Privacy Policy

28/08/2025Version: 1.1

1. Introduction

This Privacy Policy explains how RERA PropTech OÜ ("Company", "we", "us", "our"), company number ΗΕ 468139, located at Harju maakond, Tallinn, Kristiine linnaosa, Kuldnoka tn 22, 10619, operating through its website https://rera.cy (the "Site") and mobile applications, collects, uses, and discloses your personal data when you access and use our services.

2. Data We Collect

We do not collect data for advertising purposes, we do not engage in cross-app tracking, and we do not share personal data with data brokers. All personal data we collect is used strictly to provide and improve our services.

2.1 Personal Data

We collect and process the following personal data from our users:

Email Address: Stored securely and displayed in the service interface only if you enable this option in your account settings.
Full Name: Displayed in the service interface.
Date of Birth: Displayed in the service interface.
Telephone Number: Stored securely and displayed in the service interface only if you enable this option in your account settings.
Avatar: Displayed in the service interface.

2.2 Agency Data (if applicable)

For users providing information about their agency or workplace, we collect and process:

Agency Name
Agency Telephone Number
Agency Email
Agency Logo

3. Additional Data from Authentication Methods

3.1 Sign in with Apple

When you sign in using your Apple ID, we receive your name (if provided) and email address (which may be a private relay address provided by Apple). We use this information solely to:

Identify you within our service
Send you notifications in accordance with your privacy settings (as described in our Terms of Service)
Restore your account data if necessary

This data is not shared with third parties, except as required to provide our service functionalities.

3.2 Email and OTP Authentication

When you log in using your email, we send a one-time passcode (OTP) to the provided address.

This code is valid for 5 minutes and is used only to verify your identity.
The OTP is never stored in plain text and is automatically discarded after use.

4. Use of Your Personal Data

We process your personal data for the following purposes:

To enable and manage user registration, authentication, and profile display.
To facilitate the functionality of our service, including but not limited to agent/agency reviews, advertisement publishing, and the purchase of promotional and advertising services.
To transmit data to third parties as necessary to provide our services (details in Section 5).
To comply with legal obligations and enforce our Terms of Service.

5. Data Sharing and Disclosure

5.1 Payment Processing via Stripe

We share the following personal data with Stripe (our payment processor) to enable payment processing and related services:

Email address
Full name
IP address
Billing address (if provided for invoicing purposes)

This information is necessary to create and manage your customer profile within Stripe in order to process payments (e.g., purchasing listings or promotional services). For more information, please review Stripe’s Privacy Policy.

5.2 Other Third Parties

We may also share personal data with carefully selected third-party service providers who support the operation and security of our service (e.g., hosting, error monitoring, communication tools). These providers process data only on our behalf and strictly for service functionality, not for advertising or tracking purposes.

6. Analytics and Tracking Technologies

We may use Firebase SDK and Google Analytics in restricted mode to collect limited, anonymized usage data for the sole purpose of improving our service (e.g., error diagnostics, performance monitoring, aggregate usage statistics).

These tools do not collect advertising identifiers, do not use data for personalized ads, and do not track users across apps or websites.

7. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction.

8. Data Storage and Transfers

We store personal data exclusively within the European Union. The only exception is data shared with Stripe as described above, which may involve limited transfers outside the EU in accordance with applicable data protection laws (e.g., Standard Contractual Clauses).

9. Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal obligations, resolution of disputes, and enforcement of our agreements.

10. Your Rights

Under applicable data protection laws, you have the following rights:

Access to your personal data
Correction of inaccurate or incomplete personal data
Deletion of your personal data (subject to conditions)
Restriction of processing where applicable
Objection to processing
Data Portability in a structured, commonly used, and machine-readable format
Withdrawal of Consent without affecting prior lawful processing

To exercise these rights, contact us using the details in Section 12.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on our Site with an updated effective date.

12. Contact Information

RERA PropTech OÜ
Company Number: 17251982
Address: Harju maakond, Tallinn, Kristiine linnaosa, Kuldnoka tn 22, 10619
Email: it@rera.cy
Website: https://rera.cy