Privacy Policy

1Data controller

The controller of the personal data collected through the Propiedash platform —its website and its iOS and Android mobile applications— (the "Platform") is Propiedash, C.A., a commercial company domiciled in Caracas, Venezuela. Propiedash LLC, a company organized under the laws of the State of Delaware, United States of America, with its address at 8 The Green, Ste R, Dover, DE 19901, United States of America, is the parent company that provides the Platform's technological infrastructure and processes international card payments, acting as a data processor (hereinafter, jointly, "Propiedash", "we", "us").

For any matter related to your personal data, you may contact us at [email protected] or by phone at +58 424-5850228.

2Legal framework

This Privacy Policy is governed by the Venezuelan legal system, in particular:

• Articles 28 (habeas data) and 60 (protection of honor, private life, intimacy, and confidentiality) of the Constitution of the Bolivarian Republic of Venezuela.
• The principles established by Judgment No. 1318/2011 of the Constitutional Chamber of the Supreme Tribunal of Justice on data protection: consent, purpose, quality, temporality or retention, accuracy and self-determination, security and confidentiality, redress, and accountability.
• The Infogovernment Law (Ley de Infogobierno), where applicable.
• Decree-Law No. 1,204 on Data Messages and Electronic Signatures.

As a complement, Propiedash adopts international best practices in personal data protection, inspired by standards such as the European Union's General Data Protection Regulation (GDPR).

3Data we collect

3.1. Data you provide to us

• Identity and contact data: first and last name, email address, phone number, and, where applicable, WhatsApp number.
• Professional profile data: trade or agency name, Dashtag, photograph or logo, professional description, location, tax details (such as the RIF), and any verification documentation you choose to provide.
• Listing data: information about the properties you publish, including address or approximate location, price, features, photographs, videos, and floor plans.
• Messages: the content of the messages you send through the Platform's internal messaging and through contact and support forms.
• Payment metadata: when you pay by card, the payment processor (Stripe) shares with us tokenized identifiers, the payment status, and the last digits of the card; Propiedash never receives or stores full card numbers. When you pay via Pago Móvil, we process the transaction reference data needed for its verification.

3.2. Data we collect automatically

• Usage and device data: IP address (used only while handling each request; we do not store it), browser type, operating system, pages visited, time spent, and device identifiers.
• Cookies and similar technologies: as set out in Section 11 of this Policy.
• Approximate location: derived from the IP address, to personalize search results.
• Precise device location: in the mobile applications, and only if you grant the corresponding permission, we access your device's GPS location to show you nearby properties ("search near me"). This location is used at the time of the search, is not linked to your profile, and is not retained; you can revoke the permission at any time from your device settings.

3.3. Third-party data

If you sign in through third-party services (such as Google), we receive your name, email address, and public profile photograph, in accordance with the permissions you grant to that service.

3.4. Mobile applications

In our iOS and Android applications, specifically:

• Your recent searches are stored only on your device and are not sent to our servers.
• We do not use advertising identifiers (such as the IDFA) or track your activity across third-party apps or websites. The app contains no advertising networks.
• Subscriptions to paid plans are purchased through our website; the app merely reflects your account's active plan.

4Purposes of processing

We process your personal data for the following purposes:

• Provision of the service: creating and managing your account, enabling the publication and search of listings, and facilitating communication between users.
• Publication of listings: the data contained in listings and professional profiles is public by design, since the very purpose of the service is its dissemination.
• Verification: verifying the identity of users and the status of professional profiles.
• Payments: processing subscription plan payments and verifying Pago Móvil payments.
• Support: handling your inquiries and requests, including via WhatsApp when you choose that channel.
• Notifications: sending you operational communications and, with your consent, marketing communications. You can manage your preferences granularly through the email preference center linked in the footer of every message, or unsubscribe at any time.
• Analytics and improvement: analyzing the use of the Platform and producing aggregated, anonymous statistics on the Venezuelan real estate market.
• Fraud prevention and security: detecting and preventing fraud, abuse, and unlawful uses of the Platform.
• Legal compliance: complying with applicable legal obligations and responding to requests from competent authorities.

