Privacy Policy

1Data controller

The controller of the personal data collected through the Propiedash platform (its propiedash.com website, its iOS and Android mobile applications, and Propiedash Pro, the work tool for real estate professionals available at pro.propiedash.com and in its own mobile applications; together, the "Platform") is Propiedash, C.A., a commercial company domiciled in Caracas, Venezuela. Propiedash LLC, a company organized under the laws of the State of Delaware, United States of America, with its address at 8 The Green, Ste R, Dover, DE 19901, United States of America, is the parent company that provides the Platform's technological infrastructure and processes international card payments, acting as a data processor (hereinafter, jointly, "Propiedash", "we", "us").

When a professional, an Agency, or a business records personal data of third parties in Propiedash Pro, such as data about its clients, the party that records that data is its controller, and Propiedash acts as a data processor on its behalf, in accordance with Section 7.

For any matter related to your personal data, you may contact us at [email protected] or by phone at +58 424-5898927.

2Legal framework

This Privacy Policy is governed by the Venezuelan legal system, in particular:

• Articles 28 (habeas data) and 60 (protection of honor, private life, intimacy, and confidentiality) of the Constitution of the Bolivarian Republic of Venezuela.
• The principles established by Judgment No. 1318/2011 of the Constitutional Chamber of the Supreme Tribunal of Justice on data protection: consent, purpose, quality, temporality or retention, accuracy and self-determination, security and confidentiality, redress, and accountability.
• The Infogovernment Law (Ley de Infogobierno), where applicable.
• Decree-Law No. 1,204 on Data Messages and Electronic Signatures.

As a complement, Propiedash adopts international best practices in personal data protection, inspired by standards such as the European Union's General Data Protection Regulation (GDPR).

3Data we collect

3.1. Data you provide to us

• Identity and contact data: first and last name, email address, phone number, and, where applicable, WhatsApp number.
• Professional profile data: trade or agency name, Dashtag, photograph or logo, professional description, location, tax details (such as the RIF), and any verification documentation you choose to provide.
• Listing data: information about the properties you publish, including address (not published), map location, price, features, photographs, videos, and floor plans.
• Messages: the content of the messages you send through the Platform's internal messaging and through contact and support forms.
• Payment metadata: when you pay by card, the payment processor (Stripe) shares with us tokenized identifiers, the payment status, and the last digits of the card; Propiedash never receives or stores full card numbers. When you pay via Pago Móvil, we process the transaction reference data needed for its verification.

3.2. Data we collect automatically

• Usage and device data: IP address (used only while handling each request; we do not store it), browser type, operating system, pages visited, time spent, and device identifiers.
• Cookies and similar technologies: as set out in Section 12 of this Policy.
• Approximate location: derived from the IP address, to personalize search results.
• Precise device location: in the mobile applications, and only if you grant the corresponding permission, we access your device's GPS location to show you nearby properties ("search near me"). This location is used at the time of the search, is not linked to your profile, and is not retained; you can revoke the permission at any time from your device settings.

3.3. Third-party data

If you sign in through third-party services (such as Google), we receive your name, email address, and public profile photograph, in accordance with the permissions you grant to that service.

3.4. Mobile applications

In our iOS and Android applications, specifically:

• Your recent searches are stored only on your device and are not sent to our servers.
• We do not use advertising identifiers (such as the IDFA) or track your activity across third-party apps or websites. The app contains no advertising networks.
• Subscriptions to paid plans are purchased through our website; the app merely reflects your account's active plan.

3.5. Propiedash Pro

Propiedash Pro uses the same account as the Propiedash portal. If you use Pro, in addition to the data above we process data about your professional activity: your listings, conversations, visits, deals, tasks, and statistics, your membership in an Agency or a business and your role within it, your notification preferences, and, in the Pro apps, your device identifier to send you notifications. The Pro apps only ask for access to the camera, your photos, or the microphone (for voice notes) when you use the corresponding feature; they do not access your phone's address book or your location. Third-party data that you record in Pro is governed by Section 7.

