Privacy Policy
Last Updated: 7 October 2026
1. Data Controller
This policy explains how personal data is processed for people who visit agenteimmo.me and use the Agente Immo platform (the "Service"), in accordance with Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 (Italian Privacy Code) as amended by Legislative Decree 101/2018, and Directive 2002/58/EC (ePrivacy).
Data Controller: Antonio Scirica, acting commercially under the trade name "Agente Immo" Registered address: Viale Pretoriano 3, Rome (RM), Italy VAT number: IT16096461005 Email: info@agenteimmo.me
2. Scope
- Registered users of the platform (real estate agents and agencies) and people who try the Service from the home page.
- Visitors of the agenteimmo.me website.
- People who use the free home valuation ("Quanto vale la mia casa?" page), even without an account.
- It does not apply to visitors of the personal websites that agents publish with Agente Immo (for example agenteimmo.me/it/a/agent-name): for those websites the agent is the controller and provides their own privacy notice, and Agente Immo acts as a processor on the agent's behalf (Art. 28 GDPR).
3. Data We Process
3.1. Account and Profile
- Email address and user ID. Your password is handled by our authentication provider in encrypted form and cannot be read by us.
- If you choose to sign in with Google: the name, email address and profile picture Google shares with us.
- Profile data you enter: name, agency, phone number, logo, photo, colors and other information for your content and your website.
- Active plan, credit balance and credit history.
3.2. Content You Upload and Generate
- Property photos, floor plans and videos you upload, including any videos in which you appear.
- The messages and requests you write in the home staging and video chat.
- The photos and videos generated, saved in your Gallery.
- Property data you enter or import (address, price, features, description, location on the map).
Authorized Agente Immo staff may view the photos, videos and requests created in the Service only to provide support, for quality control of the results and to prevent abuse.
Please do not upload photos in which people, documents or other personal data of third parties can be recognized unless you are entitled to do so.
3.3. Listings Imported from a Link
When you paste the link to a listing, our server reads the public listing page and extracts property data (text, features, photos). The page may show the name and contact details of the agency that published it: we use them only to fill in the property record at your request.
3.4. Personal Website, Contact Requests and Views
If you publish your personal website, we process the content you choose to show (properties, texts, photos, contact details). Requests sent by visitors through the contact form (name, email, phone number, message and property of interest) are sent to you by email and saved in the Requests section of your profile, where you can manage them. You are the controller of those requests; we process them on your behalf as a processor (Art. 28 GDPR).
We also count views of the property pages on your website to show you how many people saw them: we only store a number per property per day, with no data identifying visitors. To avoid counting the same person twice, the visitor's browser keeps a technical marker for one day; the IP address is used only to block abuse and is not stored.
3.5. Payments and Invoicing
Payments are handled by Stripe. We keep the customer and subscription IDs, the plan, the renewal dates and the billing details you enter (for example company name, VAT number, e-invoicing recipient code or certified email). We never see or store full card numbers.
3.6. Free Trial
The free trial on the home page (1 photo and 1 video) requires an account and can be used only once per account, per IP address and per device. To enforce this limit we store, together with the account, an encrypted code (hash) of the IP address and a hash of the device fingerprint. The fingerprint is computed in your browser from technical characteristics (for example screen, graphics card, time zone, language): only the hash reaches our server, and these characteristics cannot be reconstructed from it. The fingerprint is only computed when you start the trial. We also process the photo you upload for the trial and the generated result.
3.7. Technical and Security Data
IP address, browser type, date and time of requests and technical logs, used to run the Service, prevent abuse and fix errors. We also record the AI operations performed and the credits used, to calculate credits and costs.
To improve the Service and provide support, we record when you use the platform, for how long and which sections you open (for example chat, properties, Gallery, website), together with the type of device and browser. We do not record what you type or what you click on the pages. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR). We keep this data for 24 months, then delete it.
3.8. Cookies and Similar Technologies
We use strictly necessary technologies (for example to keep you signed in and to remember your cookie choice). Analytics tools (Google Analytics, Microsoft Clarity, Cal.com calendar) and marketing tools (Meta Pixel) are enabled only with your consent, which you can withdraw at any time. Details are in the Cookie Policy (agenteimmo.me/en/cookie). We do not use analytics or marketing tools on agents' personal websites.
3.9. Free Home Valuation
If you request a valuation of your home we process: the address and features of the property you enter (type, square metres, rooms, bathrooms, floor, condition and extras), your email address and, if you enter them, your name and phone number, the result of the estimate and your consent choices. We use the address to find the area and calculate the estimate on the OMI quotations of the Italian Revenue Agency; the estimate is sent to you by email.
