Privacy Policy

1. Data we process

Account: first name, last name and email provided at sign-up, handled through our identity service (Keycloak).

Listings: the property data you publish — address/neighbourhood, price, characteristics, photos and the publisher contact phone.

Contacts (leads) and messages: the name and contact of whoever sends a request, and the text of messages and chat between users.

Technical data: IP address, device type and access logs needed for operation and security.

2. Purposes and legal basis

Providing the service (creating an account, publishing listings, enabling contact): performance of our contract with you.

Security, fraud prevention and activity notifications (new contacts/messages): legitimate interest.

Email verification and, when enabled, phone verification: contract performance and security.

We process data under Angola’s Personal Data Protection Law (Law 22/11) and, for users in the EU, the GDPR.

3. Cookies

We use only strictly necessary cookies — to keep you signed in (Keycloak/next-auth authentication) and for basic site functionality. We use no advertising or third-party analytics cookies, so no additional consent is requested. If we add analytics in future, we will ask for your consent first.

4. Sharing and processors

Publishers: when you send a contact, your identifying details are shared with that publisher.

Hosting: infrastructure runs on Hetzner (EU data centres); photos are stored in our object storage (MinIO) on the same server.

Email: transactional messages (verification, notifications) are sent via Microsoft 365.

Maps and addresses: map tiles are served by OpenStreetMap (your IP is shared with OSM when loading the map) and address geocoding uses Nominatim/OpenStreetMap.

We do not sell your personal data.

5. Retention

We keep account data while the account is active and listings while published. Leads and messages are kept for the parties’ history. You can request deletion at any time; we will delete or anonymise data unless we must keep it by law.

6. Your rights

You have the right to access, rectify, erase, restrict and object to processing of your data, and to data portability. To exercise these, contact privacy@kubico.casa. You also have the right to lodge a complaint with the competent data protection authority.

7. Security

We use HTTPS, token-based authentication and access control. No system is fully secure, but we apply reasonable measures to protect your data.

8. Changes and contact

We may update this Policy; material changes will be announced on the site. kubico.casa service, operated by Damiano Derin (data controller) — privacy@kubico.casa.