4Purposes of processing

We process your personal data for the following purposes:

• Provision of the service: creating and managing your account, enabling the publication and search of listings, and facilitating communication between users.
• Publication of listings: the data contained in listings and professional profiles is public by design, since the very purpose of the service is its dissemination.
• Verification: verifying the identity of users and the status of professional profiles.
• Payments: processing subscription plan payments and verifying Pago Móvil payments.
• Support: handling your inquiries and requests, including via WhatsApp when you choose that channel.
• Notifications: sending you operational communications and, with your consent, marketing communications. You can manage your preferences granularly through the email preference center linked in the footer of every message, or unsubscribe at any time.
• Analytics and improvement: analyzing the use of the Platform and producing aggregated, anonymous statistics on the Venezuelan real estate market.
• Fraud prevention and security: detecting and preventing fraud, abuse, and unlawful uses of the Platform.
• Legal compliance: complying with applicable legal obligations and responding to requests from competent authorities.

5Lawful basis

The processing of your data is based on:

• Your consent, given when registering, when accepting this Policy, and, where applicable, when opting into marketing communications, which you may withdraw at any time.
• The performance of the contract, that is, the provision of the services described in the Terms and Conditions.
• Propiedash's legitimate interest in the security of the Platform, fraud prevention, and service improvement, balanced against your rights and freedoms.

6Public and private data

Due to the nature of the service, certain data is public: the professional profile's name or trade name, photograph or logo, Dashtag, description, declared location, and the listings you publish, including photographs, videos, prices, and property features. This data is visible to any visitor of the Platform and may be indexed by search engines. If you run a business page in Propiedash Pro, the name, description, logo, contact details (phone, WhatsApp, email, website, and address), RIF, specialties, contact person, and product catalog with prices that you publish on it are also public.

The following, among others, are private: your access credentials, the content of your internal messages, your payment metadata, your account preferences, the verification data you provide to us, and the data you record in Propiedash Pro about your clients, visits, deals, and property owners (Section 7). This data is not published and is processed only in accordance with this Policy.

7Propiedash Pro and your clients' data

7.1. What Propiedash Pro is

Propiedash Pro is the Platform's work tool for real estate agents, Agencies, directory professionals, and supplier businesses in the sector. With it they manage their listings, clients, conversations, visits, deals, team, social media content, and statistics. It runs at pro.propiedash.com and in iOS and Android apps, with the same account and the same Plans as the Propiedash portal. Buyers and people looking for properties do not need Pro.

7.2. Data that professionals record in Pro

In Pro, the professional, the Agency, or the business may record personal data of third parties, in particular:

• Clients: name, phone, WhatsApp, email, cédula or RIF, date of birth, who referred them, what they are looking for (operation, property type, price range, bedrooms, bathrooms, and area), their stage in the process, tags, notes, linked properties, their saved searches, and the history of conversations, visits, and WhatsApp or phone contacts with the professional.
• Visits: date and time, the person attending and their contact details, the professional's notes, and the outcome of the visit, including the client's interest and comments.
• Deals: offers, amounts, the commission split (which may include the names of people outside the Platform), and the documents the professional attaches.
• Owners: the name, phone, email, and exact address of a property's owner, and exclusivity contracts or documents. This data is not published.

This data may be entered one by one or imported from a CSV file the professional chooses. Pro does not read the phone's address book. Data about portal users who contact a professional is governed by Section 8.3.

7.3. Who is responsible

For the data described in Section 7.2, the party that records it (the professional, or the Agency or business in whose workspace it is recorded) is the controller, and Propiedash is the processor that handles it on its behalf. Accordingly, Propiedash:

• Processes that data only to provide the Pro service and on the controller's instructions.
• Does not sell it, does not use it for advertising or to produce market statistics, does not send it to artificial intelligence services, and does not show it to other users, except to the people the controller gives access to (Section 7.5).
• Requires confidentiality from its staff and shares it only with the providers in Section 7.6.

