Privacy Policy
Last updated: June 2026
This Privacy Policy explains how CasaDireta collects, uses, stores and protects your personal data when you use our platform. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Portuguese data protection law (Lei n.º 58/2019).
1. Data Controller
CasaDireta is the data controller responsible for the personal data processed through this platform. CasaDireta operates as an information-society service (a classifieds and software platform) and is not a real estate agency. For any privacy matter you can contact us at info@casadireta.com.
2. Personal Data We Collect
We collect: (a) account data — your name and email address provided at registration; (b) listing data — property details, descriptions, prices, location and photos you submit; (c) verification data — identity documents (and, where you choose to provide them, ownership documents such as Certidão Permanente or Caderneta Predial) used to verify identity and prevent fraud; (d) communications — messages and contact requests exchanged through the platform; (e) transaction data — records relating to any optional paid services you purchase; and (f) technical data — IP address, device and basic usage information needed to operate and secure the service.
3. How We Use Your Data
We process your personal data to: create and manage your account; publish and manage your property listings; verify identity to prevent fraud and to grant the Verified badge and access to buyer messages; enable communication between buyers and sellers (messages exchanged through the platform may be stored and, where necessary for fraud prevention and safety, reviewed by our team, on the basis of our legitimate interests); process any optional paid services; provide customer and AI-assistant support; ensure the security and integrity of the platform; and comply with our legal obligations. We do not sell your personal data to third parties.
4. Legal Basis for Processing
We rely on the following legal bases under Article 6 GDPR: performance of a contract (to provide the services you request); compliance with a legal obligation (e.g. anti-fraud and fiscal record-keeping); your consent (where specifically requested, e.g. optional communications); and our legitimate interests (platform security, fraud prevention and service improvement), balanced against your rights.
5. Sharing and Service Providers
We share data only with service providers ("processors") who act on our instructions under data-processing agreements, including: cloud hosting and database infrastructure; transactional email delivery; our payment processor (for the listing fee); the provider of our AI assistant; and mapping services used to display property locations. We may also disclose data where required by law or competent authorities. We never sell your data or use it for third-party advertising.
6. International Transfers
Some of our processors may store or process data outside the European Economic Area. Where this occurs, we ensure an adequate level of protection through mechanisms recognised under GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses.
7. Data Retention
We keep your personal data for as long as your account is active. After account closure we delete or anonymise your data, except where longer retention is required by law — in particular, transaction and invoicing records are retained for 10 years in accordance with Portuguese fiscal regulations. Verification documents are retained only for as long as necessary for the verification purpose and applicable legal obligations.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, access controls and restricted handling of verification documents. No method of transmission or storage is completely secure, but we work continuously to protect your information.
9. Your Rights
Under GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at info@casadireta.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
10. Cookies
We use cookies and similar storage as follows: (a) Essential — authentication and session management, required for the platform to work; these are not subject to consent. (b) Third-party functional — when you accept, we load Mapbox to show property locations, which may set its own cookies or local storage; maps are not loaded until you accept. (c) Analytics — if and when enabled, privacy-friendly usage analytics will load only with your consent. We do not use advertising cookies. You can accept or reject non-essential cookies in the consent banner shown on your first visit, change your choice at any time on our Cookie Policy page (linked in the footer), and control cookies through your browser settings (disabling essential cookies may prevent you from logging in).
11. Children
The platform is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions or to exercise your rights, contact us at info@casadireta.com.