How we handle your information.

ResidenceInvest.com is operated by Fovea One LLC, Los Angeles, California, United States. We are the data controller for the personal information described here. Contact: hello@residenceinvest.com. This address is also our data protection contact (the encarregado for LGPD purposes).

Enquiry and contact forms: your name, email, phone number, WhatsApp or SMS contact preference, subject, and message. Anything you type into the enquiry about your country of residence, citizenship, budget, or timeline is stored as part of your message. For a project enquiry we also record that the form told you it is shared with the developer.

Developer listing requests (List a project): contact name and role, email, phone, company name and website, and the project details you submit.

Account details if you sign in: your name, email address, Google account identifier, and profile picture link, which come from Google.

Page claims, if you claim a company’s page or add a company: your name, job title, phone number, work email, LinkedIn profile, the evidence you send, and the company details you add.

New-project alerts: your email address and the market you chose, stored when you sign up, before you confirm; when we sent the confirmation link and the last alert; and when you confirmed. When you confirm or unsubscribe we also log that event with your email address and the market, as the record of your consent.

Colleague invites: the work email of a colleague that someone who manages a company page adds, and who added it. We send that address one email inviting them to sign in, once the company page is live, and nothing else.

Technical data: IP address, browser type, pages viewed, and referring URL. Your IP address is processed transiently to rate-limit forms; it is not stored by the country lookup described below. How much other technical data is collected depends on the analytics choice you make — see “Cookies, local storage, and analytics”.

Approximate country derived from your connection (see “Approximate country from your IP” below).

Business contacts: publicly listed contact details of property developers and agencies, which we use to invite them to list projects.

To reply to your enquiries and show or email a project enquiry to that project's developer — steps taken at your request before a contract (GDPR Art. 6(1)(b)).

To run your account and watchlist if you sign in — performance of a contract (Art. 6(1)(b)).

To email you new projects in a market you asked about — your consent (Art. 6(1)(a)), given when you click the confirmation link we send. Withdraw it with the unsubscribe link in any alert.

To evaluate developer listing requests and to invite developers to list — legitimate interest (Art. 6(1)(f)); business contacts can opt out by replying to any email or writing to hello@residenceinvest.com.

To confirm that you work at a company whose page you claim, which may include calling you — legitimate interest (Art. 6(1)(f)).

To match a colleague’s claim to the invite from their company, and to send that one invitation email — legitimate interest (Art. 6(1)(f)). To tell you what we decided about your claim or a change you sent for a page, when a company you added goes live, and when your pending requests are closed because your access or the page ended — performance of a contract (Art. 6(1)(b)).

To improve the service: which markets buyers ask about, which projects get attention, which pages confuse people — legitimate interest for cookieless analytics, consent where the law requires it (see the analytics section).

To keep the service secure: rate-limiting forms, blocking abuse — legitimate interest (Art. 6(1)(f)).

To comply with the law where we are required to disclose information — legal obligation (Art. 6(1)(c)).

The developer of the project you enquired about: when it manages that listing through a verified ResidenceInvest account, it sees the enquiry there; when it has no verified account with us, we may email the enquiry to the developer’s contact address instead. The enquiry form says so before you send it, and we share that enquiry for that project only. The developer then handles your details under its own privacy notice. We do not pass enquiries to the sales agents listed on a project page; if that changes, this notice and the form will say so first. The general contact form and developer listing requests are not shared with third parties.

Service providers who process data on our instructions and not for their own purposes: Microsoft Corporation (United States) — hosting and database; our servers and database run in Microsoft Azure’s East US region. Cloudflare, Inc. (United States) — the network that delivers the site, protects it from abuse, tells us your country, and stores the images and documents uploaded to it. Resend, Inc. (United States) — delivers our email: sign-in codes, new-project alerts, the copy of each form we send ourselves, the acknowledgement and any reply we send to your enquiry, an enquiry we pass to a developer, our decisions on page claims and changes, a note when a company you added goes live, a note when your pending requests are closed because your access or the page ended, colleague invitations, and our invitations to developers. Plausible Insights OÜ (Estonia) and PostHog Inc. (United States) — analytics. Google LLC — sign-in via Google OAuth, only if you choose to use it.

Transfers to the United States: Microsoft, Cloudflare and Resend rely on their EU–US Data Privacy Framework certifications (including the UK Extension) with Standard Contractual Clauses as fallback; PostHog relies on Standard Contractual Clauses; Google relies on its Data Privacy Framework certification and Standard Contractual Clauses.

Map tiles: only when you open the map on the projects page, your browser loads the map from OpenFreeMap (openfreemap.org), a free map service built on OpenStreetMap data. It receives your IP address and the map areas you view, as any website you load does, and we send it nothing else.

Authorities where we are legally required to disclose.

We do not sell your personal information. We do not run third-party advertising on this site. We do not buy data from brokers or enrichment vendors.

Enquiry and contact submissions, and developer listing requests: 24 months from submission, then deleted automatically. Replies and forwards we send about an enquiry are kept with it for the same period.

Account data: until you ask us to delete it (email hello@residenceinvest.com from your account address).

Page claims: while a claim is pending, or while you manage the page, we keep the details you sent. A claim we turn down is deleted 90 days after our decision, and so is a company you added, unless we’ve started working on its page. If your access to a company page ends, the details you sent with the claim are cleared 90 days later; only the record that your account managed the page stays. Changes you send for a page are kept with your email address as the record of who asked for them, together with the reason we gave for our decision; you can see that decision in your account for 30 days.

