Privacy & cookies policy

Last updated 30 October 2026.

1. Who is responsible for your data

The data controller is [legal name — not set yet], trading as LetsCloseIt, NIF [NIF — not set yet], [address — not set yet]. For anything about your data, write to hello@letscloseit.com.

2. What we collect

• Your account: your name, email address and password (stored only in encrypted, one-way form, so nobody can read it).
• If you are buying a property: the purchase details your agent enters (property name and area, dates, status), the steps and tasks, your ticks, notes and comments, the payment method you choose for the purchase (the type only — never card or bank numbers), and the professionals you choose for your team.
• If you are an agent, agency or other professional: your profile (business name, bio, photo, languages, areas, registration number, website, public email and phone), your call availability, your acceptance of our terms, and your subscription status.
• Client profiles kept by agents: an agent can record a client's name, contact details, what they're looking for (area, budget, type of property) and the properties proposed and visited. Only that agent can see them, except that a client with a LetsCloseIt account (same email) sees the properties the agent sent them, and their own answers. The agent is responsible for having the client's agreement to keep these notes.
• Calls and messages: when you book an intro call or send a message to a listed professional, the name, email, phone number, time zone and note you give, and the booking details.
• Payments: professionals pay their listing through Stripe. Card details go directly to Stripe; we never see or store them. We keep a record of the subscription and its status.
• Technical data: our hosting providers keep short-lived server logs (such as IP address, browser type and the time of a request) to run the service securely.

3. Why we use it, and on what legal basis

• To provide LetsCloseIt — your account, the purchase portal, listings, calls, messages and account emails. Basis: performing our contract with you (GDPR art. 6(1)(b)).
• To bill professionals and keep accounting records. Basis: contract and legal obligation (art. 6(1)(b) and (c)).
• To keep the service secure and prevent misuse, including looking into reports about listings. Basis: our legitimate interest in a safe, trustworthy platform (art. 6(1)(f)).
• To keep a record of terms accepted, so we can show who agreed to what. Basis: legitimate interest and legal obligation.

We do not sell your data and we do not use it for advertising. We only send news and offers if you said yes to them (an unticked box at sign-up, or the switch in your email settings), and you can change your mind at any time. We do not make automated decisions about you.

4. Who sees your data

• People in your purchase: the agent who invited you and any co-buyers on the same purchase see that purchase's details. Nobody else does.
• Professionals you invite onto a step: if you invite a professional from your team onto a step of your purchase (for example your surveyor), and tick the box to agree, they see your name and email (and your phone, if you add it), the property's name and area, and the dates, status, details and messages of the steps you share with them. A lawyer sees the legal checks, the reservation, the contract terms (such as price, deposit, date and special clauses) and the notary signing; a gestor sees the NIE and the taxes and registration steps; plus any other steps you choose. They don't see the other steps, and contracts and reports are never uploaded to LetsCloseIt. Their quote is visible only to you and them, not to your agent. You can remove their access at any time.
• Professionals you contact: when you book a call or send a message, the professional receives the details you give. They use them as an independent controller, under their own privacy policy.
• Public profiles: professionals' listings are public while their subscription is active.
• Service providers who process data for us under contract: Supabase (database, sign-in and file storage, hosted in the EU — Ireland); Vercel (website hosting); Resend (sending account emails); Stripe (payments — Stripe also acts as an independent controller for payment data). Some of these providers are based in, or may process data in, the United States. Where that happens, transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
• Translation: the "Translate" button on messages uses the translator built into your browser, which works on your device. If your browser doesn't have one, the button opens the message in Google Translate, but only when you click it.
• Authorities, only when the law requires it.

5. How long we keep it

• Account and purchase data: while your account is open. If you ask us to delete your account, we delete it within 30 days.
• Billing and accounting records: for as long as Spanish tax and commercial law requires (generally up to 6 years).
• Records of accepted terms: for as long as they may be needed to resolve a claim.
• Server logs: for a short period set by our hosting providers.
• If you unsubscribe, we keep your email address on a "do not email" list, so we can respect your choice.

6. Emails from us

We email you about your account and your purchase (for example new messages, dates and changes), and, only if you agreed, news and offers. Every email has an unsubscribe link that works without signing in, and you can choose which emails you get in your dashboard. Once you unsubscribe, we stop sending you those emails.

7. Your rights

You can ask us to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy in a portable format. Write to hello@letscloseit.com from the email address on your account. We reply within one month. If you are unhappy with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

8. Cookies

LetsCloseIt uses only strictly necessary cookies: the ones that keep you signed in securely. They are set by our sign-in system (Supabase) and are deleted when you sign out or when your session expires. Because they are essential for the service you ask for, Spanish law (LSSI art. 22.2) does not require your consent for them, and they are why there is no cookie banner.

We do not use analytics, advertising or tracking cookies. If that ever changes, we will update this policy and ask for your consent first.

9. Age

LetsCloseIt is for adults. You must be 18 or over to create an account.

10. Changes

If we change this policy, we will update the date at the top, and tell account holders about important changes by email.

Draft pending legal review. Questions: hello@letscloseit.com