Privacy Policy

Welcome to StatR, the AI-powered real estate platform that helps international buyers find suitable real estate projects in Cyprus, Greece, and Israel. This Privacy Policy explains how STATR REAL ESTATE AI LTD (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our platform at https://www.statr.co/en and our related services.

Our platform uses advanced AI technology, including our proprietary algorithm, that helps international buyers find suitable real estate projects in Cyprus, Greece, and Israel. The platform uses AI conversations, buyer profiling, property matching, financing context, ROI analysis, and lead qualification to connect users with relevant real estate developers. We are committed to protecting your privacy while providing innovative solutions.

Important: This platform is not intended for children under 18. We do not knowingly collect personal data from minors.

Data Controller: STATR REAL ESTATE AI LTD
Registration: Cyprus Company HE 492105
Address: Spyrou Kyprianou 41-43, Larnaka, Cyprus
Email: info@statr.co
Telephone: +357 97499995

As a Cyprus-based company operating in the EU, we comply with the General Data Protection Regulation (GDPR) and Cyprus data protection laws.

3.1 Information you provide directly

For private users:

• Account information: name, email address, phone number, country of residence, nationality
• Assessment data: income range, current salary, user score generated by the platform
• Preference settings: property preferences, location preferences
• Communication data: messages, feedback, and user profile generated from AI conversations and interactions through the platform

For developers:

• Company information: company details and contact details, size, location, contact details
• Property information: current owner, contact details, financial information
• Assessment selections: chosen assessment criteria for specific properties

3.2 Information we collect automatically

• Technical data: IP address, browser type, device information, operating system
• Usage data: pages visited, features used, time spent on platform, click patterns
• Performance data: platform performance metrics, error logs, response times
• Cookie data: as described in our Cookies Policy

3.3 Information from third parties

Public sources: publicly available professional information to enrich profiles and collect information such as NewsAPI, AirROI, and the OpenAI API.

4.1 Legal basis for processing

We process your personal data based on the following legal grounds:

Legitimate interest (primary basis):

• Providing matching services
• Improving platform functionality and user experience
• Ensuring platform security and preventing fraud
• Conducting business analytics and research

Contract performance:

• Creating and managing your account
• Delivering requested services
• Processing payments and billing

Consent:

• Marketing communications (when you opt in)
• Non-essential cookies and analytics
• Sharing your profile with developers/sellers
• Special category data processing where required

Legal obligation:

• Compliance with applicable laws and regulations
• Tax and accounting requirements
• Responding to legal requests

4.2 Specific uses

For all users:

• Account creation and authentication
• Platform functionality and feature provision
• Customer support and communication
• Security monitoring and fraud prevention
• Service improvement and development
• Legal compliance and dispute resolution

For individual users:

• Creating and maintaining your profile
• Generating our proprietary algorithm compatibility scores/matches
• Matching you with relevant property opportunities
• Facilitating communication with potential developers/sellers
• Tracking inquiries status and outcomes

For developers:

• Sourcing and presenting matched properties
• Facilitating property and buyer evaluation and selection
• Providing analytics and insights
• CRM integration and data synchronization
• Reporting on matched outcomes and success rates

5.1 How our technology works

Our proprietary technology analyzes multiple dimensions to create precise property matches:

• Property information: project information, project brochures, project images, floor plans, unit availability, unit prices, payment plans, amenities, construction status, project location, sales contact details, project status, permits, description, and social media links
• Buyer details: income range, location preferences, buyer intent, budget, financing needs, purchase timeline, type and size of the property

5.2 Algorithmic decision-making rights

Under GDPR Article 22, you have rights regarding automated decision-making:

• Right to review: you can request human review of any automated decisions affecting you
• Bias prevention: we regularly audit our algorithms for fairness and implement bias mitigation measures

5.3 Technology transparency

• Our matching scores are based on objective criteria and measurable factors
• There is reasoning why certain matches are suggested
• You can adjust your preferences to influence matching outcomes
• We regularly update and improve our algorithms based on feedback and performance data

6.1 When we share data

With developers (users only):

• User name
• Email address
• Phone number
• Project details
• User score
• Request details

Please note that by creating and maintaining a profile on our platform, you acknowledge that we may share your details with developers who may have suitable opportunities that align with your profile and preferences in order to provide our services. While we will endeavor to share your information only with developers offering relevant opportunities, you expressly consent to such sharing as part of our matching services. You may withdraw this consent at any time by deleting your profile and/or account.

