Privacy Policy

1. Data Controller

Gerardus Koetje, self-employed sole trader (trabalhador independente), NIF 309729211, Vale de Prazeres, Portugal. Contact: support@inspecto.pt

2. Data We Collect

• Account info: email, name, hashed password
• Property scans: 3D LiDAR data, photos, dimensions — these may incidentally show people, vehicles, or belongings present at the time of scanning, and are personal data both for the client and for any third party who appears in them
• Inspection data: checklist answers, markers, notes, cost estimates
• Moisture readings: percentages, measurement positions
• Terms acceptance record: IP address, browser user agent, the date/time you accepted, and your typed name
• Signature image: a drawn electronic signature (saved as an image) when you accept the Terms, used as proof of acceptance on your report
• Login history: IP address and browser user agent recorded for each login, for account security
• Billing info: the inspection fee is invoiced to you directly and paid outside this website — we do not collect or store card or bank details here
• Usage analytics: basic server logs, and Google Analytics cookies (only once you accept them — see Section 10)

3. Photographing and Scanning Occupied Dwellings

A scan or inspection commissioned by the property owner or buyer may capture areas of an occupied dwelling, and may incidentally include a current occupant, tenant, or their belongings. Our legal basis for this imaging is the legitimate interest of the client commissioning the inspection (assessing the property they are buying, own, or are responsible for), balanced against the occupant's privacy — we only capture what is reasonably necessary for the inspection. An occupant or seller who appears in a scan or photo has the same GDPR rights described in Section 9 over their own image, and may contact support@inspecto.pt to exercise them.

4. Estate Agent Contact Details (data we did not get from you)

Besides our own clients, we keep a contact list of the estate agents who handle the properties we are asked to inspect. If you are one of those agents, you did not give us your details yourself, so this Section tells you what we hold and where it came from, as Article 14 GDPR requires.

Where it came from: the agency contact details published openly on property-listing portals, captured when a client asks us to import a listing they are considering. Our legal basis is legitimate interest — contacting the agent responsible for a property we are inspecting, and offering our inspection service to agencies. This is business contact data, used to reach you in your professional capacity only. We do not sell it and do not pass it to third parties. We keep an agent record while the working relationship is live and for two years after our last contact with you, after which it is deleted. You can object to this processing at any time, and ask us to correct or delete your record, by emailing support@inspecto.pt — we will act on it and stop contacting you. You may also complain to the CNPD (cnpd.pt). What we hold is:

• Agent details: your name, agency name, phone number and the address of your public profile page on the listing portal — taken from the public listing
• Email address: only where you gave it to us directly or it is published on your agency's own materials — we do not take it from listing pages
• Our own notes: a status label (new, contacted, interested, not interested, partner) and free-text notes written by an Inspecto staff member
• Correspondence: emails we sent you and any replies received, including the subject, the message body and the date sent or received
• Linked properties: the listings of yours that a client asked us to import or inspect

5. How We Use Your Data

• Provide the Inspecto service (store and display your scans)
• Issue and send invoices for the inspection and any add-ons
• Send transactional emails (password reset, receipts, important updates)
• Improve the product based on aggregated usage patterns
• Measure site usage via Google Analytics, only after you accept analytics cookies

6. Legal Basis (GDPR)

• Performance of contract (providing the service)
• Legitimate interest (security, fraud prevention; imaging occupied dwellings for the commissioning client, see Section 3; business-to-business contact with estate agents, see Section 4)
• Consent (marketing emails, and analytics cookies — both opt-in only)
• Legal obligation (tax records)

7. Data Retention

• Account data: kept while account is active, deleted 90 days after account closure
• Scans and models: deleted immediately when you delete them; 30-day soft-delete grace period
• Terms acceptance records (including the signature image) and login history: kept for the life of your account as proof of acceptance and for security; deleted when your account is deleted, same as other account data — these are database records, not rotated server logs
• Estate agent contact records and the correspondence attached to them (Section 4): kept while the working relationship is live and for 2 years after our last contact, then deleted
• Billing records: retained 10 years for tax compliance (Portuguese law)
• Server request logs (technical, not tied to an account): rotated after 30 days

8. Third Parties

• Apple (iOS App Store) — in-app purchases for legacy DIY subscriptions
• Google Analytics (Google Ireland Ltd.) — usage analytics, loaded only after you accept analytics cookies; see our Cookie Policy
• Hosting: our own servers in the EU
• We do NOT sell data to third parties or use advertising networks

9. Your Rights (GDPR)

• Right to access your data (download all data from your account settings)
• Right to rectification (edit your profile)
• Right to erasure (delete your account)
• Right to data portability (export scans as GLB, reports as PDF)
• Right to object or restrict processing
• Right to lodge a complaint with your supervisory authority — in Portugal, this is the CNPD (Comissão Nacional de Proteção de Dados, cnpd.pt); if you live outside Portugal, you may complain to your own country's supervisory authority instead

10. Cookies

Inspecto does not set any cookies of its own — login and your cookie choice are kept in your browser's local storage instead. The only cookies used are Google Analytics', and only once you accept them via the cookie banner. See our Cookie Policy for details.

11. International Transfers

Inspection and account data is stored in the EU and not transferred outside the EEA. Google Analytics, used only after consent, may process data via Google's standard contractual clauses for transfers outside the EEA.

12. Children

Inspecto is not intended for users under 16. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this policy. Material changes will be emailed to you. Minor changes will be posted with a new "Last updated" date.

14. Contact

Data protection questions: support@inspecto.pt