Listingo

Privacy policy

Effective from 8 October 2026

This policy covers the getlistingo.com service: the information site, the waitlist and the dashboard for estate agents. The data of people who view proposals on agents’ websites is covered by the privacy policy linked in the footer of each agent’s website (see section 9).

1. Data controller

The controller of your personal data is Genti sp. z o.o., ul. Niemczańska 39/6, 50-561 Wrocław, Poland, Polish tax ID (NIP): 8992964282. In this document we refer to ourselves as “we”.

Contact for personal data matters: mateusz@marketingagenta.pl.

2. What data we collect and why

We process data only for the purposes listed below. We do not sell it or use it for advertising. Providing data is voluntary, but without an email address we cannot create an account or reply to your message.

Your account and use of the dashboard
Data
Email address (login), encrypted password, profile and company details, proposals you prepare, photos, logos and attached brochures, as well as template settings.
Legal basis
Article 6(1)(b) GDPR: performance of the contract for the use of the tool.
Retention period
For as long as you have an account.
AI assistant
Data
The content of your messages and voice recordings, the links and files you give the assistant, client notes and the chat history for each proposal.
Legal basis
Article 6(1)(b) GDPR: performance of the contract for the use of the tool.
Retention period
For as long as you have an account. Voice recordings are converted into text and are not stored.
Limits, billing and security
Data
The number of proposals prepared and messages sent to the assistant in each 30-day billing period, use of AI services and the resulting costs, login data.
Legal basis
Article 6(1)(f) GDPR: legitimate interest, i.e. controlling costs and limits and securing the service.
Retention period
For as long as you have an account.
Waitlist
Data
Your first name and email address, plus your agency name if you provide it, and the language of the page you signed up on.
Legal basis
Article 6(1)(b) GDPR: steps taken at your request before entering into a contract.
Retention period
12 months from signing up. We will delete the entry earlier at your request or once your account has been created.
Ad measurement and targeting (Facebook Pixel)
Data
Identifiers stored in cookies (_fbp, _fbc), IP address, browser and device data, and information that you visited the page and joined the waitlist, sent to Meta Platforms.
Legal basis
Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law, i.e. your consent to the “Marketing” category. You can withdraw it at any time.
Retention period
Until you withdraw your consent. Pixel cookies expire after 90 days, and Meta’s retention of data is governed by its privacy policy.
Correspondence
Data
Your email address and the content of the messages you send us.
Legal basis
Article 6(1)(f) GDPR: legitimate interest, i.e. replying to your enquiry.
Retention period
For as long as the matter is handled, and then until the limitation period for claims expires.

3. Your account and logging in

Agent accounts are created by us at the agent’s request. You log in with your email address and password. Your password is stored only in encrypted form and none of us can read it. Login is handled for us by Supabase.

Service administrators have access to accounts to the extent needed for technical support and billing: they can see, among other things, profile details, the list of proposals and use of AI services.

4. AI assistant and voice recordings

The assistant prepares proposals based on your messages, listing links and attached brochures. The conversation content is sent to Anthropic’s Claude model, and auxiliary tasks such as reading listings, summarising client notes or matching a region name are performed by a smaller Claude model. Voice recordings are converted into text by OpenAI, after which we do not store the recording.

Do not paste data into the conversation that you do not need to prepare a proposal. AI service providers do not use data sent through their programming interface to train their models.

5. Photos, brochures and other content

Photos from listings you point the assistant to are copied to our server and converted to a lighter format so that the proposal loads quickly. The same applies to photos and files you upload yourself. Old, unused copies of photos from conversations are deleted automatically.

A published proposal is public at its address: anyone who knows the address can see it. The address contains a random part, but do not treat it as a security measure. Do not put data in a proposal that you do not want the recipient to see.

6. Cookies and browser storage

The dashboard does not use analytics or advertising cookies, and we load fonts from our own server without involving Google. We only store in your browser what the dashboard needs to work:

  • your login session (Supabase), needed so that you are not logged out every time you refresh the page,
  • your choice in the cookie window,
  • dashboard display settings: whether the side menu is collapsed, the dashboard language and when you last viewed your dashboard.