7.4. Obligations of the professional, the Agency, or the business

Whoever records third-party data in Pro represents and undertakes to:

• Have the consent of those people or another legitimate basis to record their data, and have informed them as required by law.
• Keep that data accurate and up to date, and correct or delete it when appropriate.
• Record only the data needed for the real estate relationship and not record sensitive data (such as health, religion, or political opinions) that is not essential.
• Use that data only for the real estate transaction at hand and handle the requests of the people it refers to (Section 7.9).

7.5. Access within an Agency

In an Agency, each member has a role (owner, administrator, member, or another role the Agency defines) that determines what they see. By default, the Agency's owner and administrators can see the whole team's clients, visits, deals, statistics, and conversations, and can reassign a member's clients to another member. Members see, by default, their own clients. The Agency can change these permissions and is responsible for removing access for anyone who stops being part of it. When two professionals work together on the same property through the Pro network, Propiedash does not show either of them the names of the other's clients.

7.6. Providers that process Pro data

To provide Pro we rely on the following providers, under confidentiality and data protection obligations equivalent to those of this Policy: Supabase (database, authentication, and file storage), Vercel (hosting), Cloudflare (photo delivery), Resend (email delivery), Expo (app notifications), Google Maps (address search and maps), Sentry (error reports), Anthropic (the artificial intelligence features in Section 7.8), and the Plan payment processors listed in Section 8.1.

7.7. Security

Data recorded in Pro is not published or indexed. Every request checks who makes it and what their role allows before showing client data. Contracts, deal documents, and attachments are kept in private storage and open only through temporary links. Pro lets you turn on two-step verification. The measures in Section 13 also apply.

7.8. Artificial intelligence

Some Pro features use Anthropic's artificial intelligence models to draft or complete a listing from the text the professional writes or pastes and from the property's photos, to recognize amenities in those photos, and to improve or translate the professional profile's description. We do not send client data or conversations to these services. We recommend not including third parties' personal data in the text you use with these features. Their results are suggestions that the professional reviews before publishing.

7.9. Rights of a professional's clients

If a professional, an Agency, or a business recorded your data in Pro and you want to know it, correct it, or have it deleted, you must address your request to that professional, Agency, or business, which is the controller of that data and can correct or delete the record at any time from Pro. Propiedash does not handle these requests directly.

When the professional deletes a client, the client's record, notes, and linked properties are permanently deleted, and the client's name and phone are removed from that professional's visits. Conversations are kept as the conversation history.

7.10. Copy of the data

From the web version of Pro, the professional can download their client list at any time as a CSV file, with the same columns as the import template. To obtain a copy of other data recorded in Pro, you can write to us at [email protected].

7.11. Leaving an Agency

When a professional and an Agency stop working together, who keeps the client data is a matter between them, governed by their own agreements. Propiedash does not take part in that decision and only applies the access that the account holders configure.

7.12. Closing the account and end of the Plan

If the professional closes their account, they lose access to Pro immediately and the account's data, including the data recorded in Pro (clients, visits, deals, contracts, and documents), will be irreversibly erased or anonymized within no more than ninety (90) days, except for data the law requires us to keep, in accordance with Section 10. Before closing it, we recommend downloading the copy you need (Section 7.10). If the paid Plan ends or is not renewed, the account moves to the free plan at the end of the paid period: we keep the data recorded in Pro for as long as the account exists, but the free plan's limits and features may apply until a paid Plan is purchased again.

7.13. Changes

Changes to how we process Pro data will be published and notified in accordance with Section 15, including through a notice in Pro.