- Without further consent we use your data only to calculate and send you the valuation.
- If you tick "I want to be contacted by a real estate agent in my area", we may share your contact details and the property data with a real estate agent who uses Agente Immo and works in your area, so that they can contact you for advice or a listing proposal. The agent receiving them processes them as an independent controller, under their own privacy notice.
- If you tick the marketing consent, we may send you communications about services and news related to selling or renting your home. You can unsubscribe at any time using the link in every email.
3.10. Connected Facebook, Instagram and TikTok Accounts
From your Profile, in the "Your social accounts" section, you can connect your agency's Facebook Page, the Instagram professional account linked to that Page and your TikTok account, to publish posts about your properties from Agente Immo. Connecting is optional and you start it yourself, through the Meta or TikTok login, where you see and approve the requested permissions. When you connect an account we process only this data:
- Facebook: ID, name and picture of the Page you choose and the Page access token, which is needed to publish. If you manage more than one Page, to let you choose one we keep the list of your Pages (name, picture, linked Instagram account and access tokens) only for the time of the choice: it can be used for 15 minutes and we delete it as soon as you choose.
- Instagram: ID, username and profile picture of the professional account linked to the Page, and the access token Meta issues to us for publishing.
- TikTok: account ID, display name and profile picture, the access token and the token used to renew it.
- Posts you publish or schedule from Agente Immo: photos or video, text, chosen date and time, the property they refer to, publishing status, ID and link of the published post, any error messages from the social network and the date the connection was last used.
We use this data only to publish the content you choose and to show you the status of your posts. A post goes out only when you press "Pubblica ora" (Publish now) or "Programma" (Schedule): we never publish anything on our own. On TikTok the post arrives as a draft in the TikTok app and you publish it from there. We do not read the posts, comments, messages, followers or insights of your Pages and accounts.
Access tokens are stored in our database (Supabase, EU), which is encrypted at rest; they are never shown in the platform and only our servers use them to publish. The photos and videos to be published are kept in private storage until they are published; for photos posted to TikTok we place a copy in our Cloudflare R2 storage, at an address from which TikTok downloads it.
We do not sell this data, we do not use it for advertising or profiling and we do not share it with anyone else. The content you publish is sent to Meta (Facebook and Instagram) or TikTok, which process it as independent controllers under their own terms and privacy policies.
How to remove access: in your Profile, under "Your social accounts", press "Disconnect" next to the account (Facebook and Instagram are disconnected one at a time). We immediately delete the connection and its access tokens and cancel the posts scheduled on that network. You can also remove access from Facebook (Settings and privacy, Settings, Apps and websites or Business integrations), Instagram (Settings, Apps and websites) or TikTok (Settings and privacy, Security, Apps and services): the tokens stop working, and to also delete the data we keep, press "Disconnect" or write to info@agenteimmo.me. Deleting your account deletes all connected accounts and posts.
4. Purposes and Legal Bases
- Creating and managing your account, providing the features you request (home staging, videos, listing import, property management, personal website, forwarding of contact requests), managing plans, credits and payments, providing support: performance of a contract (Art. 6(1)(b) GDPR).
- Issuing invoices, bookkeeping and tax compliance: legal obligation (Art. 6(1)(c) GDPR).
- Protecting the Service, preventing fraud and abuse, enforcing free trial limits (IP and device hashes), fixing errors: legitimate interest of the controller (Art. 6(1)(f) GDPR), balanced against your rights by using only hashed codes and limited retention periods.
- Measuring platform usage (time and sections opened) to improve it and provide support: legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Website usage statistics and measurement of advertising campaigns: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
- Free home valuation: calculating and sending the estimate at your request (Art. 6(1)(b) GDPR); sharing your contact details with a local agent and marketing communications only with the specific, optional consents (Art. 6(1)(a) GDPR), which can be withdrawn at any time by writing to info@agenteimmo.me.
- Connecting Facebook, Instagram and TikTok, publishing the posts you choose and showing you their status: performance of a contract, at your request (Art. 6(1)(b) GDPR).
We do not sell your data and we do not use it to train artificial intelligence models.
5. Providers Processing Data on Our Behalf
We rely on the following providers, appointed as processors or acting as independent controllers for their own services:
- Supabase (EU): authentication, database and server functions.
- Vercel (USA): hosting of the website and platform.