With service providers:

• Cloud hosting and infrastructure providers
• Payment processing companies
• Email and communication service providers
• Analytics and performance monitoring tools
• Security and fraud prevention services
• Assessment and testing platforms

With partners:

• Integrated tracking systems
• Only as necessary for platform functionality

Legal requirements:

• When required by law, regulation, or court order
• To protect our rights, property, or safety
• To prevent fraud or security threats
• In connection with legal proceedings

Business transfers:

• In case of merger, acquisition, or sale of business assets
• Data would be transferred under equivalent privacy protections

6.2 Data sharing controls

For users:

• Uploaded materials: all content you provide may be shared with developers.
• Communications: by registering on our platform, you consent to receive communications from us and from developers on updates and related matters.
• Your rights: you may ask us to refrain from future communications at any time by deleting/removing your profile, though you may continue to receive essential service notifications (as may be applicable).

For developers:

• User data is shared only for legitimate purposes
• Access is restricted to authorized personnel
• Usage is monitored and logged for compliance
• Confidentiality obligations apply to all data received

7.1 International transfers

Our platform may transfer personal data outside the European Economic Area (EEA) to:

• Service providers: cloud hosting, analytics, and support services
• Global developers: when a user is looking for property in another jurisdiction from where he/she is located
• Partners: when partners are located in other jurisdictions, i.e. for database storage, authentication services, CRM, etc.

7.2 Transfer safeguards

All international transfers are protected (as applicable) by:

• Adequacy decisions: transfers to countries with EU-approved data protection levels
• Standard contractual clauses: EU-approved contract terms ensuring data protection
• Binding corporate rules: for multinational corporate partners
• Consent: your explicit consent for specific transfer purposes when required

7.3 Data localization

• Primary data processing occurs within the EU
• Cyprus serves as our main data processing location
• Backup and disaster recovery may involve international locations
• You can request information about specific data locations

8.1 Retention periods

Active accounts:

• Profile data: for subscribers and developers, all data is retained while the account is active plus 12 months after last login; for all users paying for a subscription, all data is retained while the account is active plus 5 years after last login.
• Matching results: retained for 2 years or until account deletion
• Communication data: retained for 2 years
• Usage and analytics data: retained for 2 years

Inactive accounts:

• Automatic deletion after 24 months of inactivity, subject to the retention period for all paying users listed above
• Warning notifications sent before deletion
• Option to reactivate account during warning period

Specific retention rules:

• Financial records: 7 years
• Legal disputes: 6 years
• Security incidents: 1 year for investigation purposes
• Marketing data: until consent withdrawal

8.2 Deletion process

When data is deleted:

• It is anonymized and removed from active systems within 30 days
• Backup systems cleared of any data that has not been anonymized within 90 days
• Anonymized analytics data may be retained
• Confirmation provided upon request

Under GDPR and Cyprus data protection law(s), you have the following rights:

9.1 Access rights

• Right to access: request a copy of all personal data we hold about you
• Data portability: receive your data in a structured, machine-readable format
• Processing information: learn how and why we process your personal data

9.2 Control rights

• Right to rectification: correct inaccurate or incomplete personal data
• Right to erasure: request deletion of your personal data (“right to be forgotten”)
• Right to restrict processing: limit how we use your personal data
• Right to object: object to processing based on legitimate interests

9.3 Consent rights

• Consent withdrawal: withdraw consent for any consent-based processing
• Marketing opt-out: stop receiving marketing communications at any time
• Profiling objection: object to automated profiling and decision-making

