Your information
Privacy policy
Updated 3 November 2026
Who to contact
Riightspace operates riightspace.com and is responsible for the personal information it uses to provide this platform. For privacy questions, access requests or account deletion, email kemar@connectswithnova.com.
Information we use
We use the account and contact details you provide, your saved properties and searches, messages and enquiries, and information you enter into listings, stay drafts, bookings or rental applications. Listings may include photographs, location, availability, pricing and property details. Rental features may also hold employment, reference, agreement and payment-status information when you supply it. Please avoid including other people's private information in public listing photographs or descriptions.
Google sign-in
If you choose Google sign-in, Google supplies your account identifier, email address and basic profile information, such as your name and profile picture. We use these details to create or identify your Riightspace account and authenticate you. This connection does not request access to your Gmail inbox, Google Drive, contacts or calendar. Authentication records are stored using Supabase. Riightspace does not sell Google account data or use it for advertising. You can remove Riightspace's access through your Google Account permissions; this does not automatically delete your Riightspace account, which you can request by email.
Why we use information
We use your details to provide the account, listing, enquiry and booking features you request, relying on the steps needed to enter into or perform that service. We use operational activity records to maintain security, diagnose faults and understand how features work, relying on our legitimate interests in running a reliable platform. Where information must be retained or disclosed to meet an applicable legal obligation, that obligation is the basis. Where a feature requires consent, you can withdraw it without affecting earlier lawful processing.
What is shared
Public listings display the information and photographs submitted for publication. Messages, applications and bookings are shared with the relevant participants and authorised administrators. In the stay-hosting flow, the precise arrival address is held separately and is available to the host and eligible confirmed guests; public location information follows the host's location setting. Supabase provides authentication, database and file storage, and Lovable provides site hosting. Google handles Google sign-in. Map and postcode services receive the location queries needed to show a map or find an address. Additional providers receive information only where their connected feature is used. We may disclose information where legally required or necessary to investigate misuse.
Storage, security and retention
Access controls restrict private records to authorised users. Hosting and service providers may process information outside the UK; applicable transfer protections must be used for those arrangements. Contact us for details of the relevant processing locations and safeguards. We keep account and draft information while needed to provide your account and requested features. Booking, application, agreement and operational records may need to remain for legal obligations, security or resolving disputes. Deletion requests are assessed against those purposes, and retained records are restricted where appropriate.
Browser storage and activity
The site uses browser storage to maintain your sign-in session, save a stay draft before sign-in, return you to your draft and remember recent location searches. The platform also records feature events, such as viewing or saving a listing and starting a booking; these can be associated with your account when signed in. Clearing site data removes locally stored preferences and unsigned-in drafts, and signs you out. Hosting providers may maintain technical and security logs.
Your choices and rights
You can ask for access, correction, deletion, restriction or a portable copy of your personal information where the relevant right applies. You can object to processing based on legitimate interests, and withdraw consent where consent is used. Contact the email above; we may need to verify your identity. You can also complain to the UK's Information Commissioner's Office at ico.org.uk. We will update this page when our handling of information changes.