Privacy Policy

1. Introduction

The Landeur ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Services").

We comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when using our Services:

• Account Information: Name, email address, password
• Profile Information: Investment preferences, location, membership tier
• Payment Information: Billing details, payment method (processed securely by third-party payment processors)
• Communication Data: Messages, support requests, feedback

2.2 Automatically Collected Information

We automatically collect certain information when you access our Services:

• Usage Data: Pages viewed, features used, search queries, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: See Section 5 for details

2.3 Third-Party Data

We may receive information from:

• Public Records: Property data, auction listings, tax records
• Authentication Providers: Social login services (if enabled)
• Analytics Providers: Vercel Analytics and similar services

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide property analysis, scoring, and recommendations
• Account Management: Create and manage your account, verify identity
• Personalization: Customize your experience based on preferences and usage
• Communication: Send updates, newsletters, marketing (with consent)
• Payment Processing: Process transactions and manage subscriptions
• Analytics: Improve our Services, understand usage patterns
• Security: Detect fraud, prevent abuse, ensure platform security
• Legal Compliance: Comply with laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: You have given explicit consent (e.g., marketing emails)
• Contract Performance: Processing is necessary to provide our Services
• Legal Obligation: Required to comply with legal requirements
• Legitimate Interests: For business purposes that don't override your rights

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Understand how you use our Services (Vercel Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may affect functionality.

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

• Hosting: Vercel (infrastructure and deployment)
• Database: Supabase (data storage and authentication)
• Analytics: Vercel Analytics
• Email: Email service providers (for transactional emails)

6.2 Legal Requirements

We may disclose information when required by law, court order, or government request.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

6.4 With Your Consent

We may share information for other purposes with your explicit consent.

7. Your Privacy Rights

7.1 GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

• Know: What personal information we collect and how we use it
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Non-Discrimination: Equal service regardless of privacy rights exercise

7.3 How to Exercise Your Rights

To exercise your rights, contact us at: privacy@thelandeur.com

We will respond within 30 days (GDPR) or 45 days (CCPA).

8. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS/SSL for data transmission
• Authentication: Secure password hashing and email verification
• Access Controls: Limited employee access to personal data
• Regular Audits: Security assessments and vulnerability testing

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal data for as long as:

• Your account is active
• Needed to provide our Services
• Required by law or for legitimate business purposes

After deletion, some data may remain in backups for up to 90 days before permanent deletion.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs)
• Privacy Shield Framework (where applicable)
• Service provider certifications (ISO 27001, SOC 2)

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies separately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of our Services after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

15. Supervisory Authority

If you are in the EU/EEA and have concerns about how we handle your data, you have the right to lodge a complaint with your local data protection authority.