Privacy Policy

Version 3 · in force from 23 October 2026

In short

Your data is stored in the EU (Ireland) and used to run and improve STILL. for you.
Your clients' and owners' names, numbers, emails, notes and addresses are stored encrypted, with the keys managed by STILL. for you. Section 13 explains how this works.
STILL. support sees your clients and owners only if you give us a 6-digit code. Access lasts no more than 24 hours, you can end it at any time, support ends it as soon as we are done, and every look is recorded where you can see it.
We never sell it or use it for advertising. We use no tracking cookies and no outside analytics; we only count how STILL. is used (actions and times), never your clients' or owners' details.
The clients and owners you add stay yours; we only keep them for you.
You can see, export or delete your data at any time.

1. Who we are

STILL. (app.stillers.io) is a follow-up and contacts app for real estate agents and agencies. It is run by Darren Xerri, a sole trader trading as STILL., 67, Main Street, Xewkija, Gozo, Malta, VAT number MT2632 1934 ("we", "us").

For anything about your information, write to support@stillers.io or call +356 7905 4892. We have not appointed a data protection officer, as the law does not require one for a business of our size and kind; Darren Xerri answers privacy questions himself.

2. What this policy covers

This policy covers the information about you, as a user of STILL.: your account, your plan and payments, your devices and how you use the app. For this information we decide why and how it is used, so we are its "controller" under the EU General Data Protection Regulation (GDPR) and Malta's Data Protection Act (Cap. 586).

The clients, property owners and notes you add are different. You (or, in a team, your company) decide what to store and why, and we only keep it for you. For that information you are the controller and we are your "processor". Our promises about it are in the Data Processing Addendum, which forms part of our Terms of Service.

If you are a client or owner of an agent who uses STILL. and you want to know what they hold about you, please ask that agent first. If you write to us, we will pass your request to them.

3. What we collect, and where it comes from

Your account: your email address, a username and your password (stored only as a one-way hash we cannot read). If you choose Continue with Google, Google gives us your name, email address and profile picture; we do not see your Gmail, contacts, Drive or anything else in your Google account.
Your agreement: the date you accepted these terms and this policy, and which version.
Your team, if you have one: the company name and logo, and for each member their name, email, role, speciality, dashboard (sales or rentals) and the mobile number the admin enters.
Your settings: your country, currency, language, categories, property types and other choices.
Your plan and payments: your plan, its status and dates, monthly or yearly billing, and the reference numbers Stripe gives us. Stripe collects your card, billing address and any VAT number; we never see or store your full card number.
Referrals and partners: referral codes, who referred whom, rewards earned, and the checks we use to stop abuse (whether two accounts used the same device or the same card, using a random device code and a card "fingerprint" from Stripe that cannot be turned back into a card number). For partners: name, email, the programme chosen, commission earned and, when payouts are made, payout details such as the account holder's name, IBAN and tax details.
Your devices and security: a random code for each device you sign in on, a short label such as "Chrome on Android", your sign-in sessions, the date you were last active, and which address of the app you use (the live app or our test copy). If you set an app PIN or Face ID / fingerprint unlock, the PIN is stored only on your device as a scrambled code and the fingerprint or face never leaves your device.
Notifications: if you turn them on, the push address your browser or phone gives us.
Support and feedback: what you write to us, in the app or by email, and our replies.
Support access, if you use it: when you made a support code (we keep only a scrambled form of the code), when support opened, looked at and stopped looking at your records, and when we emailed you about it (see section 13).
How STILL. is used: we may monitor and analyse how the app is used, for example how many follow-ups are done, how many clients and owners are added, how many matches are introduced and how long it takes to clear the day, so we can improve STILL. and publish anonymous figures about it. This is counts and times only, never the sensitive information you keep about your clients and owners (their names, numbers, emails, addresses and notes). If you would rather not be counted, email support@stillers.io and we will leave your account out.
Problem reports: if something breaks in the app, a short technical note: what failed, where in the app, the app version, the type of browser and your username, so we can fix it.
Map searches: when you search for a place to drop a pin, the place you type is sent to OpenStreetMap's search service (see section 8).
Phone contacts, only if you ask: when you import contacts, only the ones you pick are read (name and number) and added. We never read your address book in the background.

