Privacy notice
DraftVersion 0.1Updated on October 13, 2026
This is the full privacy notice of Deveras. The short version comes first; the detail follows.
This is a courtesy translation. The Spanish version is the one that applies. Read the Spanish version
Simplified notice
Who handles your data. [PENDIENTE: razón social de la empresa operadora], registered address [PENDIENTE: domicilio completo en México], is the controller of the personal data handled on Deveras.
What data. Your account details (name, e-mail, photo), your contact details, your listings, your messages, your confirmed rentals and reviews, your tenant profile if you choose to fill it in, the outcome of any verification you choose to do, technical data and visit statistics that we measure ourselves, with no third parties (how you arrived, which pages you view, from which device and approximate location). We do not ask for sensitive data. If you add an income range to your tenant profile, we only keep it with your express consent. Identity verification is optional, is carried out by an external provider with your express consent, and we do not keep your document or your selfie.
What for. Necessary: providing the service (account, listings, putting people in touch, verifications, reviews, lead attribution, translations, security and fraud prevention) and measuring, with our own tool, how the site is used in order to maintain and improve it. Secondary, and you may refuse: sending you news about Deveras and asking for your opinion.
How to limit the use of your data. In your account settings you can turn off e-mails and notifications. To refuse the secondary purposes or ask for any other limitation, write to hola@deveras.app.
Your rights. You can access your data, correct it, have it erased, or object to its use, as explained under Your rights. We use no advertising trackers and we do not sell your data.
01Who is responsible for your data
[PENDIENTE: razón social de la empresa operadora] (“Deveras”, “we”), registered address [PENDIENTE: domicilio completo en México], is the controller of your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
For anything concerning your data you can contact [PENDIENTE: persona o área encargada de datos personales] at hola@deveras.app.
02What data we handle
We handle only what each feature needs. By category:
- Account and identification: the name, e-mail and profile photo we receive from Google or Facebook when you sign in, and the identifier of that account; your username; your role (tenant, owner or agent); your languages; your bio; and, if you are an agent, your agency’s name and your licence number.
- Contact: phone and WhatsApp, if you provide them.
- Verifications (optional): your verified phone number; the outcome of identity verification (see Sensitive data and identity verification); the document you upload to prove your licence or your link to a property, and the outcome of its review.
- Listings: text, photos, price, features, approximate location (public) and exact address (private: never shown on public pages or in the API).
- Enquiries and messages: what you send to an advertiser (name, contact detail, message, desired move-in date and length of stay), chat conversations and their automatic translations.
- Tenant profile (optional): whatever you choose to put in it: an introduction, how many people are moving in (how many children, which pets), your occupation by category (without your employer’s name), the move-in date and length you are looking for, your languages, whether you smoke and up to three references with name and relationship (never their contact details). It comes with your verifications and your reviews as a tenant, which are already on your account.
- Confirmed rentals and reviews: the property, the dates, the people involved, the ratings, the reviews and the replies.
- Contracts: the information you type into contract templates and, when signing online, each signer’s name, e-mail, date, IP address and browser.
- Sharing and reputation: your share links, the visits and enquiries they brought, the leads attributed to you and your reputation points.
- Reports: those you send and those received about you or your listings.
- AI features: the screenshots or text you give us to create a listing, your listing photos, and the searches you type.
- Technical data: IP address, browser and device type, date and time of access, the necessary cookies (see Cookies) and, if you turn on notifications, the identifier your browser gives us to send them.
- Audience measurement (our own, no third parties): as you browse, our own measurement tool records the pages you view and when; how you arrived (the previous site, the campaign parameters of a link such as utm_source, the click identifier that Google, Meta, TikTok or Microsoft add to their ads, and the code of a share link); your IP address and the approximate location derived from it (country, region, city and its coordinates, time zone); your browser, operating system and device type; your screen size, languages and connection type; how fast each page loads; and some actions: searches (only the filters, never the text you type), listings and photos you open, when you share, when you start or send an enquiry, when you sign up, publish or create an alert. We never record what you type in forms or the content of your messages. If you are signed in, these visits are linked to your account.
- Financial data: the rent amount that you or someone else enters when confirming a rental or filling in a contract and, only if you choose to and give your express consent, a monthly income range in your tenant profile (a range, never an exact figure). We do not ask for bank accounts, proof of income or credit history, and we do not process payments.
Other people’s data. If you enter someone else’s details (for example your tenant’s name in a contract or in a rental you declare), we ask you to have their permission. We notify that person when you invite them to confirm or to sign.
We do not obtain data about you from other sources, except from Google or Facebook when you sign in and from the identity verification provider when you choose to verify yourself.
