Privacy Policy

Last updated: June 1, 2026

1. Data Controller

InmoImpacto is the data controller responsible for your personal data. You can contact us at contacto@inmoimpacto.es for any questions regarding this policy or your data rights.

2. Data We Collect

When you use InmoImpacto, we collect and process the following personal data:

• Account data: your email address and name when you register for an account.
• Property data: physical addresses and descriptions of properties you submit for listing generation.
• Generated content: the AI-powered real estate listings produced by our service based on your inputs.
• Usage data: technical information about your interaction with the platform, such as timestamps and feature usage, collected only as necessary for service delivery.

3. Purposes of Processing

We process your personal data for the following purposes:

• Service delivery: to generate, store, and display AI-powered real estate listings based on your inputs.
• Account management: to create and maintain your user account, process credit purchases, and provide customer support.
• Marketing communications (with consent): to send you information about new features, promotions, or updates, only if you have explicitly opted in.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPDGDD), we rely on the following legal bases:

• Contract performance: processing necessary to deliver our service to you under our Terms of Service (Article 6(1)(b) GDPR).
• Consent: for sending marketing communications, which you can withdraw at any time (Article 6(1)(a) GDPR).
• Legitimate interest: for limited analytics and service improvement that does not override your rights and freedoms (Article 6(1)(f) GDPR).

5. Data Retention

We retain your personal data for as long as your account remains active. Upon account deletion, we will permanently delete or anonymize your data within 30 days. Some anonymized, aggregated data may be retained indefinitely for analytical purposes.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: correct any inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data where no overriding lawful basis applies.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to restriction: limit how we process your data in certain circumstances.
• Right to object: object to processing based on legitimate interest or for direct marketing purposes.

To exercise any of these rights, contact us at contacto@inmoimpacto.es. We will respond within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Cookies

InmoImpacto uses only essential session cookies necessary for authentication and platform functionality. We do not use tracking cookies, advertising cookies, or analytics cookies that identify individual users. No consent is required for these strictly necessary cookies under applicable law.

8. Third-Party Processors

We share your data with the following third-party service providers, each acting as a data processor under contract:

• OpenAI:property data and listing instructions are transmitted to OpenAI's API solely for the purpose of generating AI-powered listings. OpenAI acts as a data processor and does not use your data for training its models.
• Stripe: payment information is processed by Stripe for credit pack purchases. We do not store your full credit card details on our servers.
• Google Maps: property addresses are sent to the Google Maps Geocoding API to validate and standardize location data.

9. International Data Transfers

Some of our processors (OpenAI, Stripe, Google) are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), encryption at rest, and access controls limited to personnel who require the data for service delivery.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our platform. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any questions about this Privacy Policy or our data practices, please contact us at contacto@inmoimpacto.es.