Privacy Policy

EST8 (est8.app) is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we protect it. By using EST8, you agree to the practices described here.

1. What We Collect

We collect the following categories of information:

• Account information — your name, email address, and password when you register.
• Profile & business data — agency name, contacts, property listings, and transaction records you enter into EST8.
• Usage data — pages visited, features used, session duration, and actions performed within the app, collected automatically.
• Cookies & local storage — small files placed on your device to keep you signed in and remember your preferences.
• Payment information — processed securely by Stripe. We never store your full card number.

2. How We Use Your Data

We use your information to:

• Provide, operate, and improve the EST8 platform.
• Personalise your experience and surface relevant features.
• Send transactional emails (account confirmations, invoices, password resets).
• Send product updates and announcements — you can unsubscribe at any time.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

3. Sharing Your Data

We do not sell your data. We share your information only with:

• Service providers — infrastructure, hosting, email delivery, and payment processing partners who are contractually bound to protect your data.
• Law enforcement — when required by applicable law or valid legal process.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you beforehand.

4. Data Retention

We retain your account data for as long as your account is active. After account deletion, most personal data is purged within 30 days. Aggregated, anonymised analytics data may be retained indefinitely. Backups may persist for up to 90 days after deletion.

5. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights under the GDPR:

• Access — request a copy of all personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data (“right to be forgotten”).
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, email privacy@est8.app. We will respond within 30 days.

6. Cookies

We use cookies to keep you signed in, remember your preferences, and understand how people use EST8. You can control cookie behaviour in your browser settings. For full details, see our Cookie Policy.

7. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage, and access controls to protect your data. No system is 100% secure; if you suspect unauthorised access to your account, contact us immediately.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The “Last updated” date at the top of this page always reflects the most recent version.

9. Contact

For privacy-related questions or requests, contact our Data Protection team at privacy@est8.app.