Privacy policy

Last updated: 24 April 2026 · Version 1.0

This privacy policy explains how REVALUE PROPTECH SL (“we”, “us”, “CasaVeritas Report”) collects, uses and protects personal data when you visit casaveritasreport.com or purchase our due-diligence report, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

2. What personal data we collect

We only collect data that is necessary to deliver the service you have paid for:

• Contact data: full name, email address, optional phone number, country of residence.
• Order data: property address, cadastral reference, listing URL, asking price, your stated buying objective.
• Documents you upload: nota simple, community meeting minutes, energy certificate, proposed contract, and any other document you voluntarily share for analysis.
• Payment data: processed directly by Stripe; we do not store card numbers. We only receive a transaction reference and the last 4 digits.
• Technical data: IP address, browser type, pages visited (aggregated, via privacy-friendly analytics).

3. Legal basis and purposes

Purpose	Legal basis (GDPR)	Retention
Deliver the CasaVeritas Report you ordered	Art. 6.1.b — contract performance	Duration of the service + 5 years (commercial records)
Invoicing and tax obligations	Art. 6.1.c — legal obligation	6 years (Spanish Commercial Code)
Transactional emails (delivery, receipt)	Art. 6.1.b — contract performance	Until service is closed
Optional marketing emails	Art. 6.1.a — consent	Until you withdraw consent
Website analytics	Art. 6.1.f — legitimate interest (minimised, no individual tracking)	12 months max

4. Who can access your data

We share strictly necessary data with a small set of service providers (“data processors”) under signed agreements that comply with Art. 28 GDPR:

• Stripe (payments) — may involve international transfers under EU-US Data Privacy Framework / Standard Contractual Clauses.
• Hosting & email infrastructure (Cloudflare, Google Workspace or equivalent).
• AI providers used internally to draft the report (e.g. Anthropic, OpenAI). Content is sent for processing on a transient basis and never used to train public models when we can contractually prevent it.
• Accountant / tax advisor for invoicing obligations.

We do not sell your data. We do not share it with real estate agencies or sellers.

5. International transfers

Some providers listed above are located outside the European Economic Area. In all cases, transfers are covered by an adequacy decision, the EU-US Data Privacy Framework, or EU Standard Contractual Clauses.

6. Your rights under GDPR

You may exercise the following rights free of charge by emailing hello@casaveritasreport.com:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”), subject to legal retention obligations.
• Restriction of processing.
• Portability in a structured, machine-readable format.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time, without affecting prior lawful processing.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD — www.aepd.es).

7. Cookies and analytics

We aim to use only strictly necessary cookies and a privacy-friendly, cookieless analytics tool. If we introduce any non-essential cookies, a consent banner will be added. Current cookie status: strictly necessary only.

8. Security

We apply reasonable technical and organisational measures to protect your data (TLS encryption in transit, access controls, least-privilege principle, short retention for documents not strictly necessary after delivery). No system is 100% secure, but we commit to notify affected users and the AEPD without undue delay in the event of a personal data breach that poses a risk to your rights.

9. Changes to this policy

We may update this policy. The “Last updated” date at the top reflects the latest version. Material changes will be communicated to existing clients by email.