Information for estate agents and agencies whose listings we index

Last updated: October 5, 2026

This notice is provided under Article 14 of the EU General Data Protection Regulation (GDPR). It is for real-estate professionals whose details appear in property listings we index. If you are a person searching for property, our main Privacy Policy applies to you instead.

1. Who we are

Controller: Dmytro Taranenko, sole trader (Empresário em Nome Individual), registered in Portugal under taxpayer number (NIF) PT316377210, at Rua João Infante 130, 2750-384 Cascais, Portugal, operating cubi.estate. Privacy contact: privacy@cubi.estate.

2. Where we got your data (Art. 14(2)(f))

We did not obtain it from you. We collect it from property listings published on approximately 160 real-estate portals and agency websites across Europe, all of which are publicly accessible. Your details reached us because they were published alongside a property listing on one of those sources. On request we will tell you the specific source of any record about you.

3. What we hold (Art. 14(1)(d))

• Your name, as published on the listing
• Your agency’s name, and its registration number where the source shows one
• The URL of your public professional profile on the source portal
• A business telephone number and/or email address, where the source published one
• The listings associated with you, and the dates we saw them
• If a buyer asks to contact you through Cubi: the buyer’s enquiry or questions about your listing, and when we sent them to you
• If you answer a buyer on our lead page: the text of your reply and when you sent it
• If a buyer asks for a callback or a video meeting: the times they proposed, the time you accept, and the meeting link you give us

4. What we do with it, and on what basis (Art. 14(1)(c), 14(2)(b))

Purpose: to operate a property search service that helps buyers and renters find properties and identify who is marketing them.

Legal basis: legitimate interests, Article 6(1)(f) GDPR. Our interest is in operating a search index of the European property market; we consider it balanced against your interests because the data is professional rather than private, was published by you or your agency for the purpose of being contacted about these listings, and we do not use it for marketing to you. You may object to this at any time — see section 8. We do not use your data for automated decision-making or profiling.

Buyer enquiries. When someone using Cubi asks to contact the professional marketing a listing, we send you their enquiry by email or WhatsApp: their questions, a request for a callback with the times they propose, or a request for a video meeting. These messages are written with the help of AI, and each one says so. If you choose to reply on our lead page, a member of the Cubi team reviews your reply and then passes it to that buyer only. If you accept a callback time, we show you the buyer’s phone number at that point. If you accept a meeting time, we send the buyer the meeting link you provide and a calendar invitation. Legal basis: legitimate interests (Article 6(1)(f) GDPR) — passing a specific buyer’s enquiry about your own listing to you, and your answer back to them. These are not marketing messages, and we never add promotional content to them.

5. Who sees it (Art. 14(1)(e))

• Users of our own website and chat product.
• The buyer who contacted you: your reply, after our review; the callback or meeting time you accept; and your meeting link.
• Our infrastructure and AI service providers, acting on our instructions.
• AI assistant platforms. We publish a connector that lets AI assistants — currently Anthropic (Claude), OpenAI (ChatGPT) and Perplexity — query our listing index on behalf of their users. As of August 21, 2026, that public connector returns no agent or agency identity: not your name, agency, registration number or profile link.

Our own website and chat product do display your name, your agency and a link to your public profile on the source portal. We do not show your email address, and a WhatsApp link — which incorporates your business telephone number — is offered only where you have given us consent.

6. Transfers outside the EEA (Art. 14(1)(f))

Some of the providers above are established in the United States. Where personal data is transferred outside the EEA we rely on the European Commission’s Standard Contractual Clauses together with supplementary measures. You may request a copy of the relevant safeguards.

7. How long we keep it (Art. 14(2)(a))

We keep your details for as long as the associated listing remains in our index. When a listing is withdrawn from the source it is deactivated in our index and retained in that deactivated form for market-statistics and de-duplication purposes. If you object or ask for erasure, we remove your contact details; where we hold a telephone number or email address for you, we also record it on a suppression list so that a later re-crawl of the source does not reinstate it.

Your replies to buyers are deleted 90 days after we pass them on or decline to. Proposed and accepted callback or meeting times, and meeting links, are deleted 90 days after the appointment. Our record of each buyer request to you is deleted after 24 months.

8. Your rights (Art. 14(2)(c), 14(2)(e))

You have the right to request access to your data, to have it corrected or erased, to restrict how we use it, to receive it in a portable format, and to object to our use of it. Because we rely on legitimate interests, an objection under Article 21(1) requires us to stop unless we can show compelling legitimate grounds that override your interests.

You can stop all further messages from us at any time: reply STOP to a WhatsApp message, or choose “do not contact” on a lead page. We record your number or address on our suppression list and send you nothing further, by email or WhatsApp.

To exercise any of these, or to have your details removed from the index, write to privacy@cubi.estate. We will respond within one month. You may also complain to the Portuguese supervisory authority, the CNPD (www.cnpd.pt), or to the authority in your own country.

9. Changes

We will post any changes to this notice on this page.