Privacy Policy

Batiscan operates a digital real estate platform that combines professional 3D property scanning services with a property listing marketplace. We are the data controller for the personal data collected through our website, mobile application, and related services (collectively, the "Platform").

We are committed to protecting your personal data in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), and Organic Law 3/2018 of December 5 on Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD") of Spain.

Data you provide directly

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed, non-reversible form — we never store plaintext passwords)
• Phone number (optional, for scan coordination purposes)
• Professional role (owner, buyer, architect, institution — selected during onboarding)
• Company or organization name (where applicable)

When you submit a property listing or request a 3D scan, we additionally collect:

• Property address and location details
• Property type, size, and descriptive information
• Documents or files you upload relating to the property (floor plans, title deeds, photos)
• Preferred scan scheduling information

When you submit a devis request (a formal expression of interest to buy or rent a property), we collect:

• The property reference you are inquiring about
• Your contact preferences
• Any message or notes you include in the request

Data collected automatically

When you use the Platform, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referral source (how you arrived at our platform)
• Device identifiers

Blockchain wallet data

If you choose to authenticate using a Solana-compatible wallet, we collect:

• Your public wallet address

We do not have access to your private keys, seed phrases, or any funds held in your wallet. We do not execute on-chain transactions on your behalf. Wallet authentication is used solely to verify identity and link your account — no financial transactions are processed through Batiscan's infrastructure.

Data we do not collect

We do not process payment card data. Batiscan does not handle financial transactions for property purchases or rentals. Devis requests are expressions of interest only — no money changes hands through our platform at this time.

Service providers (data processors)

We share data with trusted third-party processors who act strictly on our instructions:

• Cloud infrastructure provider (hosting and storage)
• Email delivery service (transactional emails)
• Analytics provider (aggregated, anonymized usage data)
• Customer support tools

All processors are bound by data processing agreements and are either located in the EU or operate under appropriate transfer mechanisms (Standard Contractual Clauses).

Parties involved in devis requests

When you submit a devis request for a property, the property owner or listing agent receives your name and contact details so they can respond. You consent to this when submitting the request.

When you list a property and receive a devis request, the interested party's name and contact details are shared with you.

Professional partners

If you request a 3D scan, our scanning team coordinates the visit. Basic contact and property details are shared with the team member assigned to your scan.

Legal requirements

We may disclose your data to competent authorities if required by applicable law, court order, or to protect the rights, property, or safety of Batiscan, its users, or the public.

What we never do

We never sell your personal data. We never share your data with advertisers for targeting purposes.

All personal data is stored on servers located within the European Economic Area (EEA). In the event any processor operates outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

You have the following rights regarding your personal data:

Right of access (Art. 15): Request a copy of the personal data we hold about you.

Right to rectification (Art. 16): Correct inaccurate or incomplete data.

Right to erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.

Right to restriction of processing (Art. 18): Ask us to pause processing in certain circumstances.

Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.

Right to object (Art. 21): Object to processing based on legitimate interests, including direct marketing.

Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

Right not to be subject to automated decision-making (Art. 22): We do not make solely automated decisions with legal or significant effects on you.

To exercise any of these rights, email: privacy@batiscan.com

We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid
www.aepd.es

We use cookies and similar tracking technologies. See our full Cookie Policy on the Cookie Policy page for details on what we use, why, and how to manage your preferences.

Batiscan is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete the account and associated data promptly.

We implement appropriate technical and organizational measures to protect your personal data, including:

• TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Password hashing using bcrypt (minimum 12 rounds)
• Role-based access controls for our internal team
• Regular security assessments

No system is entirely secure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you and the AEPD as required by GDPR Article 33-34.

We may update this Privacy Policy from time to time. We will notify registered users by email at least 15 days before material changes take effect. The "Last updated" date at the top of this page reflects the current version.