Privacy Policy

1. Data We Collect

When you interact with our property listings and chat features, we may collect:

  • Chat messages — questions you ask about properties and the AI responses
  • Contact information — name, email address, and phone number if you voluntarily provide them
  • Property preferences — budget range, desired bedrooms, areas of interest
  • Technical data — IP address, browser type, pages visited, and timestamps
  • UTM parameters — marketing attribution data from URL parameters

2. How We Use Your Data

  • To answer your property questions via our AI chat assistant
  • To connect you with the listing agent when you express interest
  • To send property summaries and updates to your email (when requested)
  • To improve our services and understand visitor interests
  • To prevent abuse and ensure platform security

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

  • Consent (Art. 6(1)(a)) — for AI chat messages, buyer qualification signals, and email property summaries. You provide consent by clicking 'I agree' before chatting or by checking the consent box on forms.
  • Legitimate interest (Art. 6(1)(f)) — for basic analytics (page views, web vitals) to improve our service. You can object to this processing at any time.
  • Pre-contractual measures (Art. 6(1)(b)) — for schedule viewing requests, as these are steps toward a potential property transaction.

4. AI Processing & Profiling

Our AI chat assistant (powered by Anthropic Claude) analyses your messages to provide relevant property information. During the conversation, the AI may extract qualifying signals such as:

  • Budget range (above/at/below asking price)
  • Timeline (when you plan to buy)
  • Financing method (cash, mortgage)
  • Investment interest
  • Contact information you voluntarily provide

These signals are used to match you with relevant properties and connect you with the listing agent. This constitutes profiling under GDPR Article 4(4). You have the right to object to this processing (Article 21) by contacting privacy@neratek.net.

5. Data Sharing & Processors

Your data may be shared with the property's listing agent and their agency for the purpose of following up on your inquiry. We do not sell your data to third parties.

  • Anthropic (San Francisco, USA) — AI chat processing. DPA + EU SCCs in place.
  • Resend (USA) — transactional emails. DPF certified + DPA.
  • DigitalOcean (USA) — hosting infrastructure. DPF certified + DPA.
  • Sentry (USA) — error tracking (may capture technical data in error reports). DPF certified + DPA.
  • Google (USA) — maps embed, loaded only with your consent. DPF certified.

All US processors are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) for cross-border data transfers.

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access (Art. 15) — request a copy of data we hold about you
  • Rectification (Art. 16) — correct inaccurate data
  • Erasure (Art. 17) — request deletion of your data ("right to be forgotten")
  • Restriction (Art. 18) — limit how we process your data
  • Portability (Art. 20) — receive your data in a machine-readable format
  • Objection (Art. 21) — object to processing based on legitimate interests or profiling
  • Complaint — lodge a complaint with the Portuguese DPA (CNPD) at www.cnpd.pt

To exercise these rights or request data deletion, email privacy@neratek.net. We will respond within 30 days (Art. 12(3)).

7. Data Retention

Chat sessions and associated data are retained for up to 12 months after your last interaction. Lead records are retained for the duration of the agency's subscription. You may request early deletion at any time.

8. Cookies & Local Storage

We use browser localStorage to persist your chat session (24-hour expiry), saved properties, and proactive message cooldowns (7-day expiry). We do not use tracking cookies. Analytics data is collected via our own infrastructure, not third-party trackers.

9. Contact

For privacy inquiries, contact the data controller:

NeraTek — Email: privacy@neratek.net

Last updated: March 2026