Privacy Policy

1. Who We Are (Data Controller)

Escoutly, operated by Grand Minds Technology, is the controller responsible for your personal data processed through the Platform. For privacy questions or to exercise your rights, contact privacy@escoutly.com; for data-protection matters you may also contact our Data Protection Officer at dpo@escoutly.com.

2. Information We Collect

We collect the following categories of personal data:

• Account & profile data: name, email address, phone number, password (hashed), role, language, and account settings.
• Property & activity data: listings you create, search criteria, saved properties and searches, viewing requests, enquiries, reviews, and messages.
• Transaction data: subscription plan, billing status, and payment records (card details are handled by our payment processors, not stored by us).
• AI interaction data: the content of your conversations with the AI assistant and related usage metrics.
• Technical data: device and browser information, IP address, approximate location, and usage/diagnostic data collected via cookies and similar technologies.
• Communications: messages you send us and our correspondence with you.

3. How We Use Your Information & Legal Bases

We process personal data to provide and improve the Platform, on the following legal bases (where the GDPR applies):

• Performance of a contract: to create and manage your account, publish listings, process subscriptions, and deliver the features you request.
• Legitimate interests: to secure the Platform, prevent fraud and abuse, analyse and improve our services, and provide AI-powered recommendations — balanced against your rights.
• Consent: for optional communications and any non-essential cookies, where applicable; you may withdraw consent at any time.
• Legal obligation: to comply with applicable laws, tax, accounting, and lawful requests from authorities.

4. AI Processing

The AI assistant processes the text and voice you provide in order to respond and to surface relevant properties and insights. We use third-party AI providers (including OpenAI) as processors under contractual terms; we do not authorise the use of your conversations to train third-party foundation models, in line with the provider’s applicable business terms. AI outputs are informational and may be inaccurate — see our Terms of Service.

5. Cookies & Similar Technologies

We use only essential cookies needed to keep you signed in and to remember preferences such as language, display currency, and theme. For details, see our Cookie Policy.

6. How We Share Information

We share personal data only as necessary:

• Service providers (processors): hosting, databases, email delivery, payment processing (Stripe, Bizum), AI providers, and authentication (e.g. Google), each bound to process data only on our instructions.
• Other users where you choose to interact: e.g. an agent or property owner receives your enquiry or viewing request; a listing you publish is shown publicly.
• Legal & safety: where required by law, to protect rights and safety, or to enforce our Terms.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
• We do not sell your personal data.

7. International Data Transfers

We operate across the UAE, Egypt, and Spain and may transfer data internationally, including to processors located outside your country. Where required, such transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described, to provide the service, and to meet legal, tax, and regulatory obligations. When you delete your account, we delete or anonymise your personal data within 30 days unless we are required to retain it (for example, transaction records for accounting purposes).

9. Data Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, access controls, and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you have the right to:

• access the personal data we hold about you and obtain a copy;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”) where applicable;
• restrict or object to certain processing;
• data portability — receive your data in a portable format;
• withdraw consent at any time, without affecting prior processing; and
• lodge a complaint with a supervisory authority.

11. Exercising Your Rights

You can access and download your data, and delete your account, from your dashboard, or contact privacy@escoutly.com. We respond within one month (extendable for complex requests) and do not charge a fee for reasonable requests.

12. Children’s Privacy

The Platform is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.

14. Contact & Complaints

Contact privacy@escoutly.com or dpo@escoutly.com with any question or request. If you are in the EU/EEA and believe your rights have been infringed, you may lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos, AEPD).