Privacy Policy of Grupo BAU S.A.
Effective Date: April 9, 2026
Grupo BAU S.A. ("Grupo BAU," "we," "us," or "our") operates a global real estate platform that allows users to discover, publish, promote, compare, save, and inquire about residential, commercial, vacation, investment, and other property-related listings, and to interact with owners, brokers, agents, developers, advertisers, service providers, and other users through our websites, applications, tools, communications, and related services (collectively, the "Platform").
We are committed to handling personal data responsibly, transparently, and securely. This Privacy Policy explains what information we collect, how we use it, when we share it, how long we keep it, the rights available to you, and how you can exercise those rights.
By using the Platform, creating an account, posting a listing, submitting an inquiry, contacting us, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed by Grupo BAU in connection with:
- visits to our website and mobile interfaces;
- creation and management of user accounts;
- browsing, searching, saving, comparing, and sharing listings;
- submitting listing inquiries and contact requests;
- posting, editing, promoting, or removing listings;
- subscriptions, paid plans, advertisements, and related billing;
- support requests, complaints, moderation, trust and safety reviews;
- newsletters, updates, and marketing communications;
- analytics, fraud prevention, security monitoring, and legal compliance.
This Privacy Policy does not apply to third-party websites, payment providers, social media services, map providers, identity verification vendors, analytics platforms, or other external services linked to or integrated with the Platform. Those services operate under their own privacy policies and terms.
2. Who controls your data
Grupo BAU S.A. is the controller of personal data processed through the Platform for the purposes described in this Privacy Policy, except where another party independently determines the purposes and means of processing (for example: broker, advertiser, landlord, developer, property owner, or service provider receiving your inquiry or listing-related information).
When you submit an inquiry to a listing, contact an advertiser, or request information about a property, the recipient may become an independent controller of your information for their own business and legal purposes. In those cases, their privacy practices also apply.
3. Categories of information we collect
3.1 Information you provide directly
- full name, email address, telephone number;
- username and password;
- account preferences and preferred language;
- billing details;
- company or agency name and professional profile details;
- property inquiry content and support messages;
- reviews, comments, feedback, survey responses;
- identity verification information where offered;
- documents, photographs, videos, floor plans, certificates, and other uploaded content.
3.2 Listing and property data
- property address or approximate location;
- property type and use classification;
- sale or rental price and availability status;
- features, amenities, dimensions, and descriptions;
- media (photos, videos, virtual tours, brochures, supporting files);
- agent, owner, landlord, or advertiser contact information;
- promotional campaign settings and listing history.
3.3 Communications and inquiry data
- inquiry forms and messages;
- call requests and callback preferences;
- support conversations and complaint submissions;
- moderation reports and contact history.
3.4 Automatically collected technical and usage data
- IP address, browser type/version, operating system, device type/identifiers;
- language settings, time zone, referral URLs;
- cookies and similar identifiers;
- logs, crash reports, interaction events, pages viewed;
- searches, filters, saved listings, clickstream and ad interaction data;
- session timestamps.
3.5 Location data
We may collect approximate location based on IP address and, if enabled by you, precise geolocation from your device.
3.6 Payment and transaction data
- billing name/address, invoice data, tax-related information;
- subscription status, payment status, refund history, chargeback records;
- transaction metadata.
We do not intentionally store full payment card numbers on our own servers unless expressly stated otherwise. Payment processing may be handled by specialized third-party processors.
3.7 Information from third parties and public sources
Where legally permitted, we may receive information from service providers, analytics partners, advertising partners, fraud prevention vendors, identity verification vendors, map/geolocation providers, public records, business partners, marketing partners, affiliated companies, and professional or corporate representatives acting on your behalf.
4. How we collect information
We collect personal data directly from you, automatically when you use the Platform, through cookies and similar technologies, from other users interacting with you, from listing advertisers and business partners, from public records/lawful commercial sources, and from service providers supporting the Platform.
5. Why we use your information
5.1 To provide and operate the Platform
We use your data to create/manage accounts, authenticate users, publish/manage listings, display search results, enable inquiries and communications, process subscriptions/payments, deliver requested services/features, and maintain records of transactions/interactions.
5.2 To personalize and improve user experience
We may tailor search results, suggest listings/content, remember preferences, improve usability, measure engagement, and develop new tools/products/services.
5.3 For trust, safety, and fraud prevention
We may detect and prevent fraud, spam, misuse, impersonation, and scams; verify accounts/identities/listing legitimacy where appropriate; investigate suspicious activity; enforce policies; and protect users, advertisers, and the Platform.
5.4 For customer service and communications
We respond to support requests, send service notices, provide account/listing/transaction updates, communicate about moderation/disputes/complaints, and deliver legally required notices.