03What we use your data for
Necessary purposes, needed to provide the service you ask for:
- creating and managing your account and your public profile;
- publishing and displaying listings, translating them and making them easy to find;
- putting people who are searching in touch with advertisers, and carrying their messages;
- showing your tenant profile to the advertiser you decide to share it with, inside your conversation with them, so they can assess your enquiry;
- carrying out the verifications you request and showing their outcome as badges;
- recording confirmed rentals and publishing reviews and replies;
- recording which link a lead arrived through and applying the commission-sharing rules between agents;
- recording which agent introduced a property to you, when you confirm it, and issuing the introduction record, because that agent may receive part of the commission; the listing agent and the introducing agent see your first name and last initial. Kept while the introduction is in force and 12 months after;
- generating the contracts you decide to create and collecting signatures;
- calculating each profile’s trust level (see Trust level);
- sending you service notices: new enquiries, messages, reminders to confirm a listing, changes to these texts;
- preventing fraud and abuse, handling reports and moderating content;
- offering public listing data through the open API;
- complying with legal obligations and requests from authorities;
- measuring with our own tool how the site is used (where visits come from, which pages and features help, how fast they load, which sources bring enquiries, sign-ups and listings) to maintain and improve it and decide where to promote it; this data is not sold or used to show you advertising;
- remembering the listings you view so we can show them to you again and suggest similar ones (see History and recommendations);
- producing aggregate statistics in which nobody can be identified (for example the average rent in an area).
Secondary purposes, which are not necessary and which you can refuse without any change to your service:
- sending you news and tips about Deveras;
- inviting you to surveys or interviews to improve the product.
To refuse, write to hola@deveras.app at any time.
What we do not do. We do not sell your data, we do not use it for third-party advertising, we do not compile blacklists of tenants or landlords, and we do not train artificial-intelligence models on it.
Your consent. By creating your account and using Deveras you consent to this processing. For a rent amount we ask for your express consent at the moment you enter it; for the income range in your tenant profile, with a separate box that is never ticked in advance; and for identity verification, your express written consent. You can withdraw your consent whenever you like; in some cases that will mean we can no longer offer you a feature or the service.
04Sensitive data and identity verification
We do not ask you for sensitive data (health, religion, ethnic origin, political opinions, sexual orientation) and we ask you not to write it in listings, messages or reviews.
Identity verification is optional. If you choose to do it:
- Before you start we explain what will happen and ask for your express written consent, which you give electronically while signed in. We keep the date of that consent.
- It is carried out by a specialised external provider (see Who else sees or receives your data). You send the image of your official document and a selfie directly to the provider, which compares them; that involves analysing features of your face (biometric data).
- We do not receive or keep the image of your document, your selfie or your biometric data. We keep only the provider’s reference for the verification, the outcome (approved, declined or under review), the date, the type of document, the country that issued it, whether it was checked against an official register, and an irreversible fingerprint of the document number, used solely to detect the same document being used on two accounts.
- The provider keeps the images for [PENDIENTE: plazo de conservación configurado con el proveedor de verificación] and then deletes them.
- We handle this information with the care the law requires for sensitive data: only to verify your identity, and for the shortest time possible.
- If you prefer not to do it, you can keep using Deveras; you simply will not have that badge.
The licence and ownership documents you upload are reviewed by a member of our team. They are stored in a private space with no public access, and are deleted 90 days after the decision.
06Data outside Mexico
Our hosting, database, e-mail and artificial-intelligence providers are in the United States, so your data is stored and processed outside Mexico. We require them by contract to protect it, to use it only to provide their service to us, and to respect this notice.
The law does not treat these communications to processors as transfers that need your consent, but we want you to know.
07How long we keep your data
- Account, profile, listings, messages and reviews: for as long as your account is open.
- Tenant profile: for as long as your account is open or until you delete it (from “My tenant profile”, immediately). The income range is deleted as soon as you withdraw your consent. An advertiser’s access ends when you withdraw it or after 90 days. We never record unpaid rent or incidents of any kind in it.
- When you close your account: we delete your data or make it anonymous within 30 days, after a blocking period during which it is kept only in case of legal liability. Backup copies are overwritten afterwards, on their normal cycle.
- Licence and ownership documents: 90 days after the decision. After that only the outcome and the date remain.
- Identity verification: the outcome, for as long as your account is open. We never hold the images.
- Data about breaches of contract (for example a review or an objection mentioning unpaid rent, a deposit not returned or a commission not paid): at most 72 months from the date of the breach, as the law requires. After that it is deleted.
- Contracts signed online: for as long as the account of the person who created them exists, so that the parties can consult them.
