Skip to content

Legal

Privacy Policy

Draft placeholder, to be written by a lawyer before launch.

This page lists what the final Privacy Policy must cover. It is not the Privacy Policy and has no legal effect yet. Draft version: draft-2026-10.

The final policy must explain, in plain language, what AMP collects from sellers and buyers, why, who processes it, how long it is kept and how to have it deleted. The facts below describe how the product handles data today, as a starting point.

Data we collect

  • Account details: name, email address, a hashed password (never the password itself), Google account ID if the seller signs in with Google, marketing-email consent if given.
  • Property details: address, locality, size, rooms, condition, features, energy rating and any notes the seller adds.
  • Photos the seller uploads, and anything visible in them, plus the enhanced versions and video tours made from them.
  • AI outputs: valuations (with the comparable properties used), listing descriptions and lead rankings.
  • Chat messages between buyers and the buyer-qualifying agent, and any seller replies, including budget, financing and timeline details buyers share.
  • Payment information: amount, plan, status and billing details. Card numbers are handled by the payment processor, not stored by us.
  • Contact-form messages and a record of emails we send (recipient, subject, content).
  • Technical data: a session cookie, and IP addresses stored only as a salted one-way hash for rate limiting and abuse prevention.

Why we use it

For each purpose, the lawful basis under the GDPR.
  • Providing the service: valuation, listing, buyer chat, payment (contract).
  • Security, fraud and spam prevention, rate limiting (legitimate interest).
  • Product update emails, only if the seller ticked the optional box (consent, withdrawable at any time).
  • Accounting and tax records (legal obligation).
  • Whether ranking buyer leads counts as automated decision-making with significant effects, and what safeguards apply.

Who processes it (sub-processors)

Each needs a data processing agreement and, where data leaves the EEA, a transfer safeguard.
  • AI model provider (currently Anthropic's Claude API): property details, photos and chat messages, to produce valuations, descriptions and buyer replies.
  • Video generation provider (currently Higgsfield): listing photos, to animate video tours.
  • Hosting and database provider (to be confirmed).
  • File storage provider for photos and videos (S3-compatible, to be confirmed).
  • Payment processor (to be confirmed).
  • Email delivery provider (currently Resend).

How long we keep it

  • Account data: while the account is open, then deleted or anonymised within a defined period.
  • Listings, photos and videos: for the life of the listing, then a defined period after sale or withdrawal.
  • Buyer chat messages: a defined period after the listing closes.
  • Payment records: as long as Maltese tax and accounting law requires.
  • Hashed IP addresses and rate-limit data: short-lived.

Your rights and how to request deletion

  • Access, correction, deletion, restriction, portability and objection; withdrawing consent for marketing emails.
  • How to ask: email amp@estateamp.com from the address on the account. Expected response time.
  • What deletion removes (account, listings, photos, chats) and what must be kept (payment records).
  • Rights of buyers who used the chat but have no account.
  • The right to complain to the Information and Data Protection Commissioner (IDPC) in Malta.

Also to cover

  • Identity and contact details of the data controller, and a data protection officer if one is required.
  • Cookies: see the Cookie Policy.
  • How changes to this policy are announced.

Questions about this page: amp@estateamp.com