Privacy Policy

Colibree Web Solutions, LLC
30 N Gould St, Ste R, Sheridan, WY 82801, USA
[email protected]

• Account data: full name and email address obtained via Google OAuth when you register as a property manager.
• Contract data: personal data entered during the contract signing process — full name, ID/passport number and issuing country, residential address, email address, telephone number, and handwritten signature image. We also record the IP address, browser information, and timestamps of each signing action for legal audit purposes.
• Usage data: anonymised website analytics collected via Google Analytics (pages visited, session duration, approximate country-level location). Collected only with your consent.
• Technical data: a session cookie, set only when you sign in as a property manager.

• Contractual performance (Art. 6(1)(b)): to provide the service you have requested.
• Legal obligation (Art. 6(1)(c)): to comply with rental contract record-keeping requirements under applicable law.
• Legitimate interest (Art. 6(1)(f)): security, fraud prevention, and service integrity.
• Consent (Art. 6(1)(a)): Google Analytics cookies, which you may withdraw at any time via cookie preferences.

• Google LLC (USA): authentication via Google OAuth and, with consent, analytics via Google Analytics. Google processes data under Standard Contractual Clauses for transfers outside the EU.
• Amazon Web Services (AWS): cloud storage of contract PDF files. Our S3 bucket is located in an EU region. Contract data does not leave the EU.

Contract data is retained for as long as required by applicable law (in Spain, at least 5 years under tenancy law). Property manager accounts are maintained while at least one contract is within its active or legal retention period. Accounts with no live or retained contracts and more than 12 consecutive months of inactivity will be deleted. You may request earlier deletion where permitted by law.

You have the right to: access your personal data; request correction of inaccurate data; request erasure where legally permitted; restrict or object to processing; and request data portability.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your national supervisory authority (Spain: Agencia Española de Protección de Datos — www.aepd.es).

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your information, and to opt out of the sale of your information. We do not sell personal information. To exercise your CCPA rights, contact us at [email protected].

We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest revision. Continued use of the Service after changes constitutes acceptance.

For privacy-related questions or requests: [email protected]