Privacy Policy

Last updated: March 4, 2026

1. Introduction

Welcome to Real Estate SaaS ("we", "our", or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and password when you create an account.
Profile Information: Company name, role, and contact details you choose to add to your profile.
Project & Valuation Data: Parcel details, building parameters, cost assumptions, pricing data, and any other information you input into the platform for feasibility analysis and property valuations.
Payment Information: Billing address and payment method details. Payment processing is handled by our third-party payment processor; we do not store full credit card numbers on our servers.
Communications: Any messages or feedback you send to us through support channels.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the platform, click patterns, and interaction data.
Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage. See Section 7 for details.
Log Data: Server logs including access times, referring URLs, and error logs for troubleshooting.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing the Service: To operate, maintain, and deliver the features of the platform, including property valuations, feasibility reports, and PDF exports.
Account Management: To create and manage your account, process subscriptions, and handle billing.
Improvement & Analytics: To understand how users interact with the Service so we can improve functionality, performance, and user experience.
Communication: To send transactional emails (account verification, password resets, subscription updates) and, with your consent, marketing communications.
Security: To detect, prevent, and address technical issues, fraud, and unauthorized access.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract Performance: Processing necessary to provide the Service you have subscribed to.
Legitimate Interests: Improving the Service, ensuring security, and conducting analytics, where these interests are not overridden by your data protection rights.
Consent: Where you have given explicit consent, such as for marketing emails or non-essential cookies.
Legal Obligation: Where processing is required to comply with applicable law.

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

Service Providers: Third-party vendors that help us operate the Service (e.g., cloud hosting, payment processing, email delivery, analytics). These providers are contractually obligated to protect your data.
Legal Requirements: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
With Your Consent: When you have given us explicit permission to share information with a specific third party.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymize it.

Account Data: Retained for the duration of your account and for a reasonable period afterward for legal and auditing purposes.
Project & Valuation Data: Retained as long as your account is active. You may delete individual projects at any time.
Usage & Analytics Data: Retained in aggregated or anonymized form for up to 26 months.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. Cookies are small text files stored on your device.

Types of Cookies We Use

Strictly Necessary: Required for the Service to function (e.g., authentication tokens, session cookies). These cannot be disabled.
Functional: Remember your preferences (e.g., theme settings, language). Enabled by default but can be managed via your browser.
Analytics: Help us understand how the Service is used so we can improve it. Only activated with your consent.
Marketing: Used to deliver relevant advertisements and measure campaign effectiveness. Only activated with your consent.

When you first visit the Service, a cookie consent banner will allow you to accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies or adjusting your browser settings.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Under GDPR (EEA Residents)

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data ("right to be forgotten").
Restriction: Request that we restrict processing of your data in certain circumstances.
Data Portability: Receive your data in a structured, commonly used, machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.

8.2 Under CCPA (California Residents)

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
Right to Delete: Request deletion of personal information we have collected.
Right to Opt-Out: Opt out of the sale of personal information. We do not sell personal data.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at privacy@example.com. We will respond within the timeframe required by applicable law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

Encryption of data in transit (TLS/SSL) and at rest.
Regular security assessments and vulnerability testing.
Access controls limiting data access to authorized personnel only.
Secure cloud infrastructure with industry-standard certifications.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized transfer mechanisms.

11. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice (e.g., via email or an in-app notification).

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@example.com
Website: https://example.com

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.