Privacy Policy

1. Data we collect

Depending on how you use the service, we collect:

• Assessment information — the property details you enter (address or location, municipality, plot and building figures, intended use, optional listing link) and the financial assumptions you provide.
• Contact details — your name and email address, needed to deliver your report and send you access links.
• Payment metadata — the order reference, product purchased, amount, currency, payment status and the customer email confirmed during payment. We never receive or store card numbers or other full payment-card details.
• Professional Review requests — the questions and message you send, the documents you choose to upload and related correspondence.
• Contact enquiries — the name, email, topic and message you submit through the Contact page.
• Operational records — email delivery logs, report access and sharing events, security and abuse-prevention signals (such as IP address and request timing) and technical error logs.

2. Why we use it and on what legal basis

• To generate, deliver and let you recover your report, and to provide a Professional Review you request — performance of a contract with you.
• To reply to enquiries, prevent fraud and abuse, keep the service secure and improve it — our legitimate interests in operating a reliable service.
• To keep records of purchases and consents given at checkout — compliance with legal obligations, including tax and consumer law.
• To send a reminder about an assessment you started but did not complete — our legitimate interest; you can ignore it and we do not send marketing emails without your consent.

3. Who we share data with

We do not sell personal data. We share it only with:

• Our payment provider, Stripe (checkout presented through Link), when purchases are available. Stripe acts as merchant of record for the transaction and processes your payment, billing, tax and invoicing data as its own controller, under its privacy terms. We receive only payment metadata — order reference, product, amount, currency, status and the email confirmed at payment.
• Service providers acting on our instructions — cloud hosting and database, private file storage, transactional email delivery and error monitoring.
• Mapping and public data services used to locate the property and retrieve planning, cadastral and market reference data (for example Google Maps Platform and official Portuguese public data sources). Only the location or municipality being assessed is sent — never your name or email.
• Professional advisers (legal, accounting) where necessary, and public authorities where required by law.

Some providers process data outside the EEA. Where that happens we rely on safeguards recognised under the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses.

4. How long we keep it

Paid assessments and their reports are kept so you can return to them, and purchase and consent records are kept for as long as tax and consumer law require. Unpaid drafts are deleted after a limited period. Professional Review documents are kept only while needed to assess and deliver that review. Operational logs are kept for a short period for security and troubleshooting. Data is deleted or anonymised when no longer needed, and you can ask us to delete your assessment, documents and personal data at any time.

5. Security

We apply appropriate technical and organisational measures: encrypted connections, private storage for reports and documents that is accessible only through server-side authorisation, time-limited secure access links, access controls for administrative users and audit records of administrative actions.

6. Cookies and tracking

Necessary storage is always active: your language preference and the state of an assessment in progress are kept in your browser so you can continue where you left off, and our payment provider sets essential cookies when you pay. Two optional categories require your consent and are off until you allow them: Analytics, which helps us understand how the site is used, and Advertising, which measures the performance of our Google Ads campaigns. For Advertising we use the Google tag with Google Consent Mode v2: before you consent all advertising and analytics signals are denied and no advertising cookies are set. When a purchase is completed and you have allowed Advertising, we send Google Ireland Limited only the amount paid, the currency, an internal payment identifier and the product type — never your name, email, address, property location, assessment content or report findings. Google may process this data outside the EEA under the safeguards of the EU-US Data Privacy Framework and standard contractual clauses; retention follows Google Ads conversion-data settings. Your choice is stored in your browser, recorded with its version and date, and you can change or withdraw it at any time through "Cookie Settings" in the footer, with immediate effect. Rejecting optional cookies is as easy as accepting them and does not affect any assessment, report or payment.

7. Your rights

Under the GDPR you can ask to access, correct, erase or receive a copy of your personal data, restrict or object to its processing, and withdraw any consent at any time. We respond within one month. Requests can be made through the Contact page or the email address above. You also have the right to lodge a complaint with your supervisory authority; in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).

8. Changes

We may update this notice as the service evolves. The current version is always published at this address.