Privacy Policy
Last updated: May 30, 2026
Cubi.estate (the “Service”) is operated by [COMPANY LEGAL NAME], a company registered in Portugal under number [NIPC / registration number] (“we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service and the choices you have regarding that data. We are committed to protecting your personal data and your right to privacy. If you have any questions about this Privacy Policy or our data practices, please contact us at contact@cubi.estate.
This Privacy Policy applies to all personal data collected through our Service, including any related services, sales, marketing, or events. Under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Portuguese data protection law (Lei n.º 58/2019), we act as the data controller of your personal data. By using the Service, you acknowledge the processing of your personal data as described here.
Personal data we collect
We collect personal data that you voluntarily provide to us — for example when you register, search for properties, submit an inquiry, request to be connected with a real estate professional, or otherwise contact us. Depending on the context, this may include your name, email address, phone number, messaging handle (e.g. a Telegram or WhatsApp identifier where you contact us via those channels), location preferences, property search criteria, saved or compared listings, and the content of your messages and inquiries.
We also automatically collect certain technical information when you visit or use the Service, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, approximate location derived from your IP address, and log and usage data (date/time stamps, pages and listings viewed, searches performed, and other actions you take). Some of this information is collected through cookies and similar technologies — see our Cookie Policy.
How we use your data, and our legal bases
We process your personal data only where we have a lawful basis under Article 6 GDPR. Specifically:
- To provide the Service — facilitating property searches, maintaining your session, and, at your request, connecting you with licensed local real estate professionals. Legal basis: performance of a contract or taking steps at your request prior to entering into a contract (Art. 6(1)(b)).
- To operate, secure, and improve the Service — analytics, debugging, fraud and abuse prevention, and quality improvement. Legal basis: our legitimate interests in running and improving a safe and reliable service (Art. 6(1)(f)).
- To send marketing or promotional communications and to set non-essential cookies, and to share your inquiry details with a real estate professional. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
- To comply with legal obligations — including responding to lawful requests, and tax and accounting requirements. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).
Use of artificial intelligence
The Service is an AI-assisted product. When you interact with our chat or search assistant, you are interacting with an automated artificial-intelligence system, not a human. We use AI — including large-language-model services provided by third parties, some of which are located outside the European Economic Area — to interpret your queries, search and rank listings, personalize results, and generate summaries and translations.
Property summaries, descriptions, and translations shown to you may be generated or adapted by AI and may be inaccurate, incomplete, or out of date. AI output is provided for general informational purposes only and is not professional real estate, legal, financial, tax, or investment advice; you should independently verify any information before acting on it. See our Disclaimer.
Where your inputs are processed by third-party AI providers, those providers act as our processors under contract. We do not permit our AI providers to use your inputs to train their models. This disclosure is provided in line with the transparency obligations of the EU AI Act (Regulation (EU) 2024/1689).
Automated decision-making and profiling
To make the Service more useful, we use profiling — we analyze your searches, saved and compared listings, and interaction signals to rank and personalize the property results we show you. This processing helps order and filter listings; it does not produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. You can object to profiling carried out on the basis of our legitimate interests (Art. 21 GDPR) by contacting us, and you can limit personalization by using the Service without saving or signalling preferences.
How we share your data
We share personal data only with your consent, to comply with law, to provide the Service, to protect our or others’ rights, or to fulfil business obligations. We may share data with categories of recipients including: hosting and infrastructure providers; AI and machine-learning service providers; email and messaging delivery providers; analytics providers; and, where you ask to be connected, licensed local real estate professionals. These recipients act as our processors and are bound by contract, except for the real estate professionals, who act as independent controllers once you are connected to them at your explicit request. We do not sell your personal data.
International data transfers
Some of our processors (for example certain AI and hosting providers) are located outside the European Economic Area, including in the United States. Where personal data is transferred to a third country, we rely on an appropriate safeguard under Chapter V GDPR — an adequacy decision of the European Commission, or Standard Contractual Clauses approved by the European Commission, together with supplementary measures where required. You may request more information about these safeguards by contacting us.
Data retention
We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (for example for tax or accounting purposes). When we no longer have a legitimate need to process your personal data, we will delete or anonymize it, or, where that is not possible, securely store and isolate it from further processing until deletion is possible.
Security
We implement appropriate technical and organizational measures designed to protect the personal data we process. However, no electronic transmission or storage technology is completely secure, so while we strive to protect your personal data we cannot guarantee its absolute security.
Your rights
If you are in the European Economic Area, you have the following rights under the GDPR: the right to access your personal data and obtain a copy; the right to rectification of inaccurate data; the right to erasure (“right to be forgotten”); the right to restrict processing; the right to data portability; the right to object to processing based on our legitimate interests, including profiling; and, where processing is based on consent, the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at contact@cubi.estate. We will respond in accordance with applicable data protection law.
If you believe we are unlawfully processing your personal data, you also have the right to lodge a complaint with your local supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD). Contact details for other EEA authorities are available at edpb.europa.eu.
Personal data of third parties (real estate professionals)
The Service indexes property listings from third-party sources, which may contain the contact details of real estate agents or agencies. Where we process such data, we act as a controller and apply a consent- and suppression-based approach: agent contact details are not displayed by default and are released only with the relevant professional’s consent. If you are a real estate professional and wish to access, correct, or have your personal data removed, please contact us at contact@cubi.estate.
Children
The Service is not directed to children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last updated” date and becomes effective as soon as it is accessible. If we make material changes, we may notify you by posting a prominent notice or by direct notification. We encourage you to review this Privacy Policy periodically.