Your data is yours.

This is a courtesy translation. The Spanish version of this page is the one that governs. /privacidad

Zavaluo estimates what a property is worth and publishes sale and rental listings in Buenos Aires. That needs some data. This page explains which, what for, how long we keep it and what we never do with it. It is written to be read, not to cover us.

Four commitments

We do not sell or pass on your personal data. To anyone. Not to estate agencies, not to banks, not to advertisers.
We do not reuse it for anything else. What you give us for a valuation is used for that valuation; what you give us to publish, to publish. That is all.
We do not train models on your personal data. Our model learns from property prices and characteristics, never from names, emails or phone numbers.
No agency calls you because you used us. There are no forms here that get sold as “leads”.

Who is responsible

Zavaluo (“we”) is the controller of the data described here, based in the Autonomous City of Buenos Aires, Argentina. For anything about your data, write to us from the contact page choosing the “Privacy” topic.

What data we handle, and what for

If you ask for a valuation

The address, the property type and whatever characteristics you enter (square metres, rooms, floor, age, service charges). We use them to work out the estimate and to show you the comparables. We do not ask for your name or your email to value a property. We keep the query in aggregate to improve the model, with nothing that identifies you.

If you publish a property

What goes in the listing is public by definition: photos, description, characteristics, price and barrio. You also give us an email and, if you want people to reach you on WhatsApp, a phone number. We use the email to confirm the listing, to tell you how your barrio is moving and to forward enquiries. The phone number is only shown to people enquiring about your listing and never appears in the API or in exports. When you take the listing down we ask whether it sold and for how much: answering is voluntary, and the answer is kept without your identity.

If you write to us

Your name, your email and the message, so we can reply. Nothing else.

If you ask for API access

Name, email, company and the intended use, so we can assess the request, issue the key and invoice. API use is logged per key (number of calls and endpoints) to apply the plan's quotas.

If you create an account

The email only, for passwordless sign-in. Authentication is provided by Supabase; we neither see nor store passwords.

If you ask to be contacted by agencies

On the valuation page you can ask to be introduced to estate agencies in your barrio. It only happens if you ask for it. We keep your name, email, phone number if you leave one, the property details and the range we showed you, together with the exact wording you agreed to.

We offer the introduction to agencies without your details: they see the barrio, the property type, the floor area and the range, and nothing more. Your name, your address, your email and your phone number are shared only with the agency that accepts the introduction, and we email you to say which one it was. We pick agencies with active listings in your barrio; they do not pay to appear, or to appear first.

You can stop it whenever you like with the link in every email: we withdraw the pending introductions so nobody else receives your details. Agencies that already accepted will still have them, and you can ask them directly to delete them. We charge the agency for an accepted introduction; we never charge you anything and we do not sell your data to anyone else.

Enquiries about a listing

When you enquire about a listing, we handle the enquiry: we keep your name, your email, your phone number if you leave one, the listing or barrio you are asking about, the budget you state and whatever you write in the message, together with the exact wording you agreed to.

Before anyone accepts, whoever can answer you receives the enquiry without your details: the barrio, the property type, the budget band and your message with any phone numbers, emails, links or handles you wrote redacted. Your name, your email and your phone number are shared only with whoever accepts the enquiry, and we email you to say who it was. If the listing is published by an agency we can contact, the enquiry goes to them first; if not, it goes out as a request to agencies with active listings in that barrio, and we tell you so in those words. We never promise that the advertiser will call you when there is nobody to pass the enquiry to.

You can cancel it whenever you like with the link in any email; we withdraw the enquiries nobody has taken yet. We charge the agency for an accepted enquiry; we never charge you anything and we do not sell your data to anyone. We count how many enquiries there are per barrio in order to publish aggregate demand, with none of your data in it. If you press the button in the email, we also set up an alert with your enquiry’s criteria; you can stop it with one click.

Listings from public portals

So that a valuation has real comparables, we index listings that are already public on property portals and show them with a link to the original publication. From a listing we take characteristics, price, photos and the agency or developer that publishes it. We do not collect or show phone numbers or emails of private individuals publishing on their own on other sites. If you published a property on another portal and do not want it to appear on Zavaluo, write to us and we will take it down within 72 hours.

Cookies and measurement

We use the cookies strictly necessary for the site to work (keeping you signed in, for example). We do not use advertising cookies and we do not sell data to anyone.

To understand which pages are used and where the site fails we load Google Tag Manager, which in turn starts our Google visit measurement. That measurement uses first-party cookies and records the page visited, the referrer, the device, the browser and an IP address that Google truncates before storing it. We do not send it your email, your address or your property details, and we do not use it for personalised advertising or to build audiences.

You can block it without losing any feature: the browser's “Do Not Track” setting or cookie blocking is enough, as is a blocking extension, or the Google Analytics opt-out add-on. The site works just the same.

Who we share data with

Only the providers we need in order to operate, and only what is indispensable for their function:

Supabase (database, photo storage and authentication), São Paulo region.
Vercel (site hosting).
Resend (transactional email: confirmations, replies, notifications).
Anthropic (automatic reading of listing text to extract characteristics). The listing text is sent, never contact details.
Google (Tag Manager and visit measurement). Receives browsing data from the site, never your email or your property details.
Estate agencies, only if you ask to be contacted and only the one that accepts the introduction or the enquiry: name, email, phone number and the details of the property you entered or are asking about.

None of them may use your data for their own purposes. We may share data where a competent authority requires it by law, and in that case only what is strictly required.

How long we keep it

Published listings: while they are active and for up to 24 months after they come down, for the price history. Photos are deleted 90 days after they come down.
The publisher's email and phone number: while the listing is active and for 90 days more; then they are deleted.
Contact messages: 12 months.
API access requests: while the key is active and for 12 months more, for tax obligations.
Requests to be contacted by agencies: 24 months from the last introduction, so we can answer a complaint about who received your details and when.
Enquiries about a listing: 24 months from the enquiry, for the same reason. The aggregate demand per barrio that we publish carries no personal data and does not expire.
Accounts: until you delete it. You can ask whenever you like.

Your rights

You can ask for access to the data we hold about you, correct it, update it or delete it, and object to a processing. We answer within 10 calendar days. Write to us from contact with the “Privacy” topic.

The Agencia de Acceso a la Información Pública, the supervisory authority for Argentina's Personal Data Protection Act 25.326, is empowered to handle complaints and claims brought in relation to breaches of personal data protection rules. You can contact it at argentina.gob.ar/aaip.

Security

Data travels encrypted (HTTPS) and is stored on infrastructure with restricted, logged access. A publisher's contact details are never exposed through the public API or the site's views; they are only used server-side to forward enquiries.

Minors

Zavaluo is not aimed at people under 18 and we do not knowingly collect data from minors.

Changes to this policy

If anything material changes we say so here with the date of the update and, if you have an active listing or an account, by email as well. The version in force is always the one published on this page.