Privacy Policy
Privacy Policy
Last updated: 26 June 2026
Escoutly (“Escoutly”, “we”, “us” or “our”), operated by Grand Minds Technology is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, and the rights you have. It applies to the Escoutly website, applications, AI assistant, and related services.
1. Who We Are (Data Controller)
Escoutly, operated by Grand Minds Technology, is the controller responsible for your personal data processed through the Platform. For privacy questions or to exercise your rights, contact privacy@escoutly.com; for data-protection matters you may also contact our Data Protection Officer at dpo@escoutly.com.
2. Information We Collect
We collect the following categories of personal data:
- Account & profile data: name, email address, phone number, password (hashed), role, language, and account settings.
- Property & activity data: listings you create, search criteria, saved properties and searches, viewing requests, enquiries, reviews, and messages.
- Transaction data: subscription plan, billing status, and payment records (card details are handled by our payment processors, not stored by us).
- AI interaction data: the content of your conversations with the AI assistant and related usage metrics.
- Technical data: device and browser information, IP address, approximate location, and usage/diagnostic data collected via cookies and similar technologies.
- Communications: messages you send us and our correspondence with you.
3. How We Use Your Information & Legal Bases
We process personal data to provide and improve the Platform, on the following legal bases (where the GDPR applies):
- Performance of a contract: to create and manage your account, publish listings, process subscriptions, and deliver the features you request.
- Legitimate interests: to secure the Platform, prevent fraud and abuse, analyse and improve our services, and provide AI-powered recommendations — balanced against your rights.
- Consent: for optional communications and any non-essential cookies, where applicable; you may withdraw consent at any time.
- Legal obligation: to comply with applicable laws, tax, accounting, and lawful requests from authorities.
4. AI Processing
The AI assistant processes the text and voice you provide in order to respond and to surface relevant properties and insights. We use third-party AI providers (including OpenAI) as processors under contractual terms; we do not authorise the use of your conversations to train third-party foundation models, in line with the provider’s applicable business terms. AI outputs are informational and may be inaccurate — see our Terms of Service.
5. Cookies & Similar Technologies
We use only essential cookies needed to keep you signed in and to remember preferences such as language, display currency, and theme. For details, see our Cookie Policy.
6. How We Share Information
We share personal data only as necessary:
- Service providers (processors): hosting, databases, email delivery, payment processing (Stripe, Bizum), AI providers, and authentication (e.g. Google), each bound to process data only on our instructions.
- Other users where you choose to interact: e.g. an agent or property owner receives your enquiry or viewing request; a listing you publish is shown publicly.
- Legal & safety: where required by law, to protect rights and safety, or to enforce our Terms.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
- We do not sell your personal data.
7. International Data Transfers
We operate across the UAE, Egypt, and Spain and may transfer data internationally, including to processors located outside your country. Where required, such transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
8. Data Retention
We keep personal data only for as long as necessary for the purposes described, to provide the service, and to meet legal, tax, and regulatory obligations. When you delete your account, we delete or anonymise your personal data within 30 days unless we are required to retain it (for example, transaction records for accounting purposes).
9. Data Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, access controls, and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location, you have the right to:
- access the personal data we hold about you and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”) where applicable;
- restrict or object to certain processing;
- data portability — receive your data in a portable format;
- withdraw consent at any time, without affecting prior processing; and
- lodge a complaint with a supervisory authority.
11. Exercising Your Rights
You can access and download your data, and delete your account, from your dashboard, or contact privacy@escoutly.com. We respond within one month (extendable for complex requests) and do not charge a fee for reasonable requests.
12. Children’s Privacy
The Platform is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.
14. Contact & Complaints
Contact privacy@escoutly.com or dpo@escoutly.com with any question or request. If you are in the EU/EEA and believe your rights have been infringed, you may lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos, AEPD).