These are strictly necessary for the service, so we do not ask for consent to use them. We still show the cookie window here too, so you have one place to check and change your choice: . The preferences and statistics categories are not currently used. The marketing category only covers the Facebook Pixel on the information site (section 7).

Additional services may run on agents’ proposal pages: Google Maps and, if the agent has enabled it, the Facebook Pixel. They only load after the visitor consents and are described in the privacy policy on the agent’s website.

7. Facebook Pixel on getlistingo.com

The getlistingo.com information site may use the Facebook Pixel (Meta), which lets us measure the effectiveness of Listingo ads and show them to people who have visited the site. The Pixel is not currently enabled; if we enable it, this section will apply.

The Pixel only starts after you consent to the “Marketing” category, and only on the information site, not in the agent dashboard. Meta then receives identifiers from cookies (_fbp and _fbc), your IP address, browser and device information, and information that you visited the page and joined the waitlist. We do not send Meta your email address or the content of your messages.

For the collection and transfer of this data, we and Meta Platforms Ireland Limited are joint controllers. We are responsible for informing you about the Pixel and obtaining your consent, and Meta for further processing under its own privacy policy, including in the USA. After you withdraw consent, we delete the Pixel cookies and stop sending Meta data about your visits.

8. Server logs and security

The hosting provider keeps standard server logs (IP address, time and type of request) to ensure security and diagnose failures. Connections to the service are encrypted (HTTPS). Access to data in the database is restricted by permission rules: an agent can only see their own account, proposals and statistics.

9. Data of your proposal recipients

We process the data of people who open your proposals (reading statistics and, if you enable the Facebook Pixel, data sent to Meta) on your behalf and according to your instructions. You are the controller of this data. The rules are set out in the data processing agreement, an annex to the terms of service, which you accept when you first open the dashboard and which is then available in the dashboard.

Each of your websites has its own privacy policy, linked in the footer (in English at /en/privacy). It is generated automatically from the details you give in your profile (company name, address, tax ID, contact details), so please complete them under “Profile”. You are responsible for keeping them true and up to date, and for informing recipients about the Pixel and obtaining their consent.

Reading statistics are deleted automatically 12 months after a proposal was last opened.

10. How long we keep data

  • account data, proposals, assistant chats and statistics: until the account is deleted,
  • you can delete your account yourself in the dashboard (Profile → Account and subscription), or we will delete it at your request, immediately, together with proposals, photos, chats and statistics; after you cancel your subscription, we delete the data 30 days after the end of the paid period,
  • waitlist: 12 months from signing up,
  • correspondence: until the matter is closed and the limitation period for claims expires,
  • database backups are kept by Supabase according to its own cycle; deleted data disappears from them as that cycle ends.

11. Providers and transfers outside the EEA

We use the following providers to process data:

  • Supabase: database, login, files and server functions, servers in Frankfurt am Main (European Union),
  • Hostinger: the server the website loads from,
  • Anthropic (Claude model): processing conversations with the AI assistant, USA,
  • OpenAI: converting voice recordings into text, USA,
  • Resend: sending email notifications about client activity on your proposals, in the region configured for the sending domain,
  • Meta Platforms: Facebook Pixel on the information site, after consent, Ireland and USA.

Data transferred to the USA is protected by standard contractual clauses approved by the European Commission. Google Maps and the Facebook Pixel (both on agents’ websites and on the information site) operate as separate services and only with the visitor’s consent. Meta Platforms Ireland Limited is our joint controller in this respect.

12. Your rights

You have the right to:

  • access your data and obtain a copy of it,
  • have your data rectified or erased,
  • restrict processing and to data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
  • lodge a complaint with the Polish President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or with the supervisory authority in the EU member state where you live or work (in Spain: the Spanish Data Protection Agency, AEPD).

To exercise these rights, write to mateusz@marketingagenta.pl. You can also delete your account yourself in the dashboard: Profile → Account and subscription.

13. Contact for personal data matters

Genti sp. z o.o., ul. Niemczańska 39/6, 50-561 Wrocław, Poland, Polish tax ID (NIP) 8992964282, mateusz@marketingagenta.pl.