Privacy policy | Propietta

1. Data controller

The controller of your personal data is Propietta (legal identification and contact details pending publication; see notice at the top). You may reach us at privacy@propietta.com for any query about your data processing.

2. Processing purposes

We process your data to: • Provide the service: create your account, list your properties, generate QR signs, process payments and send notifications. • Improve the platform: analyze anonymous aggregated use to decide which features to build. • Comply with legal obligations: billing, tax, cooperation with competent authorities. • Communicate with you: transactional emails (always) and promotional (only with consent). We do not sell or transfer your data to third parties for their own commercial use.

3. Data subject rights (Colombia Law 1581/2012)

As a data subject in Colombia you have the right to: • Know what data we hold about you and for what purposes. • Update or rectify incorrect or incomplete data. • Delete data when it is no longer necessary or when you revoke consent. • Object to processing in cases allowed by law. • Revoke the authorization you granted us at any time. To exercise any of these rights, write to privacy@propietta.com with a copy of your ID. We respond within 15 business days at most.

4. European Union users (GDPR)

If you are in the European Economic Area, the General Data Protection Regulation (GDPR) applies to your relationship with Propietta. You have the same rights as Colombia Law 1581 plus the right to data portability and to lodge a complaint with your country's supervisory authority. Legal basis for processing: contract performance (contracted services), legal obligation (billing, tax) and consent (marketing, non-essential cookies).

5. California users (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act grants you the right to: know which categories of personal data we collect, request deletion, opt out of data "sale" (we do not sell data), and not be discriminated against for exercising these rights. To exercise these rights, write to privacy@propietta.com stating your California residency.

6. Cookies and similar technologies

We use strictly necessary cookies to maintain your session and language preference. We do not use third-party cookies for ad tracking. When we implement analytics (GrowthBook or similar) we will update this policy and show a consent banner before activating them.

7. Subprocessors

To operate Propietta we use the following subprocessors. All have Data Processing Agreements (DPAs) in force and comply with applicable regulations:

Paddle (Ireland / US) — Payment processing as Merchant of Record. Receives name, email, country and billing data.
Resend (US) — Transactional email delivery. Receives email and message content.
Google (Gemini, Maps, Fonts) — AI features (chatbot and photo enhancement), address autocomplete and web fonts. Processed photos are sent to Gemini transiently and are not retained for training.
Cloudflare R2 (US / EU) — Property photo storage. Photos are publicly accessible only through the property's public listing.

8. Retention and deletion

We retain your data while your account is active and for 6 additional months after cancellation to comply with tax and accounting obligations. Data of prospects reaching via the AI chatbot is retained for 24 months from last contact, so you can return to the lead if still valid. Uploaded photos are removed from R2 30 days after archiving the property, unless we restore them for a potential re-listing.

9. Contact and changes to this policy

For any data-protection query write to privacy@propietta.com. If we update this policy we will notify by email at least 15 days in advance. The current version, its last-updated date and prior versions will always be accessible at /privacy.