Privacy notice

Updated on 20 September 2026. Applies to Spazio at spazio.immo.

Operator and contacts

Spazio is operated by Tsubasa Sagl. For support, privacy and data requests: info@tsubasa.ch.

Identity and access

Google verifies your account. We receive your name, verified email and Google identifier for authentication and security. We do not access Gmail, contacts, calendars or Drive, and do not retain Google access or refresh tokens. Your name and email are visible to workspace members; if you authorise sharing under the terms, they are also visible to the recipient below. The Google identifier and profile photo are not in the partner view.

Application data and providers

Supabase stores accounts, workspaces, members, listings, photos, notes, appointments, ratings, settings and acceptance receipts. The database project is located in Switzerland; Vercel hosts the applications and may process requests outside Switzerland. Google manages authentication. Maps load data from OpenStreetMap and send requests to that provider. External links open services with their own terms. No advertising tracking is installed.

Workspaces and permissions

Each workspace has logically separate storage. Users access only their own spaces or spaces where they are invited and enabled. The owner assigns and revokes permissions. The operator and technical providers process data necessary to operate, support and secure the service.

Data recipients

Authorisation under this version concerns Tsubasa Sagl. Acceptance of earlier versions naming a different recipient does not authorise this sharing: a new individual confirmation is required. Previous receipts are retained as historical records.

Recipient: Tsubasa Sagl. For data sharing and privacy requests: info@tsubasa.ch. The scope of sharing in Spazio is described in these terms and the app’s privacy notice.

With your explicit choice, the company can view name/email, saved properties, classification (Under consideration, Shortlisted, Discarded, Listing removed), workspace favourite status and numeric ratings in workspaces with sharing enabled, to analyse preferences, prices and comparisons between listings. This may associate property preferences with your identity. Appointments or viewing status, notes or free text, personal photos and metadata, files, credentials and backups are not shared. You do not authorise newsletters or promotional contact.

The partner view is separate from private APIs. It requires individually enabled accounts and does not grant full workspace access. Existing archives are excluded until the owner enables sharing. Each person authorises their own identity and ratings; the owner’s authorisation does not replace other members’ authorisation. Workspaces created later start with sharing enabled, which the owner can disable.

Choices and retention

You can stop sharing under Privacy and sharing and continue using the service: your name/email and personal ratings are removed from the partner view. If the owner stops their own sharing or disables workspace sharing, the workspace is excluded from the view. For data already viewed or copies retained by the recipient, a request to the recipient is required; we cannot erase knowledge already acquired.

App data remains until deletion or closure; you may request export or deletion from the operator, taking other members’ rights into account. Deleted photographs are no longer available in active storage; their technical identifier remains to prevent accidental restoration. Acceptance and withdrawal receipts with version, document fingerprint and date are stored separately to document choices and applicable obligations. Downloaded backups are controlled by the person exporting them. For copies or retention at Tsubasa Sagl, also contact the company.

Necessary cookies

The Android app keeps downloaded photos and data in a private encrypted cache on the phone, separated by session and workspace. It uses cached data offline and checks for changes when connected. Unchanged photos are not downloaded again. Signing out clears the cache; access revocations and deletions are applied when synchronization detects them. The web app keeps a limited image cache to avoid repeated downloads.

Rights and updates

You may request information, a copy of your data, correction, deletion, restriction and withdrawal of choices, and contact the competent authority under applicable law. Material changes require renewed acceptance. Google data is used within the stated and authorised scope in compliance with the Google API Services User Data Policy and applicable Limited Use provisions.