Privacy Notice

1. Who we are

Grand Estates 500 is operated by Alice Baskous. We act as the data controller for personal data processed in connection with the service.

2. Personal data we collect

• Account data: email address, login credentials, authentication identifiers (e.g. Google ID if you sign in with Google).
• Profile and usage data: saved listings, search queries, preferences, and interactions with the feed.
• Support data: messages you send us.
• Technical data: IP address, device identifiers, browser type, and basic telemetry needed to operate and secure the service.

3. How we use your data

• To create and operate your account (legal basis: performance of contract).
• To provide and personalize the listing feed (performance of contract).
• To secure the service and prevent fraud (legitimate interests).
• To improve the product (legitimate interests).
• To respond to support requests (performance of contract).
• To comply with legal obligations (legal obligation).

4. Who we share data with

• Service providers / subprocessors: hosting, database, authentication, and analytics providers we use to run the service.
• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers: legal and accounting advisers where needed.
• Authorities where required by law.

5. International transfers

Some recipients may be located outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or port your personal data; to object to processing; to withdraw consent; and to lodge a complaint with a supervisory authority. We aim to respond to verified requests within one month. You can delete your account at any time from your account settings.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security — to protect your personal data.

9. Cookies

We use only essential cookies and local storage required to keep you signed in and to operate the service. We do not use third-party advertising cookies.

10. Contact

For privacy questions or to exercise your rights, contact us through the in-app support channel.