5Lawful basis

The processing of your data is based on:

• Your consent, given when registering, when accepting this Policy, and, where applicable, when opting into marketing communications, which you may withdraw at any time.
• The performance of the contract, that is, the provision of the services described in the Terms and Conditions.
• Propiedash's legitimate interest in the security of the Platform, fraud prevention, and service improvement, balanced against your rights and freedoms.

6Public and private data

Due to the nature of the service, certain data is public: the professional profile's name or trade name, photograph or logo, Dashtag, description, declared location, and the listings you publish, including photographs, videos, prices, and property features. This data is visible to any visitor of the Platform and may be indexed by search engines.

The following, among others, are private: your access credentials, the content of your internal messages, your payment metadata, your account preferences, and the verification data you provide to us. This data is not published and is processed only in accordance with this Policy.

7Data sharing

7.1. Service providers

We share data with providers that assist us in operating the Platform, only to the extent necessary for the provision of the service and under confidentiality obligations: database and storage infrastructure (Supabase), hosting and deployment (Vercel), card payment processing (Stripe), maps and geolocation (Google Maps), email delivery, error monitoring (Sentry), and the analytics and advertising providers listed in Section 11 (Google, Meta, TikTok, LinkedIn, X, and Microsoft Clarity).

7.2. Group companies

We share data with Propiedash LLC, in the United States of America, in its capacity as parent company and operator of the technological infrastructure, in accordance with Sections 1 and 8 of this Policy.

7.3. Other users

When you contact an advertiser through the Platform, they receive the data necessary to handle your inquiry (your name and the content of your message). Your public profile data is visible as set out in Section 6.

7.4. Authorities

We may disclose personal data when required by law or by an order of a competent authority of the Bolivarian Republic of Venezuela or of another applicable jurisdiction.

7.5. No sale of data

Propiedash does not sell, rent, or trade your personal data to third parties for advertising purposes without your explicit consent.

8International transfers

The personal data processed through the Platform is hosted and processed on servers located in the United States of America and, depending on the provider, in other jurisdictions. By accepting this Policy, you consent to such international transfers. Propiedash undertakes to ensure that your data receives at all times a level of protection equal or equivalent to that described in this Policy, through agreements with its providers and appropriate technical and organizational measures.

9Data retention

In application of the temporality principle, we retain your personal data for as long as your account remains active or as necessary for the purposes described. After your account is deleted, your data will be erased or anonymized within no more than ninety (90) days, except for data we must retain for a longer period to comply with legal, accounting, or tax obligations, or to defend against claims, as well as residual copies that remain temporarily in backup systems.

10Your rights (habeas data)

In accordance with Article 28 of the Venezuelan Constitution and the principles developed by constitutional case law, you have the right to:

• Access: know what personal data we process about you, for what purpose, and with whom we share it.
• Rectification and updating: request the correction of inaccurate or incomplete data. Most of your data can be updated directly from your account settings.
• Erasure: request the deletion of your account and personal data, in accordance with Section 9.
• Objection: object to specific processing, in particular the use of your data for direct marketing purposes.
• Withdrawal of consent: withdraw the consent given at any time, without retroactive effect.

You may exercise these rights by writing to [email protected]. We will respond to your request within fifteen (15) to thirty (30) calendar days, depending on its complexity. Exercising these rights before Propiedash does not exclude your right to seek judicial relief through the habeas data action provided for in Article 28 of the Constitution.

11Cookies

We use cookies and similar technologies, such as browser local storage, for:

