosting and databases — the servers the service runs on;

• content delivery and attack protection — processes the IP address of every request;

• Telegram — delivery of bot messages; Telegram's own privacy policy applies to it;

• a language-model provider — processes listing texts when structuring them; service users' data is not sent to it;

• web analytics — only where you consented to optional cookies.

Each of them processes data on our instructions and may not use it for their own purposes.

We may also disclose data where the law requires it or where it is necessary to protect rights — ours, yours or a third party's. If that happens and the law does not forbid telling you, we will.

6. Where data is stored

The service infrastructure is located in Singapore. Individual providers (content delivery, the messenger) may process data in other countries.

This means cross-border data transfer. We transfer data only to providers offering a comparable level of protection, and only to the extent the service requires.

If the law of your country imposes specific requirements on cross-border transfers, see section 11 "Regional provisions".

7. How long we keep data

• Account data and the favorites, searches and preferences attached to it — while the account exists, plus 30 days after a deletion request (a technical window to purge backups).

• The technical request log (IP, user-agent) — 12 months.

• Service usage events — 24 months, after which they are anonymized and kept only in aggregate.

• Settlement records and subscription activation requests — for the period required by applicable law for accounting records.

• Support correspondence — 12 months from the last message.

Once the period ends, data is deleted or anonymized.

8. Your rights

You may:

• obtain confirmation that we process your data, and a copy of it;

• have inaccurate data corrected;

• have your data and account deleted;

• object to processing based on our legitimate interest;

• withdraw consent to optional analytics at any time — this does not affect the lawfulness of processing before withdrawal;

• request restriction of processing;

• receive your data in a machine-readable format;

• lodge a complaint with the supervisory authority in your country.

How to exercise them: write to [email protected] with "Personal data" in the subject, from the email or account linked to your profile. We answer within 30 calendar days. If we cannot fulfil a request (for example, because we must retain settlement records), we will explain why.

We do not charge for this.

9. Listing authors' data

Separately, about data that reaches us not from service users.

The catalog is built from listings published by third parties in open sources. Along with a listing we receive information about its author: a name, a contact for getting in touch, a link to the publication, the text and photographs.

We process this on the basis of legitimate interest — providing search over rental offers — and only for that purpose. We do not use authors' contacts for mailings, do not sell them and do not pass them to third parties, other than showing them to service users who need them to get in touch about a specific listing.

Listing texts are sent to a language-model provider for structuring (extracting price, area, features). Such texts may contain contacts that the author placed in the listing itself.

If you are a listing author and would rather not be shown here, write to [email protected]. We will remove the listing within 5 business days and will not ask why. For details and other options, see "Data sources and listing removal".

10. Security, minors, incidents

We take reasonable technical and organisational measures: traffic encryption, restricted database access, separation of privileges, logging of administrator actions, and backups. Absolute security does not exist and we do not promise it.

The service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe we hold a minor's data, tell us and we will delete it.

If a breach occurs that creates a risk to your rights, we will notify you and the supervisory authority within the deadlines set by applicable law.

11. Regional provisions

This document is the same for every user and is written to the strictest standard applicable to us. Below are additions for specific countries.

If you are in Indonesia. Processing takes account of Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection. You hold the rights listed in section 8, including the right to withdraw consent and the right to compensation for harm caused by unlawful processing.

If you are in the EEA or the UK. We do not target these markets and do not advertise there. Nonetheless, where the GDPR applies to the processing of your data, you hold the rights under Articles 15–22 (access, rectification, erasure, restriction, portability, objection) and the right to complain to your national supervisory authority. The legal bases are set out in section 3. We take no automated decisions producing legal effects for you.

If you are in Russia. We do not advertise in Russia and do not target the Russian market; the service is available in Russian because a substantial part of the audience on Bali is Russian-speaking. The service infrastructure is located outside Russia. You may withdraw consent to processing and request deletion of your data by writing to us; we will act within the deadlines in section 8.

12. Changes to this policy

We update this document when what we do with data changes. The current version is always on this page, with the update date at the top.

We will announce material changes — such as a new processing purpose or a new recipient — in the bot or on the site before they take effect.