Privacy Policy

Draft — pending Portuguese legal review. This page reflects our intent and current implementation, but is not a substitute for a Privacy Policy reviewed by qualified counsel. We will replace this with the reviewed text before public launch.

Who we are

Lisbon Scout (the "Service") is a rental-listing aggregator and marketplace for the Lisbon metropolitan area. The legal entity operating the Service will be identified here once business formation completes.

What we collect

• Account data: email address, optional display name, optional recovery email, hashed session tokens. For realtor and affiliate accounts only: phone number, NIF (tax ID), business name.
• Behavioural data (anonymous): page views, referrers, browser, OS, device type, country (IP-derived; the IP itself is not stored). Tracked via self-hosted GoatCounter; no cookies, no behavioural profiling.
• Listing data (realtor accounts): the listing details and photos you submit. Photo EXIF metadata (including GPS coordinates) is stripped on upload.
• Audit data: hashed IP address on session creation and admin actions, for fraud and abuse triage.

What we do with it

• Service delivery: showing you listings, processing submissions, sending sign-in links and decision notifications.
• Anti-abuse: rate-limiting and fraud signals based on hashed IPs.
• Aggregate stats: traffic and benchmarks, never tied to individual users.

Third parties

• Resend: transactional email (sign-in links, decision notifications). EU data residency.
• Stripe (when activated): featured-listing payments and affiliate payouts. EU processing infrastructure.
• Twilio Verify (when activated): one-shot SMS code for phone-number verification at realtor/affiliate onboarding. EU-region project.
• Autoridade Tributária (when activated): NIF validation for realtor accounts.
• Imovirtual (when partnership formalises): some listings are sourced via Imovirtual's official feed, with referral clicks tracked for partner accounting.

We do not use Google Analytics, Google AdSense, or any US-based behavioural-tracking service. EU data residency is a hard requirement of every third-party processor we use.

Your rights

• Access: request an export of your account data.
• Rectification: edit your profile in your account settings.
• Erasure: request deletion. We hold the request for 14 days (cancellable by you), then hard-delete personal data. Some financial / audit records persist in anonymised form (your user_id is nulled) for legal-obligation reasons.
• Portability: data export in JSON format (manual request to support until the self-serve UI is built).
• Objection: contact us to object to specific processing activities.

Retention

Active account data is retained while your account is active and for 14 days after a deletion request (the cooling-off window). Anonymous analytics are retained indefinitely. Admin audit log entries are retained indefinitely (legal requirement).

Contact

Data requests and questions: data@your-domain.com (placeholder pending domain registration).

Last updated: 2026-05-02 (draft, pre-launch)