Privacy Policy

WebProp operates as both a Data Controller (for your account information, billing details, and direct support communications) and a Data Processor (for the client, lead, and listing records that you manage within your private CRM instance).

This policy applies to all visitors, registered real estate agents, agencies, brokerages, and developers using WebProp websites, APIs, and associated cloud applications.

To provide our real estate platform, we collect the following categories of information:

• Account & Profile Data: Name, business email, phone number, company name, tax ID, and billing credentials.
• Real Estate Portfolio Data: Property addresses, asking prices, descriptions, high-resolution photographs, virtual tours, and cadastral metadata.
• Client & Lead Management Data: Prospective buyers, renters, owner contacts, scheduled viewings, communication notes, and requirement criteria recorded by your team.
• Technical & Telemetry Data: IP addresses, browser types, device identifiers, audit logs, and interaction timestamps required for application security.

We process information strictly for legitimate commercial and operational purposes:

• Delivering CRM Core Services: Managing real estate inventories, pipelines, automated follow-ups, and calendar scheduling.
• Portal Syndication: Publishing listings to partner real estate portals according to your explicit syndication settings.
• Billing & Account Management: Administering subscriptions, invoices, and payment processing through PCI-DSS compliant providers.
• Security & Fraud Prevention: Detecting unauthorized access, preventing listing fraud, and ensuring continuous service integrity.

Under the European Union General Data Protection Regulation (GDPR), Swiss FADP, and applicable Latin American data protection laws, we process data under the following legal bases:

• Performance of a Contract: Fulfilling our software subscription agreement with you.
• Legitimate Interests: Maintaining platform security, preventing abuse, and improving system efficiency.
• Legal Compliance: Retaining tax and accounting records as mandated by statutory authorities.
• Consent: Where you opt into optional communications or third-party syndication feeds.

WebProp facilitates direct multi-portal syndication to regional real estate aggregators (e.g. Immobilienscout24, Homegate, Idealista, Portalinmobiliario, Fincaraíz, Inmuebles24, Funda, and Urbania).

When you activate syndication for a listing, property data and public contact details are securely transmitted to the designated portal in accordance with that portal's API requirements. You maintain full control over which listings are pushed and can revoke syndication at any time.

We implement rigorous technical and organizational measures to safeguard your information:

• Encryption in Transit: All communications are encrypted using modern TLS 1.3 cryptographic protocols.
• Encryption at Rest: Databases and file attachments are stored with AES-256 bit encryption.
• Access Control: Multi-tenant isolation, role-based access management, and automated audit trails.
• Backup & Redundancy: Continuous automated backups with geographic replication to ensure disaster recovery.

Because WebProp operates across multiple international markets, data may be processed on secure infrastructure located in the European Union, United States, and Latin America.

All international transfers are governed by appropriate safeguards, including European Commission Standard Contractual Clauses (SCCs) and binding data processing agreements.

Depending on your jurisdiction (such as under GDPR, Ley 19.628, Ley 1581, or LFPDPPP), you have the right to:

• Access: Request copies of your personal information held by WebProp.
• Rectification: Correct inaccurate or incomplete personal records.
• Erasure ('Right to be Forgotten'): Request deletion of your account and personal data, subject to legal retention obligations.
• Portability: Export your inventory and contact data in structured, machine-readable formats (JSON, CSV).
• Objection & Restriction: Limit or object to specific processing activities.

We use strictly necessary session cookies to maintain user authentication and security status across requests. We do not use third-party behavioral advertising cookies on our private CRM portal.

You can configure your browser to decline cookies, although doing so may impair the platform's core operational capabilities.

We may update this Privacy Policy periodically to reflect technological advancements, legal changes, or service enhancements. Material changes will be communicated via your account dashboard or by email.

For questions, exercise of privacy rights, or data inquiries, contact our Data Protection Officer at [email protected].