Privacy Policy

ImovPro.ai is a SaaS real estate marketing platform that uses artificial intelligence to automatically generate videos, descriptions, social media posts and other promotional content from property photos.

Data controller:
ImovPro.ai
Contact email: privacy@imovpro.ai

We collect the following categories of data:

• Account data — full name, email address, password (stored in encrypted form) and profile photo (when provided via Google OAuth).
• Property data — photos, address, typology, area, price, nearby points of interest and other details you enter to generate content. This may include agent contact information.
• Usage data — pages visited, features used, date and time of access, device type and browser, IP address.
• Payment data — processed directly by Stripe. We do not store credit card numbers on our servers.
• Cookies — we only use strictly necessary cookies for the platform to function. See section 9 for details.

We use your data to:

• Create and manage your account on the platform
• Generate videos, descriptions and other content from the photos and data you provide
• Process payments and manage your credits
• Send service-related communications (account confirmation, generation completion notifications)
• Improve the platform and develop new features
• Ensure platform security and prevent fraud
• Comply with applicable legal obligations

We process your personal data on the following grounds:

• Performance of a contract — processing is necessary to provide the service you signed up for when creating an account and using the platform.
• Consent — when you register on the platform and accept this privacy policy.
• Legitimate interests — to improve the service, ensure security and prevent abuse.
• Legal obligation — to comply with tax, regulatory and other applicable legal obligations.

We do not sell your personal data. We share data only with the following third parties, strictly necessary to provide the service:

• Amazon Web Services (AWS) — file storage (images and videos) on servers in the European Union.
• Stripe — secure payment processing.
• Google — when you use Google OAuth authentication.
• Email services — for sending transactional emails (account confirmation, notifications).
• Sentry — technical error monitoring (anonymised data).

All third parties are bound by data protection agreements and operate in compliance with the GDPR.

Your data is stored on AWS servers in the European Union. When transfer outside the European Economic Area is necessary (for example, for payment processing), we ensure appropriate safeguards are in place, namely Standard Contractual Clauses approved by the European Commission.

We retain your data for as long as you maintain an active account on the platform. After account deletion:

• Personal data — deleted within 30 days.
• Generated content (videos, images) — deleted within 30 days.
• Billing data — retained for the legally required period (typically 10 years).
• Security logs — retained for 12 months.

Under the GDPR (and the LGPD, where applicable), you have the following rights:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to the processing of your data in certain circumstances.
• Restriction — request restriction of processing of your data.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at privacy@imovpro.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the competent data protection authority (CNPD in Portugal, ANPD in Brazil, ICO in the UK).

We only use strictly necessary cookies for the platform to function:

• Session cookie — keeps your session authenticated (HttpOnly cookie, not accessible via JavaScript).
• Language detection — to display the platform in your preferred language.

We do not use advertising, tracking or third-party analytics cookies. We do not use localStorage to store authentication tokens.

We implement technical and organisational measures to protect your data:

• Password encryption with bcrypt
• Short-lived authentication tokens (15 minutes)
• Encrypted communications via HTTPS/TLS
• HTTP security headers (HSTS, X-Content-Type-Options, X-Frame-Options)
• Rate limiting to prevent brute-force attacks
• Token storage as SHA-256 hashes
• File access via pre-signed URLs with expiry

No system is 100% secure. In the event of a data breach, we will notify affected users and the competent authorities within the timeframes required by law.

ImovPro.ai is intended for real estate professionals and is not aimed at anyone under 18 years of age. We do not intentionally collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it immediately.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notification on the platform. The date of the last update is shown at the top of this page.

Continued use of the platform after changes are published constitutes acceptance of those changes.

For questions about privacy or data protection:

Email: privacy@imovpro.ai

We are happy to answer any questions you may have.