Colleague invites: deleted after 90 days if the colleague hasn’t claimed the page.

New-project alerts: until you unsubscribe, when we delete the alert; a sign-up you don’t confirm is deleted 30 days after it was made. The consent log (your email address, the market, and when you confirmed or unsubscribed) is kept as proof of consent.

Operational server and network logs, which include IP addresses: rotate within days.

PostHog product analytics: up to 14 months, then aggregated or deleted. Plausible: no raw event logs are retained — only aggregated counts.

You can ask us to give you a copy of the personal information we hold about you, correct it, delete it, restrict how we use it, object to a particular use, or receive it in a portable format. Where we rely on consent (for example, PostHog analytics in strict-consent regions), you can withdraw that consent at any time using Cookie settings in the footer. Email hello@residenceinvest.com from the same address you used to contact us; we respond within the period your local law requires — normally one month, 15 days in Brazil.

We honour the Global Privacy Control browser signal as a refusal of analytics without requiring you to click the banner, unless you have already explicitly accepted.

If you are in a jurisdiction with a supervisory authority you also have the right to complain to it. Examples: ICO (United Kingdom, ico.org.uk), your national data protection authority in the EU/EEA, FDPIC (Switzerland), KVKK (Türkiye), ANPD (Brazil), CAI (Quebec).

For visitors in Türkiye this notice also serves as the aydınlatma metni under KVKK Art. 10; your rights under KVKK Art. 11 are those listed above, and requests can be sent to hello@residenceinvest.com.

Google Sign-In: we use only your name, email address, and profile picture from Google and do not access other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We estimate which country you are browsing from using the country code that Cloudflare, the network that delivers this site, attaches to each request. We use it to display prices in a relevant currency, to decide which consent banner to show you, and to surface buyer-relevant content (for example, residency-by-investment guides that match your starting jurisdiction).

The lookup is country-only: a 2-letter country code and nothing else — no city, region, neighbourhood, or precise location. Your IP address is not sent to any separate geolocation vendor and is not stored by this lookup.

The result is kept in a first-party cookie (ri_geo_country, 180 days) so we do not repeat the lookup on every page. It is strictly necessary for currency display and the consent banner; you can clear it in your browser at any time. You can change the chip in the site header to a different country, and that choice is saved in your browser’s local storage (ri_country_override).

Lawful basis: legitimate interest (GDPR Art. 6(1)(f)) and meşru menfaat (KVKK Art. 5(2)(f)). You can object by overriding the chip or by contacting us at hello@residenceinvest.com.

First-party cookies we set, all strictly necessary:

ri_at and ri_rt — keep you signed in (15 minutes and 30 days, HttpOnly, set only when you sign in). ri_li — a flag so the page knows a session exists (30 days, set only when you sign in). ri_consent — your analytics choice (180 days). ri_geo_country — your approximate country (180 days, see above).

Local storage holds preferences you set yourself: display currency (ri_display_currency), watchlist (ri_shortlist), saved searches (ri_saved_searches) and country override. These stay in your browser, except the watchlist, which is also stored on our servers once you sign in so it follows your account.

We do not run third-party advertising and we do not set cross-site tracking cookies.

Plausible Analytics (Plausible Insights OÜ, Estonia) — runs on every page. Cookieless and does not track you across sites. Collects URL, referrer, browser, device type, and a coarse country derived from your IP. The IP itself is used only to compute the country and is not stored or shared. Lawful basis: legitimate interest (GDPR Art. 6(1)(f), LGPD Art. 7(IX), KVKK Art. 5(2)(f)).

PostHog (PostHog Inc., United States) — product analytics that helps us understand which markets get attention and where the site needs work. In the strict-consent regions listed below it loads only after you accept in the cookie banner (lawful basis: consent, GDPR Art. 6(1)(a) / ePrivacy Art. 5(3)). Elsewhere it loads by default and you can refuse in the notice banner or in Cookie settings at any time (lawful basis: legitimate interest). Collects pageviews, clicks, and form interactions such as viewing, submitting, or abandoning an enquiry, together with your country and the project concerned; sets cookies prefixed ph_ and a __posthog entry in local storage. Session replay is disabled. Transfer to the US relies on Standard Contractual Clauses. Data is retained for up to 14 months and then aggregated or deleted.

We show the consent banner as a blocking modal for visitors browsing from the EU, EEA, the United Kingdom, Gibraltar, Jersey, Guernsey, the Isle of Man, Switzerland, Türkiye, Brazil, and Canada, and for visitors whose country we cannot determine — and as a non-blocking notice for visitors elsewhere. If your browser sends a Global Privacy Control signal, we treat that as a refusal and do not load PostHog.

Open Cookie settings in the footer of any page to review your current choice and switch it. Withdrawing consent is as straightforward as granting it (GDPR Art. 7(3)). When you withdraw, we stop further PostHog tracking immediately and clear the identifiers it stored in your browser. Events recorded before withdrawal remain in PostHog’s system until they reach the 14-month retention horizon, unless you ask us to delete them sooner.

This service is not directed to anyone under 18. If you believe a child has provided information to us, write to hello@residenceinvest.com and we will delete it.

If we make material changes to this notice, we will say so on this page with a new date and, where appropriate, notify registered users by email.