Legal

GDPR rights and data requests

Last updated: 3 June 2026

This page summarizes how to exercise rights over your personal data in the platform. Requests are recorded in an internal GDPR rights ledger to evidence receipt, status, and resolution.

Available rights

  • Information: know how your personal data is processed.
  • Access: receive confirmation and a copy of the data processed.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion where legally applicable.
  • Restriction: request temporary limitation of processing.
  • Portability: receive data in a structured, commonly used, machine-readable format.
  • Objection: object to processing based on legitimate interest or marketing.
  • Not to be subject to solely automated decisions with legal or similarly significant effects.

Data download

Authenticated users can go to Profile and select Download my data. The application generates a JSON file with account data, sessions without secret tokens, linked providers without tokens, organizations, referrals, chats, leads, related contacts, and GDPR requests.

Account and data erasure

Authenticated users can request erasure from Profile. If access does not have an active future date, the system starts erasure immediately: it deletes or unlinks personal data, clears chat messages, removes sessions and linked accounts, and keeps only minimal proof of the request.

If the user has active access or a future subscription/access expiry, the request is scheduled for the expiry date. A daily automated process checks due requests. If access is extended before erasure, the request is rescheduled to the new date; if there is no future access, erasure is executed.

Legal limits

Erasure may not apply to data that must be retained for legal obligations, legal claims, fraud prevention, minimal audit evidence, or business data that is not personal data of the requester. Where possible, information is minimized, anonymized, or unlinked.

Requests without an active account

Write to info@hernanbustos.com and state the right you want to exercise and the associated email. Additional information may be requested to verify identity before delivering or deleting data.

Clients recorded during a property visit who do not have an account may exercise the same rights through the agency. After identity verification, the agency can export, anonymize, or erase their visit-linked personal data; an active legal hold is documented and delays incompatible erasure until it is released.

Response period

Requests are answered within the legally applicable periods. If a request is complex, manifestly unfounded, excessive, or affects third-party rights, it is assessed case by case.