Privacy Policy

1. Data controller

The controller is the entity operating Licito (licito.pt). To exercise your rights or raise a privacy question, use the contacts shown on licito.pt.

2. What data we collect

Purchase data: the email address linked to the payment (collected at checkout) and, if you create an account, your sign-in email.

Payment data: processed directly by Stripe. Licito does not collect or store your card details.

Usage data: technical and statistical browsing information (pages visited, device) collected by analytics and monitoring tools.

Generated content: the reports you buy and the alerts and listings you save.

3. Purposes and legal bases

Providing the service and generating the purchased report — performance of the contract.

Delivering access to the report and purchase-related communications — performance of the contract.

Security, fraud prevention and service improvement — legitimate interest.

Usage statistics and non-essential cookies — consent.

4. Processors and third parties

We use providers that process data on our behalf: Stripe (payments), Supabase (database and authentication), Cloudflare (hosting, CDN and report storage), Anthropic (AI report generation over the property data), and analytics/monitoring tools (Google Analytics, New Relic).

We use Cloudflare Turnstile to verify that bid-refresh requests come from a real user rather than automated scripts, protecting the service from abuse. The widget runs in invisible mode, with no interaction. Cloudflare's Turnstile Privacy Policy Addendum applies: https://www.cloudflare.com/application-services/terms/turnstile-privacy-policy-addendum/

Market reference data comes from public sources (e.g. Statistics Portugal, INE). Auction listings come from the public sources shown on the platform.

5. International transfers

Some providers may process data outside the European Economic Area. In those cases we ensure appropriate safeguards (e.g. standard contractual clauses).

6. Retention

We keep data only for as long as needed for the purposes described and to meet legal obligations (e.g. invoicing). Reports stay linked to your email so you can access them.

7. Your rights

You have the right to access, rectify, erase, restrict and object to processing, and to data portability. You may withdraw consent at any time, without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

8. Cookies and similar technologies

We use cookies essential to operation and, with your consent, analytics cookies. You can manage your preferences in your browser.

9. Security

We apply technical and organisational measures to protect your data, including database access control and encryption in transit.

10. Changes

This Policy may be updated. The version in force is the one published on this page, with its date.