5.5 For marketing and promotions
Where lawful, we may send newsletters, product announcements, service updates, promotional offers, event invitations, and advertising communications. You can opt out of marketing emails at any time using unsubscribe links or account settings.
5.6 For analytics and business intelligence
We may analyze usage patterns, inquiries, engagement, search behavior, and listing performance to improve services, optimize advertising, and support planning.
5.7 For legal and regulatory compliance
We may comply with laws/regulations/lawful requests, fulfill tax/accounting/reporting/audit duties, establish/exercise/defend legal claims, and enforce our contracts/policies.
6. Legal bases for processing
Where required, we rely on one or more legal bases: performance of a contract (or pre-contract steps), legal obligations, legitimate interests (operating/securing/improving the Platform, fraud prevention, user protection), your consent where required, and other lawful grounds permitted by applicable law.
Where consent is used, you may withdraw consent at any time, without affecting processing performed before withdrawal.
7. Cookies, tracking technologies, and advertising
We use cookies, pixels, SDKs, logs, and similar technologies for platform operation, preferences, performance, abuse prevention, usage understanding, and (where permitted) advertising/remarketing.
These technologies may be used for necessary functionality, authentication/security, language/preferences, analytics, ad delivery/performance, personalization, and fraud prevention.
Where required by law, we request consent for non-essential technologies. Disabling certain technologies may affect platform functionality. Where applicable law grants opt-out rights for targeted advertising, sale, or sharing, we honor valid requests through available mechanisms (including recognized browser-based privacy signals where required).
8. When we share your information
We do not sell personal data in the ordinary sense of exchanging it for money as a standalone business practice. Depending on local law, some advertising/analytics/partner disclosures may be treated as regulated "sale" or "sharing".
8.1 Listing advertisers and inquiry recipients
When you inquire, request contact, apply, or otherwise interact with a listing, we may share your information with the relevant advertiser, owner, landlord, broker, agency, developer, or representative.
8.2 Service providers
We may share with providers helping us operate the Platform (hosting, support, analytics, communications, security, fraud detection, payments, identity verification, moderation, email, infrastructure, and software tools).
8.3 Business and marketing partners
Where lawful and appropriate, we may share limited data for lead routing, referrals, co-branded services, advertising, measurement, or promotions.
8.4 Authorities and legal recipients
We may disclose to regulators, law enforcement, courts, arbitrators, and other bodies when necessary to meet legal obligations or protect rights/safety/security.
8.5 Corporate transactions
If Grupo BAU is involved in a merger, acquisition, financing, reorganization, asset sale, or similar transaction, personal data may be transferred as part of that process with appropriate safeguards.
9. International transfers
Because the Platform is global, personal data may be processed in countries other than your residence, where laws may differ. We take reasonable steps to transfer data lawfully and apply safeguards where required (contractual measures, internal policies, recognized transfer mechanisms, or other lawful protections).
10. Data retention
We keep personal data only as long as reasonably necessary for the purposes described here, including account management, service delivery, listing/inquiry management, contractual performance, legal/tax/accounting/audit compliance, dispute/security investigations, and agreement enforcement.
Retention depends on data type, purpose, sensitivity, legal requirements, and whether retention is needed to resolve disputes or prevent fraud. When no longer required, we may delete, aggregate, anonymize, or securely archive data as allowed by law.
11. Data security
We implement reasonable technical, administrative, and organizational safeguards to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, and destruction. Measures may include access controls, logging, encryption where appropriate, monitoring, role-based permissions, secure development practices, and vendor management. No system is absolutely secure.
12. Your privacy rights
Depending on your location/law, you may have rights to access, correct, delete, object, restrict processing, withdraw consent, request portability, opt out of sale/sharing/profiling/targeted advertising (where applicable), and lodge complaints with a competent authority.
We may verify identity before processing requests and may deny/limit requests where legally permitted.
13. Account settings and communications controls
You may update certain data via account settings and manage saved searches, alerts, notifications, and marketing preferences through the Platform or communication instructions. Even if you opt out of marketing, we may still send service/security/transactional/legal communications.
14. Children and minors
The Platform is not intended for children under 18, or the age of majority in your jurisdiction if higher. We do not knowingly collect children's personal data in violation of law. If you believe this occurred, contact us through official Platform channels.
15. Third-party content and links
Listings, advertisements, embedded media, maps, links, mortgage tools, calculators, virtual tours, and other features may be powered by third parties. We are not responsible for third-party privacy practices, content, or services.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal, regulatory, technological, product, operational, or data practice changes. We will publish updates and revise the effective date. Where required, we will provide additional notice or seek renewed consent. Continued use after effectiveness means acknowledgment of the revised terms to the extent permitted by law.
17. Contacting Grupo BAU about privacy
If you have questions, concerns, or requests about this Privacy Policy or our processing of personal data, contact us through official contact channels published on the Platform. Include sufficient information for account/interaction identification and request handling.