Privacy policy
Who processes your data
The data controller is apuntadeleste.com. Contact us at hola@apuntadeleste.com for any privacy matter.
What data we process and why
Account: if you register, your email and a hashed password, used to identify you, save your favourite properties and send the alerts you enabled. Legal basis: performance of the service you requested.
Searches and assistant conversation: to return results and keep the thread. If you are not signed in they stay in your own browser; if you are signed in they are stored in your account so you do not lose the history.
Minimal technical data: IP address and browser type logged by the server, needed for security and operation.
We do NOT process special categories of data (health, beliefs, biometrics) and we never ask for them. We make no automated decisions with legal effects on you.
Analytics and marketing: only with your consent
If you accept the "Analytics" category in the cookie banner, we load Google Analytics 4 (Google LLC). It records which pages and listings you view, what you search for (area, type, price), the device you use and your approximate location, using cookie identifiers; it does not receive your name or email. Purpose: measuring site usage and improving search. Legal basis: your consent.
If you accept the "Marketing" category, we load Meta Pixel (Meta Platforms). It records the listings you view, your searches and the contacts you start, and links them to your Facebook or Instagram account if you are signed in. Purpose: showing you ads for similar properties later (remarketing) and measuring those campaigns. Legal basis: your consent. Meta also processes that data for its own purposes under its privacy policy.
Until you accept, neither is loaded: no script, no request. You can withdraw consent at any time from "Cookie preferences" in the footer; from then on they stop loading. Data already sent to Google or Meta is subject to those providers' retention periods.
What we do NOT do
We do not sell your personal data. We do no ad profiling or behavioural advertising without your consent: it only happens if you enable the "Marketing" category, and it stops as soon as you disable it.
Should we want to use your data for anything beyond what is described here, we would ask you first with a new, separate consent.
Who we share it with
With the hosting provider running the site and with the AI model provider powering the assistant, solely to process your query. Both act as processors on our instructions.
With Google (Analytics) and Meta (Pixel) only if you gave the corresponding consent, as explained above.
Assistant replies and analytics may involve an international data transfer, carried out with the safeguards required by applicable law. Do not send sensitive data through the chat.
How long we keep it
Account data for as long as you keep the account. Assistant history is limited to the latest exchanges. On request we delete your account and associated data, except what we must retain by law.
Your rights
You may request access, rectification, erasure, restriction or objection to processing, and portability in a readable format. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Write to hola@apuntadeleste.com and we respond within statutory deadlines. If you believe your claim was not handled, you may contact your supervisory authority: URCDP in Uruguay, AAIP in Argentina, ANPD in Brazil, or your data protection authority in the European Union.
California residents: you have the right to know what we collect, to request deletion, to correct it and to opt out of sale or sharing. We do not sell personal information. Using Meta Pixel for advertising may count as "sharing" under the CPRA: it only happens if you accept the "Marketing" category, and you can decline or withdraw it from "Cookie preferences". We also honour your browser's Global Privacy Control signal automatically: with it, we enable neither analytics nor marketing, even if you had accepted them before. We do not discriminate against you for exercising your rights.
Minors
The service is intended for adults. We do not knowingly collect data from minors; if detected, we delete it.
Security
We apply reasonable technical and organisational measures (encryption in transit, hashed passwords, access control). No system is infallible: should a breach affect your rights, we would notify you as required by law.