Privacy Policy
How we collect, use, and protect your personal information
Bali Estate Hub ("we," "our," or "us") operates the website baliestatehub.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Platform, create an account, use our AI chat feature, or interact with our services.
Account Data
When you create an account, we collect:
- Email address
- Password (stored in encrypted/hashed form)
- Full name
- Phone number (optional)
- Profile avatar (optional)
Google OAuth
If you sign in using Google, we receive:
- Your Google email address
- Your Google profile name
- Your Google profile picture (if available)
Contact Forms
When you submit property inquiries:
- Your name, email, and phone number
- Your message content
- The property listing you inquired about
AI Chat
When using our AI chat feature:
- Chat messages you send
- AI-generated responses
- Chat session metadata (timestamps, session IDs)
Automatic Data
Automatically collected when you visit:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website
- Geographic location (country/region level)
Google AnalyticsG-YDC04V596C
We use Google Analytics to understand how visitors interact with our Platform, including page views, navigation patterns, session duration, and traffic sources.
Service Provision
Operate our Platform, display listings, facilitate inquiries
Account Management
Create and manage your user account
AI Chat Processing
Provide AI-powered property assistance
Communication
Respond to inquiries and send notifications
Analytics
Analyze usage and improve our services
Security
Detect and prevent fraud, abuse, and security incidents
For users in the European Economic Area (EEA):
| Legal Basis | Purpose |
|---|---|
| Consent | Marketing, cookies, AI chat |
| Contract | Service provision when you create an account |
| Legitimate Interests | Analytics, security, Platform improvement |
| Legal Obligation | When required by applicable law |
Essential Cookies
| Cookie | Purpose | Expiry |
|---|---|---|
sb-* | Supabase authentication | Session |
Analytics Cookies (Google Analytics)
| Cookie | Purpose | Expiry |
|---|---|---|
_ga | Distinguishes users | 2 years |
_gid | Distinguishes users | 24 hours |
_gat | Throttles request rate | 1 minute |
Preference Cookies
| Cookie | Purpose | Expiry |
|---|---|---|
theme | Light/dark mode preference | 1 year |
Real Estate Agents
When you submit a property inquiry, we share your contact information with the relevant real estate agent to facilitate your request.
Service Providers
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, auth, storage | Account data, content | Singapore |
| OpenAI | AI chat processing | Chat messages | United States |
| Analytics, OAuth | Usage data, auth | United States | |
| Vercel | Hosting | Access logs | Global CDN |
Your personal data may be transferred to and processed in countries outside your country of residence, including the United States and Singapore. These countries may have different data protection laws.
We implement appropriate safeguards, including standard contractual clauses approved by relevant authorities, to protect your information during international transfers.
| Data Type | Retention Period |
|---|---|
| Chat History | 30 days |
| Account Data | Until deletion + 30 days |
| Lead/Inquiry Data | 2 years |
| API Access Logs | 90 days |
| Analytics Data | 26 months |
All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Opt-out: Unsubscribe from marketing communications
GDPR (EEA Residents)
- Data portability (receive data in structured format)
- Restriction of processing
- Object to processing based on legitimate interests
- Lodge a complaint with data protection authority
CCPA (California Residents)
- Know what personal information is collected
- Know if data is sold or disclosed and to whom
- Say no to sale of personal information (we do not sell)
- Equal service regardless of exercising rights
UU PDP (Indonesian Residents)
- Obtain information about processing
- Withdraw consent at any time
- Object to automated decision-making
- Delay or limit data processing
Encryption
All data transmitted via HTTPS/TLS
Password Security
Passwords hashed with industry algorithms
Access Controls
Row-level security (RLS) policies
Rate Limiting
Protection against automated attacks
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Our AI chat uses OpenAI's GPT-4.1-mini model
- •Messages sent to OpenAI servers for processing
- ✓Opted out of data training by OpenAI
- •AI responses may contain errors
- •Chat sessions retained for 30 days
- ✗NOT professional legal, financial, or real estate advice
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Bali Estate Hub
For privacy inquiries, data access requests, or to exercise your rights:
contact@baliestatehub.comUse subject line: "Privacy Request"