- Reports and moderation decisions: 24 months after they are closed.
- Technical data and security logs: 90 days.
- History of viewed listings: 12 months from your last visit to each listing if you have no account; with an account, 24 months, or until you clear it.
- Audience measurement: the full IP address and the exact description of your browser are erased after 90 days (only the IP without its last part remains, which no longer identifies you); everything else is deleted after 24 months.
- Cookies: the period shown for each one under Cookies.
We keep data for longer only if a law requires it or if it is needed for an ongoing claim.
08Your rights and how to exercise them
You have the right to:
- Access the data we hold about you and know how we use it.
- Rectify it if it is inaccurate or incomplete. You can correct much of it yourself from your account.
- Cancel it, that is, ask us to delete it when it is no longer needed.
- Object to our using it for a particular purpose, including the automatic calculation of your trust level.
- Withdraw your consent and limit the use or disclosure of your data.
How. Write to hola@deveras.app from your account’s e-mail address (or giving your name and a way to reply to you) and tell us which right you want to exercise, over which data, and any detail that helps us find it. If we need to check that it is you, or that you represent the person, we will ask for the minimum necessary. It is free.
Time limits. We will reply within 20 working days at most. If your request is granted, we will carry it out within the following 15 working days. The law allows each time limit to be extended once, for an equal period, where there is a reason that justifies it; if so, we would tell you.
Limits. There are cases where the law does not oblige us to erase data, or allows us to refuse a request: for example when the data is needed to comply with a legal obligation or a contract you are a party to, or when granting the request would harm another person’s rights. A common case: a review someone else wrote about you also contains their experience and their opinion. You can reply to it publicly, report it if it breaks the review and content policy, and ask us to review it.
Before deletion, data goes through a blocking period during which it is not used and is kept only in case of legal liability.
09Trust level and automated decisions
Each profile shows a trust level (New, Contact confirmed, Identity verified or Highly trusted). It is calculated by a program, with no human involvement, from two things only: the verifications the person has completed (e-mail, phone, identity, licence, ownership) and their reviews (how many there are and their average rating). It does not use your nationality, your age, your gender, your income or any sensitive data.
The level is there to guide other people. We do not use it to close accounts or refuse service automatically.
Your right to object. The law lets you object to automated processing that assesses your reliability or your behaviour without a person being involved. If you think your level does not represent you, or you do not want it calculated, write to hola@deveras.app: a person will review your case, explain how your level was obtained and, if your objection is upheld, we will stop calculating it and showing it on your profile. Your badges, which describe facts that were checked, may still be shown.
Reputation points (for sharing, replying promptly or confirming your listings) are also calculated automatically, and you have the same right in relation to them.
History and recommendations. We keep track of which listings you open (how many times, for how long, whether you looked at the photos or asked for contact details), linked to your browser’s random identifier or, if you sign in, to your account: when you sign in, that device’s history moves to your account, on every device you sign in on. From this, together with your saved listings, alerts and enquiries, a program works out which areas, prices and types of home interest you, to show you “Recently viewed” and “For you”. Only you see it: it is not shared with advertisers or third parties, it is not exposed through the API and it is not used for advertising. We store nothing if your browser sends Global Privacy Control or Do Not Track, or if you turn off measurement. You can clear your history at any time: with an account, under Saved › Viewed; without one, from the “Recently viewed” row on the home page.
Tenant profile. The progress you see while filling it in is shown to you alone: it is not shown to advertisers and is not used to rate you. We do not assess your creditworthiness, we do not rank or filter tenants automatically and we do not recommend to anyone whom to rent to: the advertiser sees what you declare and decides for themselves.
11Security
We apply reasonable administrative, technical and physical measures: encrypted connections, restricted access to data, documents kept in private storage, and the decision not to keep what we do not need (such as the images of your document). No system is infallible.
If a security breach occurs that significantly affects your rights, we will tell you immediately so that you can protect yourself.
12Minors
Deveras is for people aged 18 and over. We do not knowingly handle minors’ data; if you believe a minor has opened an account, tell us and we will close it.
13Changes to this notice
If we change this notice, we will publish the new version here with its date. If the change is significant (for example a new purpose or a new type of data), we will let you know by e-mail or on the site at least 15 days beforehand and, where the law requires it, we will ask for your consent again.
15Contact
[PENDIENTE: razón social de la empresa operadora] · [PENDIENTE: domicilio completo en México] · [PENDIENTE: persona o área encargada de datos personales] · hola@deveras.app
Version 0.1, updated on October 13, 2026. Effective date: [PENDIENTE: fecha de entrada en vigor].