Data and purposes

To resolve the building and prepare the screening, the following may be processed: an address or an unprotected cadastral reference, technical documents provided, evidence, the report, private capabilities and minimal security logs, together with the e-mail address requested at the “Payment” step to send the link to the report and the receipt for the purchase. For purchases, the amount, the chosen payment method and the transaction identifiers are also processed; card details and other payment method details are collected directly by Stripe and never reach our servers. To prevent abuse of the free report, an irreversible code (HMAC) of the connection's IP address and, if provided, of the e-mail address is also stored; the IP address is never stored in clear. We neither consult nor infer ownership or other protected cadastral data.

The data is used to handle the request, charge for and, where applicable, refund the purchase, generate and deliver the report (including the e-mail notice with its private link) and, for paid reports, its AI summary, comply with accounting and tax obligations, keep it secure, manage expiry and deletion and, only if you accept it, measure visits to public pages with our own aggregated analytics and with Google Analytics. Documents and tokens are treated as private and are never used to build advertising profiles.

Legal bases

The requested resolution, the charge and the generation of the report rely on the performance of the user's request and purchase contract; the retention of billing data relies on compliance with legal obligations. The optional analytics processing is based on revocable consent. Legal obligations will be met where applicable, and technical security and the prevention of abuse of the free report may rely on a narrow, balanced and documented legitimate interest.

The person who provides data or documents confirms that they are entitled to do so. The system takes no decisions with legal effects and performs no profiling; it produces ordinal screening bands with a versioned engine of deterministic rules, without an AI model. For paid reports, an AI model then writes an indicative summary from the facts of the report, without changing its bands or taking decisions.

Recipients and transfers

The application, database, queue and storage components are operated under the controller's control. No data is disclosed for advertising.

Only if you accept analytics, Google Analytics (Google Ireland Limited, Ireland) acts as a processor, under its data processing terms, to measure visits to public pages. It receives the address of the public page visited without parameters (except utm_ campaign parameters), its title, the referring site, the language, technical data about the browser and the device, and a pseudonymous identifier stored in its cookies: never the address of the building, the cadastral reference, documents, reports, private links or the e-mail address, and measurement is disabled in the analysis wizard. Google Analytics does not log IP addresses, and Google signals and ad personalisation are disabled. Google LLC (United States) may access this data; the transfer is covered by the EU-U.S. Data Privacy Framework, under which it is certified, and by the standard contractual clauses.

To write the AI summary of paid reports, once the purchase is confirmed and the report has been delivered, the OpenAI API (OpenAI, L.L.C., United States) is used as a processor, under its data processing agreement for the API and the standard contractual clauses it incorporates as the safeguard for the international transfer. The report itself is generated without this provider. The provider receives only delimited facts from the report (year and type of building, verdicts and data of the checks, risk levels, findings of the building inspection and open points) and, if one was written, the free description of the property with addresses and references removed: never the address, the cadastral reference, documents, capabilities or contact details of the requesting person. Requests are sent without persistent storage at the provider, and OpenAI does not use its API data to train models. The free report is generated without sending any data to this provider.

To send the report-ready notice, Resend (Resend, Inc., United States) is used as a processor, under its data processing agreement, which incorporates the standard contractual clauses as the safeguard for the international transfer; sending takes place from its European Union region. The provider receives only the e-mail address, the subject, the address of the building and the private link to the report: never the report, documents or other capabilities. E-mails addressed to our @housingfax.com addresses are received through Cloudflare Email Routing (Cloudflare, Inc.) and handled in a Google mailbox (Google LLC), both with equivalent transfer safeguards.

Payments are processed through Stripe (Stripe Payments Europe, Ltd., Ireland), which collects the payment method details in its secure form and receives from us the amount, the e-mail address and the order identifiers: never the address of the building, the report or its private links. Stripe acts as a processor for processing the charge and as an independent controller for fraud prevention and its own legal obligations, in accordance with its privacy policy (stripe.com/privacy); transfers outside the European Economic Area are covered by the standard contractual clauses.

Any other provider, processor, international transfer or change of data residency will require an assessment, a contract and the prior update of this information.

Retention and deletion

The analysis form stores no draft on this device. Capabilities, documents, derivatives and private reports expire at most 14 days after the report was requested, except where retention is locked by a legal obligation or a documented incident. The e-mail address for the notice is stored encrypted and deleted as soon as the notice is sent or the attempt is abandoned, and in any case within 14 days; the sending provider keeps its delivery logs in accordance with its policy. The HMAC codes that limit free reports are deleted after 14 days. The data of each purchase (amount, date, payment and refund identifiers) is kept for the periods required by commercial and tax legislation, without the report or its links. Google Analytics keeps event data for 2 months and the data linked to the pseudonymous identifier in its cookies for 14 months from the last visit (the minimum Google allows), and its cookies expire after 13 months at most or when consent is revoked.

The purge runs daily and covers records, objects, derivatives, caches and queues. Encrypted transactional backups created for deployment are destroyed after a verified acceptance or rollback, and any interrupted remainder is deleted within 24 hours at most.

Rights and complaints

You may request access, rectification, erasure, restriction, objection and portability by writing to [email protected]. Only the information needed to verify identity and scope will be requested; tokens or documents will never be requested by e-mail.

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). Where processing is based on consent, withdrawing it does not affect the lawfulness of the processing carried out beforehand.

Security, minors and changes

Data minimisation, expiry, access controls, isolation, sanitised logs and opaque capabilities are applied. No system is infallible; a relevant incident will be handled and notified in accordance with the applicable legislation.

The service is not aimed at minors. Material changes will be published with a new date and version before they take effect.