• Essential operation: keeping your session active, remembering your language, and storing your cookie choice (propiedash_cookie_consent, 180 days). These are necessary for the service and are not disabled when you reject.
• Preferences: remembering your searches and usage preferences.
• First-party analytics: recording the pages and properties you view and the contacts you start, to measure use of the Platform and show advertisers how their listings perform. We use a visitor identifier (pd_vid, 1 year), a session identifier (propiedash:sid, until you close the browser), the source of your first visit (pd_attr and pd_ref, 90 days), and the last ad you clicked on each platform (pd_click, 90 days). We do not store your IP address: we use it only in the moment, to limit abuse and to derive your approximate country and city, which is all we keep.
• Third-party analytics and advertising: Google Analytics and Google Ads, Meta (Facebook and Instagram), TikTok, LinkedIn, and X measure visits and conversions and let us show ads to people who have visited the Platform. When you start a contact, we also report it to Meta from our servers to measure those ads, with the page you were on, the listing or agent you contacted, your IP address, your browser, your approximate country, a pseudonymized visitor identifier (and one for your account, if you are signed in), and Meta's identifiers for your browser and for the Meta ad you clicked (_fbp and _fbc). Our servers may set those two Meta cookies in your browser (90 days). When you create a new account, we report it to Meta the same way, and also send your email address, first name and last name converted into an irreversible code (a SHA-256 hash), which Meta uses to recognize you without receiving them in plain text. From our servers we also report to Google Ads the contacts and new accounts that came from a Google ad, with that click's identifier (gclid, gbraid or wbraid), the time, your browser for a contact and, for a new account, your email address converted into the same irreversible code. We report to X in the same way the contacts that came from an X ad, with that click's identifier (twclid), and new accounts, with your email address in that code and the click identifier if there is one. We keep your browser's pseudonymized visitor identifier with your account, and the identifiers of the last ad you clicked on each platform with your signup. A cookie (pd_conv, 10 minutes) hands that signup to the pixels in your browser so it is not counted twice.
• Session recording: Microsoft Clarity and Sentry may record how a page is used (clicks, scrolling, navigation) to find errors and usability problems. They run only if you click “Accept all”.

Sentry also receives the Platform’s technical error reports, regardless of your choice.

11.1. How to accept, reject, or change your choice

On your first visit we show a notice. Until you choose, the analytics and advertising described above are active, but session recording is not. If you click “Reject”, we stop recording analytics events, do not load third-party tags, and delete the analytics and advertising cookies tied to our domain from your browser. Cookies those third parties keep on their own domains can be deleted in your browser settings.

If you visit from the European Economic Area, the United Kingdom, or Switzerland (based on the approximate country of your connection, which we store in the essential pd_region cookie, or on your device's time zone if your browser does not let us read that cookie), we do not turn on analytics or advertising until you click “Accept all”. Until then, and also if you click “Reject”, a click on one of our short links (propiedash.com/i/...) is only counted: we keep the link, your approximate country, and whether the click looks automated, without your browser, the page you came from, or your city.

You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or right here: Cookie settings. You can also configure your browser to block or delete cookies; blocking essential cookies may affect the operation of the Platform.

12Security

We apply reasonable technical and organizational measures, proportional to the risk, to protect your data, including:

• Encryption of data in transit (TLS) and at rest.
• Access control based on the principle of least privilege.
• Passwords stored using secure hash functions, never in plain text.
• Security monitoring and event logging.
• Periodic backups.

No system is infallible. In the event of a security incident significantly affecting your personal data, we will notify you as diligently as possible, together with the measures taken.

13Minors

The Platform is intended exclusively for persons over eighteen (18) years of age. We do not knowingly collect data from children or adolescents. If we become aware that we have collected data from a minor, we will delete it immediately, in line with the Organic Law for the Protection of Children and Adolescents (LOPNNA). If you are a parent or guardian and believe that a minor has provided us with data, contact us at [email protected].

14Changes to this Policy

We may update this Policy to reflect changes in the service or in the legal framework. Updates will be published on this page with an indication of their date and, when material, will also be notified to registered users by email or through a prominent notice on the Platform. Use of the Platform after the changes take effect constitutes acceptance of the updated Policy.

15Language

This Policy is executed in the Spanish language, which constitutes its official and legally binding version. The English version available on the Platform is provided as a courtesy translation only; in the event of any discrepancy between the two versions, the Spanish version shall prevail.

16Contact

To exercise your rights or for any inquiry regarding this Policy, you may contact us through:

• Email: [email protected]
• Phone: +58 424-5850228
• Form: contact page
• Propiedash, C.A.: Caracas, Venezuela
• Propiedash LLC: 8 The Green, Ste R, Dover, DE 19901, United States of America