8Data sharing

8.1. Service providers

We share data with providers that assist us in operating the Platform, only to the extent necessary for the provision of the service and under confidentiality obligations: database, authentication, and storage infrastructure (Supabase), hosting and deployment (Vercel), photo delivery (Cloudflare), payment processing (Stripe for cards; R4 and Ubii for payments in bolívares), maps and geolocation (Google Maps), email delivery (Resend), phone number verification (Twilio), app notifications (Expo), abuse prevention (Upstash), artificial intelligence and machine translation (Anthropic and OpenAI), data copies and internal analysis (Google Cloud), error monitoring (Sentry), and the analytics and advertising providers listed in Section 12 (Google, Meta, TikTok, LinkedIn, X, and Microsoft Clarity). The providers that process data recorded in Propiedash Pro are listed in Section 7.6.

8.2. Group companies

We share data with Propiedash LLC, in the United States of America, in its capacity as parent company and operator of the technological infrastructure, in accordance with Sections 1 and 9 of this Policy.

8.3. Other users

When you contact an advertiser through the Platform, they receive the data necessary to handle your inquiry (your name and the content of your message). If the advertiser uses Propiedash Pro and you are signed in, the advertiser also sees, for the following thirty (30) days, that you tapped their WhatsApp or call button, with your name, your profile photo, the property, and the date, and may add you as a client. If the advertiser belongs to an Agency, that Agency's owner and administrators can see your conversations with the Agency's members (Section 7.5). The visit requests you send reach the advertiser with the data you include. Your public profile data is visible as set out in Section 6.

8.4. Authorities

We may disclose personal data when required by law or by an order of a competent authority of the Bolivarian Republic of Venezuela or of another applicable jurisdiction.

8.5. No sale of data

Propiedash does not sell, rent, or trade your personal data to third parties for advertising purposes without your explicit consent.

9International transfers

The personal data processed through the Platform is hosted and processed on servers located in the United States of America and, depending on the provider, in other jurisdictions. By accepting this Policy, you consent to such international transfers. Propiedash undertakes to ensure that your data receives at all times a level of protection equal or equivalent to that described in this Policy, through agreements with its providers and appropriate technical and organizational measures.

10Data retention

In application of the temporality principle, we retain your personal data for as long as your account remains active or as necessary for the purposes described. After your account is deleted, your data will be erased or anonymized within no more than ninety (90) days, except for data we must retain for a longer period to comply with legal, accounting, or tax obligations, or to defend against claims, as well as residual copies that remain temporarily in backup systems.

11Your rights (habeas data)

In accordance with Article 28 of the Venezuelan Constitution and the principles developed by constitutional case law, you have the right to:

• Access: know what personal data we process about you, for what purpose, and with whom we share it.
• Rectification and updating: request the correction of inaccurate or incomplete data. Most of your data can be updated directly from your account settings.
• Erasure: request the deletion of your account and personal data, in accordance with Section 10.
• Objection: object to specific processing, in particular the use of your data for direct marketing purposes.
• Withdrawal of consent: withdraw the consent given at any time, without retroactive effect.

You may exercise these rights by writing to [email protected]. We will respond to your request within fifteen (15) to thirty (30) calendar days, depending on its complexity. Exercising these rights before Propiedash does not exclude your right to seek judicial relief through the habeas data action provided for in Article 28 of the Constitution. If your data was recorded in Propiedash Pro by a professional, an Agency, or a business, see Section 7.9.

12Cookies

We use cookies and similar technologies, such as browser local storage, for:

