Domus
HomeBrowse listings+ Post a roomLog in

Privacy Policy

Last updated: 26/07/2026

1. Who we are

Domus (“we”, “us”, “our”) is operated by Lorenzo Bonomi, an individual, not through a registered company. Domus helps Erasmus and exchange students in Milan find and hand off housing to one another. This policy explains what personal data we collect when you use Domus (the “Service”), why we collect it, and what rights you have over it. Lorenzo Bonomi is the data controller for the personal data described below.

2. Data we collect

  • Account data: email address and password (managed securely by our authentication provider, Supabase — we never see or store your plain-text password).
  • Profile data: name, university, home country, short bio, profile photo, and whether you are an incoming or outgoing student.
  • Listing data: if you post a room, we store the listing details you provide (price, address/location, photos, description, availability).
  • Messages: the content of messages you exchange with other users through Domus, so conversations can be delivered and displayed to both participants.
  • Usage data: basic technical information such as IP address, browser type, and pages visited, collected automatically for security and to keep the Service running reliably.

3. How we use your data

We use your data to: create and secure your account; show your profile to other students on the platform; publish and display room listings; deliver messages between users; detect and prevent fraud, abuse, or violations of our Terms of Service; and improve the Service. We do not use your data for automated advertising profiling.

4. Legal basis for processing (GDPR)

We process your personal data on the following legal bases: performance of a contract (providing the Service you signed up for), your consent (for example when you choose to publish a listing or profile photo), and our legitimate interest in keeping the platform safe, secure, and functional.

5. Who we share data with

Other users of Domus can see your profile (name, university, home country, bio) and any listings you post. Hosts and prospective tenants can see each other's profile and message content once a conversation is started. We also use the following processors to operate the Service:
  • Supabase — hosts our database, authentication, file storage, and real-time messaging infrastructure.
  • Vercel — hosts and serves the website.
We do not sell your personal data to third parties.

6. Data retention

We keep your account and listing data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to keep it to comply with a legal obligation or resolve disputes.

7. Your rights

If you are in the EU/EEA, under the GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; request a portable copy of your data; object to or restrict certain processing; and lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at info@domuserasmus.com.

8. Cookies

We use a small number of essential cookies to keep you logged in. See our Cookie Policy for details.

9. International data transfers

Our infrastructure providers may process data in data centers located outside your country, including outside the EU/EEA. Where this happens, we rely on our providers' compliance with applicable data transfer safeguards (such as Standard Contractual Clauses).

10. Security

We rely on industry-standard security practices, including encrypted connections (HTTPS), database-level access controls (Row Level Security), and secure authentication, to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

11. Children's privacy

Domus is intended for university students aged 18 and over. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you directly.

13. Contact

Questions about this policy or your data? Email us at info@domuserasmus.com.