- Cloudflare (USA), R2 service: storage of photos, videos and Gallery files.
- Stripe (Ireland and USA): payments, subscriptions and invoices.
- Resend (USA): delivery of service emails and of contact requests from personal websites.
- Google (USA): sign in with Google, if you choose it; Gemini models for generating and editing photos and analyzing text.
- OpenAI (USA): GPT Image models for generating and editing photos.
- Anthropic (USA): Claude models for recognizing room types, preparing floor plans and writing video instructions.
- fal.ai (USA): video generation with Kling and Veo models.
- ZenRows: reading the public pages of the listings you import from a link.
- Meta Platforms (Ireland and USA) and TikTok: only if you connect your accounts, to publish the posts you choose (see section 3.10).
- Google Analytics, Microsoft Clarity, Cal.com and Meta (USA): only with your consent to analytics or marketing cookies.
We send AI providers only what is needed for each operation (the photo or video and the instructions), without your name or email.
For maps, addresses and the surroundings of properties our server queries public services such as OpenStreetMap (Nominatim and Overpass) and Esri, and for style inspiration photos the Unsplash library. These requests come from our server and contain only addresses, coordinates or search terms, not data that identifies you.
6. Transfers Outside the European Union
Some providers are established in, or process data in, the United States or other countries outside the European Economic Area. Transfers are based on the EU-US Data Privacy Framework adequacy decision, for certified providers, or on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR), with safeguards such as encryption of data in transit and at rest.
7. Retention Periods
- Account, profile, properties and personal website: as long as the account is active. They are deleted when you delete your account.
- Chat conversations: 30 days, then they are deleted. Generated photos and videos remain in the Gallery.
- Gallery photos and videos and uploaded files: until you delete them or delete your account.
- Contact requests from personal websites: until the agent deletes them or deletes the account; they also remain in the agent's mailbox and in the email provider's delivery logs for the period set by that provider.
- Property view counts: aggregated numbers per day, with no personal data, for the lifetime of the account.
- Free trial data (IP and device hashes, linked to the account): for as long as needed to ensure the trial is used only once, and in any case no longer than 12 months, after which we delete them automatically. Trial photos and videos follow the Gallery rules.
- Home valuations and related contacts: 24 months from the request, then deleted; earlier if you withdraw consent or ask for deletion. If you agreed to be contacted, the agent who received your data keeps it under their own privacy notice.
- Connected accounts (Facebook, Instagram, TikTok) and access tokens: until you disconnect the account or delete your Agente Immo account.
- Posts published or scheduled from the platform: the list with status and links is kept until you delete your account. We delete the post photos and videos after publishing or when you cancel the post; those of failed posts, or of posts cancelled by disconnecting the account, at most 90 days after the post was created.
- Payment data and invoices: 10 years, as required by Italian law (Art. 2220 of the Civil Code), also after account deletion.
- Technical and security logs containing IP addresses: up to 90 days.
- Logs of AI operations and credits: for the lifetime of the account.
- Platform usage data (when, for how long, which sections, type of device): 24 months.
- Cookie consent: your choice is stored in your browser for 6 months, then we ask again.
Backup copies are overwritten according to the providers' technical cycles; until then they are protected and not used.
8. Artificial Intelligence and Automated Decisions
Photos, videos and texts generated with artificial intelligence are created only at your request. The Service does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).
9. Security
We use encrypted connections (HTTPS), per-user access controls on data, storage with providers that follow recognized security standards, and minimal administrative access. No system is 100% secure: in the event of a personal data breach affecting you, we will inform you as required by Articles 33 and 34 GDPR.
10. Your Rights
Under Articles 15-22 GDPR you may at any time request:
- access to your data and a copy of it (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17), including by deleting your account from your Profile;
- restriction of processing (Art. 18);
- portability of the data you provided, in a structured, machine-readable format (Art. 20);
- to object to processing based on legitimate interest (Art. 21);
- to withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to info@agenteimmo.me. We reply within one month.
You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali Piazza Venezia 11, 00187 Rome, Italy www.garanteprivacy.it Email: protocollo@gpdp.it
11. Children
The Service is intended for adult real estate professionals. We do not knowingly collect data from people under 18; if we become aware that we have received such data, we delete it.
12. Changes to This Policy
We may update this policy when the Service, our providers or the law change. The date at the top shows the latest version; we will notify you of significant changes by email or in the platform.
13. Contact
For any question about this policy or the processing of your data: info@agenteimmo.me.