• Essential operation: keeping your session active, remembering your language, and storing your cookie choice (propiedash_cookie_consent, 180 days). These are necessary for the service and are not disabled when you reject.
• Preferences: remembering your searches and usage preferences.
• First-party analytics: recording the pages and properties you view and the contacts you start, to measure use of the Platform and show advertisers how their listings perform. We use a visitor identifier (pd_vid, 1 year), a session identifier (propiedash:sid, until you close the browser), the source of your first visit (pd_attr and pd_ref, 90 days), and the last ad you clicked on each platform (pd_click, 90 days). We do not store your IP address: we use it only in the moment, to limit abuse and to derive your approximate country and city, which is all we keep.
• Third-party analytics and advertising: Google Analytics and Google Ads, Meta (Facebook and Instagram), TikTok, LinkedIn, and X measure visits and conversions and let us show ads to people who have visited the Platform. When you start a contact, we also report it to Meta from our servers to measure those ads, with the page you were on, the listing or agent you contacted, your IP address, your browser, your approximate country, a pseudonymized visitor identifier (and one for your account, if you are signed in), and Meta's identifiers for your browser and for the Meta ad you clicked (_fbp and _fbc). Our servers may set those two Meta cookies in your browser (90 days). When you create a new account, we report it to Meta the same way, and also send your email address, first name and last name converted into an irreversible code (a SHA-256 hash), which Meta uses to recognize you without receiving them in plain text. From our servers we also report to Google Ads the contacts and new accounts that came from a Google ad, with that click's identifier (gclid, gbraid or wbraid), the time, your browser for a contact and, for a new account, your email address converted into the same irreversible code. We report to X in the same way the contacts that came from an X ad, with that click's identifier (twclid), and new accounts, with your email address in that code and the click identifier if there is one. We keep your browser's pseudonymized visitor identifier with your account, and the identifiers of the last ad you clicked on each platform with your signup. A cookie (pd_conv, 10 minutes) hands that signup to the pixels in your browser so it is not counted twice.
• Session recording: Microsoft Clarity and Sentry may record how a page is used (clicks, scrolling, navigation) to find errors and usability problems. They run only if you click “Accept all”.

Sentry also receives the Platform’s technical error reports, regardless of your choice.

12.1. How to accept, reject, or change your choice

On your first visit we show a notice. Until you choose, the analytics and advertising described above are active, but session recording is not. If you click “Reject”, we stop recording analytics events, do not load third-party tags, and delete the analytics and advertising cookies tied to our domain from your browser. Cookies those third parties keep on their own domains can be deleted in your browser settings.

If you visit from the European Economic Area, the United Kingdom, or Switzerland (based on the approximate country of your connection, which we store in the essential pd_region cookie, or on your device's time zone if your browser does not let us read that cookie), we do not turn on analytics or advertising until you click “Accept all”. Until then, and also if you click “Reject”, a click on one of our short links (propiedash.com/i/...) is only counted: we keep the link, your approximate country, and whether the click looks automated, without your browser, the page you came from, or your city.

You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or right here: Cookie settings. You can also configure your browser to block or delete cookies; blocking essential cookies may affect the operation of the Platform.

13Security

We apply reasonable technical and organizational measures, proportional to the risk, to protect your data, including:

• Encryption of data in transit (TLS) and at rest.
• Access control based on the principle of least privilege.
• Passwords stored using secure hash functions, never in plain text.
• Security monitoring and event logging.
• Periodic backups.

No system is infallible. In the event of a security incident significantly affecting your personal data, we will notify you as diligently as possible, together with the measures taken.

14Minors

The Platform is intended exclusively for persons over eighteen (18) years of age. We do not knowingly collect data from children or adolescents. If we become aware that we have collected data from a minor, we will delete it immediately, in line with the Organic Law for the Protection of Children and Adolescents (LOPNNA). If you are a parent or guardian and believe that a minor has provided us with data, contact us at [email protected].

15Changes to this Policy

We may update this Policy to reflect changes in the service or in the legal framework. Updates will be published on this page with an indication of their date and, when material, will also be notified to registered users by email or through a prominent notice on the Platform. Use of the Platform after the changes take effect constitutes acceptance of the updated Policy.

16Language

This Policy is executed in the Spanish language, which constitutes its official and legally binding version. The English version available on the Platform is provided as a courtesy translation only; in the event of any discrepancy between the two versions, the Spanish version shall prevail.

17Contact

To exercise your rights or for any inquiry regarding this Policy, you may contact us through:

• Email: [email protected]
• Phone: +58 424-5898927
• Form: contact page
• Propiedash, C.A.: Caracas, Venezuela
• Propiedash LLC: 8 The Green, Ste R, Dover, DE 19901, United States of America