Transparency
A plain-English overview of what data we collect and where it flows · Last updated April 2026
This Transparency page is our plain-English commitment to being open about how Estaty works with your data. Where our Privacy Policy and GDPR page give the legal detail, this page gives you the honest summary.
What data we collect and why
| What we collect | Why |
|---|---|
| Your name and email | To create your account and communicate with you |
| Your password (hashed) | To authenticate you securely — we never see your actual password |
| Your profile details (bio, photo, phone) | To build your public-facing agent profile |
| Your listing content and photos | To power your listing pages and public profile |
| Your leads' names, emails, and phone numbers | To deliver enquiries to your dashboard so you can follow up |
| Your payment and billing details | To process your subscription — card data goes directly to Lemon Squeezy, never our servers |
| How you use the app (pages, clicks, session) | To understand what's working and what needs improvement |
| Your IP address | For security monitoring and abuse prevention |
| Cookies | To keep you logged in and remember your preferences |
What we do NOT do
- We do not sell your data or your clients' data to anyone, ever.
- We do not use your listing or lead data to train AI models.
- We do not show you ads or share data with advertising networks.
- We do not share your data with other Estaty users.
- We do not read your private content unless you ask us to (e.g. for support).
- We do not track you across other websites.
- We do not retain your data after you delete your account, beyond legal minimums.
Who can see your data
| Who | What they can see |
|---|---|
| You | Everything in your account |
| Visitors to your public profile | Your profile info and active listings only |
| Enquirers on listing pages | Your profile name and contact details (what you've chosen to show) |
| Estaty team | Account and usage data, only when needed for support or security |
| Supabase | All stored data (as our database provider, bound by DPA) |
| Vercel | Request metadata and server logs (as our hosting provider) |
| Lemon Squeezy | Your billing name and address for payment processing |
| Resend | Your email address for transactional email delivery |
| Anthropic | Listing details you submit for AI description generation (no personal data) |
| Law enforcement | Only when legally compelled with a valid court order — we will notify you if permitted |
Your lead data
When someone fills in an enquiry form on your Estaty public profile, their name, email, phone, and message are stored in your dashboard as a lead. You are the data controller of this lead data. We store and display it on your behalf as a data processor.
You are responsible for: handling leads in compliance with applicable data protection laws; not using lead data for purposes other than following up on the enquiry; and deleting lead data you no longer need.
AI and your data
When you use the AI description generator, the listing details you've entered (property type, location, specs, notes) are sent to Anthropic's API to generate a description. We do not send personal data (names, emails, phone numbers) to Anthropic. Anthropic does not use API inputs to train its models.
Government and law enforcement requests
We have not received any government requests for user data to date. If we ever receive such a request, our policy is to:
- 1.Review it carefully and challenge any requests we believe are overbroad or unlawful.
- 2.Disclose only the minimum data required by the legal obligation.
- 3.Notify affected users as soon as we are legally permitted to do so.
Keeping this page current
We commit to keeping this Transparency page up to date. If our data practices change materially — for example, if we add a new sub-processor or begin a new type of data collection — we will update this page and notify you by email.
Questions? Email us at hello@estaty.io. We read every message.