Giving us an email address (or a Google account) is needed to open an account, and payment details are needed for a paid plan. Everything else is optional or created as you use the app. We do not ask for, and you should not store, sensitive information such as health, religion or ID card numbers.

4. Why we use it, and our legal reason

To provide STILL. to you (your account, your records, reminders, teams, support): because it is needed for our contract with you (GDPR article 6(1)(b)).
To manage your plan, free trial, payments, referrals and gift codes: contract (6(1)(b)).
To keep invoices and tax records: because the law requires it (6(1)(c)).
To keep STILL. secure and working (device limits, sign-in checks, problem reports, preventing referral abuse, knowing which accounts use the live app so our figures are real): our legitimate interests in running a safe, reliable service and protecting it from misuse (6(1)(f)).
To answer feedback and improve the app, and to publish anonymous figures about how STILL. is used: our legitimate interest in understanding what users need and in showing what the app does (6(1)(f)). Published figures are totals across many accounts and never identify you or your clients.
To help you through support access, and to keep its record: because you asked us to, under our contract with you (6(1)(b)), and our legitimate interest in being able to show exactly who saw what and when (6(1)(f)).
To send push notifications: your consent, given when your browser or phone asks (6(1)(a)). You can turn them off at any time.
Marketing emails: we do not send any. If we ever do, it will only be with your separate consent.

Where we rely on legitimate interests you can object at any time (see section 14), and we will stop unless we have compelling reasons that override yours. We do not sell your information, use it for advertising, or share it with anyone for their marketing.

5. Payments

Payments are handled by Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe processes your payment for us, and also uses some of the information itself, as its own controller, to prevent fraud and meet its legal duties. Stripe's privacy notice is at stripe.com/privacy. Stripe's checkout may store its own cookies to protect the payment you asked for.

6. Emails and notifications

We send service emails only: the link to confirm your email, receipts and plan notices (for example a cancellation or a withdrawal receipt), team invitations, the notice that STILL. support has opened your records (section 13), and replies to you. Our emails never contain your clients' or owners' details. They come from STILL. <no-reply@stillers.io>, sent through Resend. Push notifications (your daily follow-ups, records passed to you, team alerts) are sent only if you turn them on, and the message itself is encrypted for your device.

7. Inside a team

If you join a team, its admin can see and manage the records filed under the company, see members' activity alerts, restore what members delete, enter members' mobile numbers and make team backups. Members of the same team can see colleagues' on-market properties in Cross Match (type, size, area, address, price, features, reference, website link and the colleague's name). The owner's name and mobile are shown to colleagues only if the team admin chooses "Show all info" in Settings; the owner's email and notes never are. Members cannot see each other's clients. Your team's records are scrambled with one key shared by your team, so your colleagues' apps can read them and no other agency can.

8. Maps, fonts and code from other servers

To show maps and the app's lettering, your browser fetches some files directly from other services, which then see your IP address and what was requested, but no account details:

Esri (satellite map pictures) and the OpenStreetMap Foundation (street map pictures and the place search) when you open the pin map;
Google Fonts for the app's typeface;
jsDelivr and cdnjs (content delivery networks) for parts of the app's code.

9. Browser storage, and no tracking cookies

STILL. uses no outside analytics services, no advertising and no tracking cookies. The usage counts described in section 3 are kept in our own database, not in your browser. To work, it keeps a few things in your browser's storage: your sign-in, a random device code, your app lock settings (and a scrambled PIN, if you set one), your choices (theme, language, messenger, which tips you have seen) and short-lived notes such as a referral code you arrived with. These are strictly necessary for the service you asked for, so the law does not require a cookie banner for them. Signing out or clearing your browser's site data removes them.