9.4 How to exercise rights

• Online: use the privacy controls in your account dashboard
• Email: send requests to info@statr.co
• Response time: we respond within 30 days of receiving your request
• Identity verification: we may request verification to protect your privacy
• No cost: rights exercises are generally free of charge unless these are of an excessive and abusive nature, whereby we reserve the right to charge a reasonable fee

9.5 Right to complain

If you're not satisfied with our response:

• Cyprus: contact the Commissioner for Personal Data Protection
• EU/EEA: contact your local data protection authority
• Direct contact: reach out to our Privacy Officer first

10.1 Types of cookies we use

Essential cookies (always active):

• Account authentication and session management
• Platform functionality and security features
• Load balancing and performance optimization

Analytics cookies (with consent):

• Usage statistics and platform performance monitoring
• User behavior analysis for service improvement
• A/B testing and feature optimization

Marketing cookies (with consent):

• Personalized content and recommendations
• Social media integration and sharing
• Advertising effectiveness measurement

10.2 Third-party cookies

Our platform may include cookies from:

• Google Analytics (website analytics)
• Payment processors (transaction security)
• Customer support tools (help desk functionality)

10.3 Managing cookies

• Browser settings: configure cookie preferences in your browser
• Platform settings: use our cookie preference center
• Opt-out links: available for third-party analytics services
• Impact warning: disabling essential cookies may limit platform functionality

For full details, see our Cookies Policy.

11.1 Technical safeguards

Encryption:

• All data encrypted in transit using TLS 1.3
• Sensitive data encrypted at rest using AES-256
• End-to-end encryption for sensitive communications

Access controls:

• Multi-factor authentication for all accounts
• Role-based access controls for internal systems
• Regular access reviews and permission audits

Infrastructure security:

• Secure cloud hosting with enterprise-grade protection
• Regular security assessments and penetration testing
• Automated monitoring and threat detection
• Secure development practices and code reviews

11.2 Organizational safeguards

Staff training:

• Regular privacy and security training for all employees
• Confidentiality agreements and data handling procedures
• Clear incident response and escalation protocols

Vendor management:

• Due diligence assessments
• Data processing agreements
• Vendor audits as may be required

11.3 Your security responsibilities

• Use strong, unique passwords for your account
• Enable two-factor authentication when available
• Keep your contact information current
• Report suspicious activity immediately
• Protect your login credentials and access devices

Our platform is not intended for individuals under 18 years of age.

We do not knowingly:

• Collect personal data from children under 18
• Target marketing or advertising to minors
• Allow account creation by users under 18
• Process data from educational institutions for minors

If we become aware that we have collected data from a child under 18:

• We will delete the data immediately
• We will not process or share such data
• We will notify relevant parties if required by law

Parents and guardians: if you believe your child has provided personal data to us, please contact info@statr.co immediately.

13.1 Policy changes

We may update this Privacy Policy to reflect:

• Changes in our data processing activities
• New features or services
• Legal or regulatory requirements
• Industry best practices and standards

13.2 Notification process

Material changes:

• Email notification to all registered users
• Prominent notice on the platform
• 30 days notice before changes take effect
• Option to withdraw consent or close account

Minor updates:

• Updated “Last Modified” date
• Notification in platform dashboard
• Changes effective immediately upon posting

13.3 Version control

• Previous versions available upon request
• Change log maintained for transparency
• Clear indication of what has changed
• Date stamps for all modifications

14.1 Privacy questions and requests

General privacy inquiries:
Email: info@statr.co
Response time: within 5 business days
Address: Spyrou Kyprianou 41-43, Larnaca, Cyprus

14.2 Technical support

Platform support:
Email: info@statr.co
Response time: within 48 hours

Emergency security issues:
Email: main@statr.co
Response time: within 48 hours

14.3 Business contact

General inquiries:
Email: info@statr.co
Telephone: +357 97499995
Website: https://www.statr.co/en
Mailing address: Spyrou Kyprianou 41-43, Larnaca, Cyprus