Privacy Policy
Last updated: June 2026
This Privacy Policy explains how CasaDireta collects, uses, stores and protects your personal data when you use our platform. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Portuguese data protection law (Lei n.º 58/2019).
1. Data Controller
CasaDireta is the data controller responsible for the personal data processed through this platform. CasaDireta operates as an information-society service (a classifieds and software platform) and is not a real estate agency. For any privacy matter you can contact us at info@casadireta.com.
2. Personal Data We Collect
We collect: (a) account data — your name and email address provided at registration; (b) listing data — property details, descriptions, prices, location and photos you submit; (c) verification documents — Certidão Permanente, Caderneta Predial and identity documents used to confirm ownership and identity; (d) communications — messages and contact requests exchanged through the platform; (e) transaction data — records relating to the €190 listing fee; and (f) technical data — IP address, device and basic usage information needed to operate and secure the service.
3. How We Use Your Data
We process your personal data to: create and manage your account; publish and manage your property listings; verify identity and property ownership to prevent fraud; enable communication between buyers and sellers; process the listing payment; provide customer and AI-assistant support; ensure the security and integrity of the platform; and comply with our legal obligations. We do not sell your personal data to third parties.
4. Legal Basis for Processing
We rely on the following legal bases under Article 6 GDPR: performance of a contract (to provide the services you request); compliance with a legal obligation (e.g. anti-fraud and fiscal record-keeping); your consent (where specifically requested, e.g. optional communications); and our legitimate interests (platform security, fraud prevention and service improvement), balanced against your rights.
5. Sharing and Service Providers
We share data only with service providers ("processors") who act on our instructions under data-processing agreements, including: cloud hosting and database infrastructure; transactional email delivery; our payment processor (for the listing fee); the provider of our AI assistant; and mapping services used to display property locations. We may also disclose data where required by law or competent authorities. We never sell your data or use it for third-party advertising.
6. International Transfers
Some of our processors may store or process data outside the European Economic Area. Where this occurs, we ensure an adequate level of protection through mechanisms recognised under GDPR, such as European Commission adequacy decisions or Standard Contractual Clauses.
7. Data Retention
We keep your personal data for as long as your account is active. After account closure we delete or anonymise your data, except where longer retention is required by law — in particular, transaction and invoicing records are retained for 10 years in accordance with Portuguese fiscal regulations. Verification documents are retained only for as long as necessary for the verification purpose and applicable legal obligations.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, access controls and restricted handling of verification documents. No method of transmission or storage is completely secure, but we work continuously to protect your information.
9. Your Rights
Under GDPR you have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at info@casadireta.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
10. Cookies
We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent you from logging in.
11. Children
The platform is intended for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions or to exercise your rights, contact us at info@casadireta.com.