10. Who receives your information

Only the providers we need to run STILL., each bound by a data protection agreement, and only for the purposes above:

Supabase (database, sign-in, server functions), which runs on Amazon Web Services: your data and its backups are stored in Ireland, in the EU (see section 13).
Vercel (hosting the app, delivered worldwide): USA.
Stripe (payments, invoices): Ireland and USA.
Resend (sending our emails): USA.
Microsoft 365, provided through GoDaddy (our support@stillers.io mailbox): EU.
Google (Continue with Google, if you use it), and the push services of Google, Apple and Mozilla (delivering notifications).
Esri, the OpenStreetMap Foundation, Google Fonts, jsDelivr and cdnjs, as explained in section 8.

We also share information when the law requires it (for example with tax authorities or a court), to protect our rights, or, if the business is ever sold, with the buyer under the same promises. We will tell you at least 30 days before we start using a new provider for your information.

11. Information sent outside the EU

Where a provider handles information outside the European Economic Area, it is protected by the EU-US Data Privacy Framework (for certified US companies) and/or the European Commission's Standard Contractual Clauses, as a fallback if the Framework ever stops applying. You can ask us for a copy of these safeguards.

12. How long we keep it

Your account, records and settings: while your account is open.
Recycle Bin: deleted records are removed for good after 30 days (90 days for records a team member deleted, so the admin can restore them).
If your free trial ends and you never subscribe: kept for 90 days, then deleted. We email you 15 days and 5 days before.
After you cancel your plan: kept for 180 days so you can come back, then deleted. We email you 15 days and 5 days before.
After a team cancels its plan: kept for 365 days, then the whole team is deleted, including every member's account. We email the team admin 60, 30, 15, 5 and 2 days before.
In each of these cases the time is counted from the last time you opened STILL., so an account that is still being used is never deleted. Before deletion the account is put on hold for 30 days as a safety check; opening STILL. during that time cancels it.
When you delete your account: deleted straight away; copies in our provider's backups (kept for 7 days) are gone within 30 days at the latest.
Change history of records: 12 months. For records that are stored scrambled, the history keeps no readable names, numbers, emails, notes or addresses.
The support access record (section 13): 5 years from each entry, as evidence for you and for us of who saw your records and when. It is kept even if you delete your account, and it never contains your clients' or owners' details.
Usage counts (section 3): 13 months for each account; after that only anonymous totals remain.
Problem reports and alerts: 12 months. Feedback and support emails: 24 months.
Invoices and payment records: for as long as tax law requires.
Referral and anti-abuse checks: while a reward can still be paid, plus 24 months.
Notification addresses: until you turn notifications off or the device is signed out.

13. Where it is stored, how it is processed and how it is protected

Where your information is stored

Everything you keep in STILL. (your account, settings, clients, owners, properties, follow-ups and team) is stored in one database run for us by Supabase, on Amazon Web Services servers in Ireland (EU). Our provider makes a backup every day and keeps each one for 7 days, also in Ireland. The app itself (its code and pictures) is delivered to your browser by Vercel from servers around the world; those files contain no records of yours.

Where it is processed

Most of the work happens on your own phone or computer: the app there shows your records, searches them, runs Cross Match, writes the messages you send and scrambles and unscrambles the protected details described below. Some steps run on Supabase's servers in Ireland: signing in, saving, team features, the team duplicate check, reminders and notifications, and the clean-up jobs in section 12. Emails go out through Resend (USA) and payments through Stripe (section 5); neither receives your clients' or owners' details.

Your clients' and owners' details are stored scrambled

Before a client or owner is saved, the app on your device encrypts (scrambles, using AES-256-GCM) their name, mobile number, email address, notes, address and named contacts. Our database receives and stores only the scrambled text. When the record comes back to your app, your app unscrambles it, so on your screen nothing changes.

