Privacy Policy

1. Data controller

Star Alliance Consulting, S.L. — CIF B19750199 — C/ José Ortega y Gasset 22-24, 28006 Madrid (Spain) — support@buy2rent.io

2. Data we process

(a) Email address — when you buy a plan or request a sign-in link: to give you access, send your sign-in link and manage your plan.

(b) IP address and an anonymous random identifier stored in a technical cookie — only to enforce the free tier (2 free analyses) and prevent abuse.

(c) Listing content you submit (URL, pasted text or screenshots) — sent to our AI provider to produce the analysis. Screenshots are not stored. Results of URL analyses are cached for up to 30 days so the same listing returns the same answer.

(d) Payment data — handled entirely by Paddle (see section 5). We never see or store your card details. When you start a payment, we add to it the name of the campaign or link that brought you to the site that day (for example an advert), with no identifier, so that we can measure which adverts lead to purchases.

(e) Audience statistics — our own cookieless measurement: page visited, referring site, country and city (derived from the IP address, which is not stored), device type, browser and language. Visitors are counted with an anonymous identifier that changes every day and cannot be linked to a person. Vercel Analytics also measures page views without cookies.

(f) Rent update reminder (optional) — email address, lease signing date, rent and, if given, the contract index: only to send you a yearly reminder before your rent update date. Activated only after you click the confirmation link.

(g) Analysis by email (optional) — email address and a summary of the analysis you asked to receive (price, estimated rent, score, verdict). If you tick the box, we also send you 4 tips over 2 weeks; the series stops if you buy a plan.

(h) Professional offer request — name, company, email, phone and message sent with the form: only to reply to you and prepare an offer. Kept in our mailbox for up to 2 years.

3. Legal bases

Consent for the optional rent update reminder and the optional tips emails (withdrawable at any time with the unsubscribe link); your request when you ask to receive an analysis by email; performance of a contract (paid access, sign-in, support); legitimate interest (free-tier limit by IP, security, fraud prevention); legitimate interest also covers cookieless audience measurement, which uses no personal identifiers.

4. Retention

Rent update reminders: until you unsubscribe (the data is then deleted immediately); unconfirmed sign-ups are deleted after 7 days. Analyses sent by email: until you unsubscribe, at most 12 months after your last request. Account data (email, plan, pass expiry): while your account is active and up to 3 years after your last use. IP counters: 90 days. Cached analyses: 30 days. Audience statistics: 25 months. Invoices are kept by Paddle as required by tax law.

5. Processors and recipients

Vercel Inc. (website hosting and server functions, USA) · Supabase Inc. (database and sign-in, servers in the EU — Ireland) · Anthropic PBC (AI analysis of listing content, USA) · Scrape.do (fetching the public listing page from the URL you provide; receives only that URL) · Resend Inc. (transactional emails, EU sending region).

Paddle.com Market Ltd (UK) is our Merchant of Record: it sells the plans, processes payments, issues invoices and handles refunds, and acts as an independent controller for that data (see paddle.com/legal/privacy).

We do not sell your data and do not use it for advertising.

6. International transfers

Some providers are located in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

7. Cookies and local storage

Strictly necessary only: your language choice and, if you sign in, your session (browser local storage), plus one technical cookie “b2r_q” holding a random identifier used solely to count your free analyses (12 months). It contains no personal data and is not used for tracking.

We do not use analytics or advertising cookies. During payment, Paddle (our Merchant of Record) may set its own cookies on its checkout window — see paddle.com/legal/privacy.

8. Your rights

You can request access, rectification, erasure, restriction, portability or object to processing by writing to support@buy2rent.io. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

9. Minors

The service is intended for adults (18+).

10. Changes

We will update this page if our processing changes; the date at the top shows the latest version.