Privacy policy
Which personal data Estate24 processes, why, for how long, and what rights you have.
We process personal data in accordance with the Law on Personal Data Protection of the Republic of North Macedonia. The controller is the operator named in the imprint.
What we process and why
| Data | Purpose | Basis |
|---|---|---|
| Account: name, email, password (hashed), language, optional phone | Your account, sign-in, notifications | Contract |
| Listings, photos, agency profiles | Publishing them on the platform | Contract |
| Inquiries you send to an advertiser | Forwarding them by email to the advertiser | Contract / consent |
| Reports about listings | Moderation | Legitimate interest |
| Payments for Boosts and the Verified badge | Processing the payment and receipts | Contract, legal obligations |
| Technical data: hashed IP address, browser | Security, preventing abuse (rate limits) | Legitimate interest |
| Analytics (Google Analytics 4) | Understanding how the site is used | Consent — only if you accept |
Imported ads and claims
We collect property ads that are publicly available on other Macedonian classifieds sites, including the contact phone number shown in the ad. We use this number only to send the owner a one-time invitation (by SMS, WhatsApp or Viber, sent manually by our team) to take over a private copy of their ad. Basis: legitimate interest in offering owners a free additional channel, balanced by these safeguards:
- the copy is private and published only if the owner accepts;
- at most one message per 24 hours, never between 21:00 and 09:00;
- the link expires after 72 hours; unanswered invitations close after 14 days;
- the owner can delete the copy or opt out of further contact with one click — after that we keep only a one-way hash of the number so that we do not contact it again.
Service providers
We use providers that process data on our behalf: hosting of the application and database, UploadThing (storage of photos), Brevo (sending emails), Polar (payments and invoices: your name, email, billing country or address and your card details are processed by Polar Software, Inc. and its payment processors — we never receive your card number) and, with your consent, Google Analytics. Maps use OpenFreeMap (map tiles, loaded by your browser directly, so OpenFreeMap sees your IP address; no cookies are set) and address search uses Photon by komoot (OpenStreetMap data; our server sends only the text you typed in the address box, never your identity). Some providers are located outside North Macedonia; transfers rely on the safeguards required by law.
Cookies
Necessary cookies: your sign-in session, your cookie choice and the way you last signed in (to highlight it on the sign-in page). Analytics cookies are set only after you accept them; you can change your choice at any time under "Cookie settings" in the footer.
How long we keep data
Account data as long as the account exists; deleting your account deletes your listings and shortlist. Payment records as long as accounting law requires. If you buy the Verified badge, the badge (without its end date on cards) is shown publicly next to your name on your listings; the end date shows when someone opens the badge. Technical rate-limit data is deleted daily. Expired sign-in and verification tokens are deleted regularly.
Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time. Contact us through the . You may also complain to the Agency for Personal Data Protection.
Last updated October 17, 2026