These details stay readable in our database, because STILL. needs them to work for you and your team: budgets and prices, villages and areas, property types, bedrooms, features, categories and tags, follow-up and availability dates, references, website links, map pins, project names and the record's owner and team. On their own they do not say who a person is, but please do not type personal details into those fields.

Who holds the keys

STILL. manages the encryption keys for you. That is why you never need a separate password, why your records open on any device you sign in on, and why a lost phone never means lost records. The keys are kept in our database, locked so that each account can only fetch its own key (and its team's). In practice:

Anybody looking at our database, its exports or its backups sees scrambled text, not your clients' details.
Because we look after the keys, the person with full administrator control of our systems (only Darren Xerri) could technically reach them. We do not, and support only ever looks with your code (below). If a court or authority lawfully orders us to hand over information, we will tell you unless the law forbids it.
Anyone who signs in to your account, or uses your unlocked device, sees what you see, so keep your password private and use the app lock.
Records saved before this protection was switched on for your account are encrypted the next time you open STILL. Until then, and in backups taken before that (kept 7 days), they are stored as plain text. Older change history is cleared of readable details every night.

Support access: only with your code

Our support screens never show your clients or owners. If you need help with something inside your records, you can let us look:

In Settings, Security, Support access, you tap Give STILL. support access and the app shows a 6-digit code. It works once, within 15 minutes. In a team, only the admin can do this, because the records belong to the company.
You give the code to STILL. support. Typing it opens your records (and your Recycle Bin) to us, read only, for no more than 24 hours. We cannot change or delete anything through it.
You can tap Stop access at any time, STILL. support ends it as soon as we have finished, and it ends by itself after 24 hours.
We email you when access starts. Every step (code made, access opened, each time we looked, access stopped or ended) is written in a support log that you can see in the same place, and that nobody, including us, can change or delete. The time on each line comes from the database's own clock.

Other safeguards

All traffic is encrypted (HTTPS). The database only lets each account reach its own records (and its team's, as described in section 7), and keeps agencies strictly apart. Passwords are hashed. You can add an app PIN or Face ID / fingerprint lock, and an account can be signed in on two devices at once. A safety brake stops large numbers of records being deleted at once from the app. Only Darren Xerri has administrator access to our systems, protected by two-step sign-in. If a breach ever affects your information, we will tell you, and the authorities where the law requires it, without undue delay.

14. Your rights

You have the right to: see the information we hold about you and get a copy; have it corrected; have it deleted; limit how we use it; receive it in a portable format; object to uses based on legitimate interests; and withdraw consent at any time (this does not affect what was done before).

Much of this you can do yourself in the app: edit your details, download a backup (Settings, Backup & Restore) or delete your account (Settings, Delete My Account). Otherwise write to support@stillers.io. We may ask you to confirm who you are, and we will answer within one month.

15. Complaints

Please tell us first, and we will try to put it right. You can also complain to Malta's data protection authority, the Information and Data Protection Commissioner, Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta; +356 2328 7100; info@idpc.org.mt; idpc.org.mt, or to the authority where you live or work.

16. Age

You must be 18 or older to open an account or buy a plan. People aged 16 and 17 may use STILL. only as members of a team whose admin (18 or older) holds and pays for the plan. STILL. is not meant for anyone under 16.

17. Automated decisions

We make no decisions about you by automated means that have legal or similarly significant effects. Cross Match suggests matches for you to review. Our referral checks can hold back a reward when two accounts share a device or card; if that happens and you think it is wrong, write to us and a person will review it.

18. Users in the UK and California

UK: you have the same rights under the UK GDPR, and may complain to the Information Commissioner's Office (ico.org.uk). California: we do not sell or share personal information, and we collect only the categories listed in section 3, for the purposes in section 4. You may ask to know, correct or delete your information as described in section 14.

19. Changes to this policy

When we change this policy we publish the new version here with a new date. If the change is important we tell you in the app and by email at least 30 days before it applies.