Privacy policy

This is a convenience translation. If there is any difference between versions, the Spanish version prevails: Política de privacidad (español).

Here we explain which personal data we process, for what purpose, who we share it with and how you can exercise your rights, in accordance with Ecuador's Organic Law on Personal Data Protection (Ley Orgánica de Protección de Datos Personales, LOPDP). If anything is unclear, write to us at info@royaltor360.com.

1. Data controller

The controller is Royaltor360, domiciled in Cuenca, Ecuador. Contact: info@royaltor360.com.

For now we have not appointed a data protection officer. Any request is handled at the email address above.

2. What data we process and where it comes from

We receive all data directly from you, when you use the site:

• Demo booking (/en/agendar and campaign pages): name, phone or WhatsApp, email, city, country, number of lots in your project, the time slot you choose, the page you came from and, if present, the campaign parameters of the link (UTM). Also whether you agree to receive news.
• Chat with Amaia (automated assistant): the messages you write, your name if you share it, the type of device (computer, tablet or phone) and your browser's time zone.
• Forms in project tours: name, email, phone, the lot of interest and your message.
• Technical data: to limit abuse of the chat we store a code derived from your IP address (not the IP itself) for a short time. The browser stores local data to remember the state of the chat.

We do not ask for sensitive data or data about minors. If you write long numbers in the chat (for example an ID number or an account number), they are hidden before being stored.

3. What we use it for

• Booking, confirming, rescheduling and holding the demo you requested.
• Answering your questions in the chat and, if you book, letting our team see the conversation to serve you better.
• Preparing a proposal for your project and following up commercially on your request.
• Sending you news by email, only if you agreed to it.
• Measuring the performance of our campaigns and the site.
• Preventing abuse and keeping the service secure.

We do not use your data for purposes other than these without informing you first.

4. Legal basis

• Your consent, when you submit a form, write in the chat or agree to receive news.
• Pre-contractual measures that you request, such as booking the demo and preparing a proposal.
• Legitimate interest in the security of the site and the prevention of abuse.
• Legal obligations, when a competent authority requires it.

5. How we process it

The data is stored in our cloud database, with access restricted by user and role. We process it to collect it, store it, consult it, use it for the purposes above, communicate it to the providers in section 7 and delete it when it is no longer needed.

6. How long we keep it

• Booked demos: while the business relationship or the follow-up of your request exists, and until you request its deletion.
• Chat conversations: only those with at least two messages from you are stored. They are deleted after 90 days without activity, unless you book or leave your details; in that case they are kept together with your request.
• Chat anti-abuse code: deleted within a few days.
• Email news: until you unsubscribe.

7. Who we share it with (processors and international transfers)

We do not sell or rent your data. We share it only with providers we need to deliver the service, who act as data processors. Several are outside Ecuador, so there is an international transfer of data:

• Supabase: database and cloud hosting.
• Artificial intelligence provider (Google models): generates the chat responses from your messages.
• Resend: sending emails.
• Meta Platforms (Meta Pixel and Conversions API): measurement of advertising campaigns.
• HubSpot: internal commercial follow-up when we manually qualify a demo, and its visit measurement code on royaltor360.com (it is not loaded on project sites or dashboards).
• 3D rendering engine: hosting and display of some 360° tours shown within the site.
• Google Fonts: the site's typefaces (your browser connects to its servers).
• Esri (ArcGIS) and CARTO: maps and location routes of the projects on the site (your browser connects to their servers when displaying them).
• Google Maps: location card within the chat (your browser connects to its servers when displaying it).

These providers process the data under their own terms of service and privacy policies. We may also communicate data to competent authorities when the law requires it.

8. Our clients' projects

The tours and CRM of each project (for example, project-name.royaltor360.com) are used by a real estate developer. If you leave your details in a project's tour, the controller of that data is that developer, and Royaltor360 acts as a processor that hosts and operates the platform. You can exercise your rights before the developer or write to us and we will forward your request to them.

9. Automated decisions

We do not make decisions with legal effects on you in an automated way, nor do we create profiles for those purposes. The only automated thing is this: if the chat detects offensive language, attempts to manipulate it or insistence on private data, it pauses the conversation from that connection for 30 to 60 minutes. You can contact us by email at any time, and a person on the team can reactivate the chat.

10. What happens if you do not provide your data or it is incorrect

The data marked as required is necessary to book the demo or answer your inquiry. If you do not provide it, we will not be able to do so. If it is incorrect, we may not be able to contact you; you can correct it at any time.

11. Your rights

You can exercise at any time your rights of access, rectification and updating, deletion, objection, annulment, restriction of processing, portability and not to be subject to decisions based solely on automated processing. You can also withdraw your consent whenever you want, without retroactive effect.

Write to us at info@royaltor360.com stating which right you want to exercise and how to identify you. We will respond within the time limits set by the LOPDP. For portability we deliver your data in a structured and commonly used format. To unsubscribe from the news, the link in each email is enough.

12. Inquiries and complaints

If you are not satisfied with how we process your data or with any response from us, write to us at info@royaltor360.com with the details and we will review it personally. This does not limit the rights granted to you by the LOPDP.

13. Cookies and local storage

We use the browser's local storage to remember the state of the chat and your preferences. Meta Pixel may create cookies to measure campaigns. You can delete or block cookies from your browser settings; the site will keep working.

We also keep our own visit statistics, without third-party cookies: pages viewed, the site you came from, type of device, time zone (to estimate the country), language, time on each page and actions such as opening the chat or booking. To distinguish new visits from returning ones, the browser stores a random identifier that does not contain your name or any other data about you. These statistics are deleted after 400 days.

14. Security

We apply technical and organizational measures to protect your data: role-based access, separation of data between projects, encrypted connections and activity logs. No system is completely infallible; if an incident affecting your data occurs, we will notify it as required by law.

15. Changes to this policy

If we change this policy, we will update the date above. If the change is important, we will announce it on the site. See also our terms and conditions.