Domizello Privacy Notice
Last updated: 15 September 2026
Licensed real-estate operator no. 2212 (Ministerio de Turismo)
1. Data controller
The data controller is Domizello SAS, RUT 220982560017. Contact: privacy@domizello.com.
2. What data we collect
2.1 Buyer account data
- If you choose Google sign-in, we receive your name, verified email address, profile photo and Google account identifier to create or connect your account. Google is optional; disconnecting requires a password so you keep access to your account.
- Email address (used for login and notifications).
- Name (used in lead announcements – see Section 3 below).
- Optional profile data (spoken languages, telephone if you provide it).
- Information about properties you favorite, view, or contact agents about.
2.2 Featuring broker / Dueño Vende seller data
- Identity information sufficient to verify the matriculated broker status or property ownership.
- Listing agreement (broker) or deed reference (Dueño Vende).
- Contact information for the listing.
2.3 Platform-generated data
- In-platform chat messages between buyers and brokers.
- Activity logs (pages viewed, listings searched, agents contacted).
- Cookies and similar technologies for session management and analytics.
2.4 Landlord, developer, broker and property data
- Applications, company and agent details, professional capabilities and contact information.
- Identity documents, declarations, agreements, contract fingerprints and electronic-signing evidence.
- Property details, photos, videos, plans, supporting documents and deed information.
2.5 Service, transaction and activity data
- Inquiries, lead routing and status, offers, transactions, invoices and payment records.
- Support conversations and inbound and outbound WhatsApp records.
- Searches, listing views and dwell time, tours, media use, favorites and inquiries, together with coarse device class, language, country, request geography and last-seen metadata where captured.
- Consent choices, communication preferences and audit history.
3. How we use your data
3.1 Lead announcements
When a buyer presses "Speak to an agent" on a listing, Domizello initially discloses the buyer's name and, where available, spoken languages to the broker receiving the inquiry. The recipient may be the featuring broker, a buyer-side broker, a manually assigned broker or, for an eligible broker-origin visit, the source broker. Rental inquiries follow the same routed-conversation model. After acceptance, communication continues through Domizello's routed chat; contact details are not exposed by the broker lead and message endpoints.
By pressing "Speak to an agent" on a listing, the buyer consents to Domizello providing that data to the brokerage.
3.2 In-platform conversations
Conversations between buyers and brokers occur within Domizello's chat layer. Domizello may observe these conversations for the following purposes:
- Quality assurance: to ensure brokers respond appropriately and in a timely manner.
- Compliance: to detect attempts to circumvent the lead-attribution mechanism (e.g. soliciting off-platform contact).
- Dispute resolution: to investigate complaints raised by either party.
Domizello does NOT use chat content for marketing, profiling unrelated to the chat's purpose, or sale to third parties.
3.3 Marketing communications
We may send transactional notifications (e.g. account confirmations, lead status updates) at any time. We send promotional newsletters and listing alerts only with explicit opt-in consent. You can withdraw consent at any time via the unsubscribe link in any message or via your account settings.
4. Sharing with third parties
We share personal data with third parties only as follows:
- Featuring brokers and buyer-side brokers: as described in Section 3.1.
- Service providers used to operate the Platform, including Vercel for hosting, Turso for the database, Supabase Storage for files, Resend for email, Meta for WhatsApp, SignWell for electronic signatures, Mercado Pago for payments, Sentry for monitoring, PostHog for product analytics and Google for maps. Their processing and international transfers are governed by their applicable terms and safeguards. When bot protection is enabled, Cloudflare Turnstile processes your IP address and browser signals to verify form submissions.
- Authorities: when required by Uruguayan law or by a competent authority.
We do not sell personal data to any third party.
5. International transfers
Some of our service providers operate outside Uruguay. Where personal data is transferred outside Uruguay, the transfer is to providers in jurisdictions deemed adequate by URCDP, under standard contractual safeguards or under another legal basis permitted by the applicable regulations.
You expressly consent to the providers Vercel, Turso, Supabase, Resend, SignWell, Meta/WhatsApp, Sentry, PostHog and Google, located in the United States, among others, as well as other providers that may be added from time to time, located in Uruguay or abroad, including in countries with a lower level of protection than Uruguay, having access to your personal data for the sole purpose of providing hosting, processing, notification delivery, electronic signature, analytics and monitoring services to Domizello S.A.S., for the duration of those services and for that purpose only.
6. Retention
- We retain personal data for as long as needed to provide the Platform, maintain its integrity, meet applicable legal obligations and establish or defend claims.
- Agreement, consent, transaction and audit records may be kept as an immutable history where that record is necessary to evidence what occurred.
- Behavioral-event records and anonymous search terms currently have no automated deletion schedule. Retention ceilings remain under review and this notice will be updated when they are decided and implemented.
7. Your rights (Ley 18.331)
You have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request deletion of your data, subject to retention obligations.
- Object to specific processing activities.
- Lodge a complaint with the URCDP (Unidad Reguladora y de Control de Datos Personales).
Requests should be sent to privacy@domizello.com. We will respond within the period required by applicable law.
8. Cookies
Google Analytics (Google) and PostHog load only after you accept analytics in the cookie banner. You can refuse optional analytics or change your choice through Cookies in the footer. Necessary cookies and our first-party visit measurement remain independent of this choice.
We use cookies and browser storage for authentication, security, language and interface preferences, attribution, wizard autosave and analytics. You can disable cookies in your browser; some Platform features may not work without them.
We record approximate country, region and city derived from the request IP for first-party visit measurement, including city-centroid coordinates rather than a precise location.
Analytics is event-level, not only aggregate. Anonymous device activity may be associated with an account after login, and authenticated events can include role and brokerage context. The main cookies and markers are:
- dz_consent (Domizello): remembers whether you accepted or refused optional analytics. This necessary preference cookie lasts one year and is saved for either choice.
- _ga and _ga_* (Google Analytics, Google): measure visitors and sessions to understand how the site is used. These cookies are set only after analytics consent and last two years by default; their lifetime may vary with browser restrictions and configured settings.
- ph_* cookies and browser storage (PostHog): measure product usage to help improve the site, only after analytics consent. Cookies last one year by default. Local storage remains until consent is withdrawn or it is cleared; session storage lasts for the browser session.
- dz_sid: anonymous device identifier. Purpose: visit statistics (pages viewed, language, device type, country) and site improvement. Duration: one year, renewed on each visit. It contains no name, email address, or precise location.
- Authentication, CSRF and callback cookies: maintain a secure login and return path; duration varies by session and security purpose.
- dz_sid_linked: server-only marker recording that the device history was linked to the signed-in account; one-year duration.
- domizello_source_broker: records broker-origin attribution for inquiry handoff and referral routing; 24-hour duration.
- va-locale: language preference; one-year duration. va-last-seen: authenticated last-seen update marker; 30-day duration.
- Local or session storage may hold unfinished wizard drafts, interface preferences or dismissals, and transient navigation intent. These browser values are submitted only when the related feature sends them to Domizello.
9. Security and data minimisation
We apply reasonable, best-effort safeguards, but no system can guarantee that a security incident is impossible. Verified measures include hashing passwords and reset tokens, using keyed fingerprints instead of storing protected-client email addresses, letting the payment provider handle card data, and minimising stored payment diagnostics.
10. Children
The Platform is not directed to persons under 18. We do not knowingly collect personal data from minors.
11. Changes to this notice
We may update this notice. We will communicate material changes through an appropriate Platform or account channel.
12. Contact
privacy@domizello.com – Domizello SAS.