Privacy Policy

• Controller. For data about the people who visit estateno.com, contact us, join early access or hold an Estateno account, we decide how and why the data is used.
• Processor. When visitors to an agency’s Estateno website send an enquiry or other data, the agency decides how it is used and we process it on the agency’s behalf. If you are a visitor to an agency’s website, please contact that agency about your data.

• Early-access requests: your name, agency name, email address, and optionally your WhatsApp number and current website.
• Account data: name, email, agency details, login credentials, team members you invite and your plan.
• Your content: listings, photos, descriptions, agent profiles, logos and settings you add to the platform.
• Leads from your website (as processor): the details visitors enter in enquiry forms (such as name, email, phone and message) and the listing they asked about.
• Billing data: payments are handled by Paddle. We receive information such as your plan, subscription status, billing country and email, but not your full card number.
• Technical data: IP address, browser and device information, and security and error logs, collected by our hosting and security provider.
• Messages: what you write when you email us.

• To provide and secure the Service, and to run your account (performance of a contract).
• To contact you about your early-access request or onboarding (your request and legitimate interests).
• To process payments, prevent fraud and meet tax and legal duties (contract and legal obligation).
• To protect the Service from abuse, fake listings and spam, and to enforce our Terms (legitimate interests).
• To sort enquiries in an agency's inbox, filtering spam and labelling what each enquiry is about, on the agency's behalf (as processor).
• To improve the product and give support (legitimate interests).
• To send product updates or marketing where you have agreed or where the law allows. You can opt out at any time.

We do not sell personal data and we do not use it for advertising profiles.

As of the date above, estateno.com does not use advertising cookies or third-party analytics cookies. Once you sign in to the platform we use cookies that are strictly necessary to keep you signed in and secure. If we add analytics or other optional cookies, we will update this policy and ask for consent where required.

We use service providers that process data for us under agreements that protect it:

• Cloudflare for hosting, content delivery, security, the database and file storage (Cloudflare R2, for listing photos and logos).
• Paddle as Merchant of Record for payments. Paddle is an independent controller of the payment data it collects, under its own privacy notice.
• Resend for sending platform e-mails: sign-up confirmations, password resets and new-enquiry notifications to agencies.
• Email providers for receiving and answering support e-mail.
• TypeSafe (its Jev model) to label enquiries in agency inboxes, for example whether a message looks like spam and what the sender is asking about. We send the message text, the sender's name and the listing it refers to, not e-mail addresses or phone numbers. The labels are suggestions that the agency can change.

We may also disclose data if the law requires it, to protect rights and safety, or in connection with a sale or reorganisation of the business.

Our providers operate globally, so your data may be processed in countries other than yours, including countries with different data protection laws. Where required, we rely on appropriate safeguards such as standard contractual clauses.

• Early-access requests: until we have contacted you and for up to 24 months, or until you ask us to delete them.
• Account data and your content: while your account is active, then for 30 days after it closes so that you can request an export.
• Billing and tax records: for as long as the law requires.
• Security and error logs: for a limited period needed to keep the Service safe and working.

Depending on where you live, laws such as the EU and UK GDPR, Türkiye’s Personal Data Protection Law (KVKK) and the UAE Personal Data Protection Law may give you the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. To use these rights email hello@estateno.com. We may need to verify your identity first. You can also complain to your local data protection authority.

We use technical and organisational measures to protect personal data, including encryption in transit, access controls and separation between customers’ data. No system is completely secure, so we cannot guarantee absolute security.

The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect children’s data.

We may update this policy. We will change the date at the top and, for material changes, notify you by email or in the Service.

Questions or requests about privacy: hello@estateno.com.