Privacy policy
Last updated: 26 October 2026
Courtesy translation. If there is any difference, the Spanish version prevails. See the Spanish version
This policy explains what personal data we process when you use ROInmuebles, why, and what rights you have, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Controller: Adrián Alonso Galindo (Tax ID 09845882L)
- Address: Calle Corfú, 41, Valdemoro (Madrid)
- Email for any privacy matter: soporte@roinmuebles.com
What data we process
- Your account: email and, if you give it to us, your name.
- Your investor profile (if you fill it in): country, percentage financed, interest rate, term, rental type, income tax base, rent prudence discount and the language of the website. And the answers to “Complete your profile”: experience, area of interest, year of birth and how you heard about us.
- What you save: your home and land analyses and, if you use “Share”, the calculator data included in that link (only the form figures and the name you gave the analysis). Anyone with the link can see them.
- Your map searches: the area, the radius, the filters and the average prices of the area. The listings each search brings are not your data: they are kept for 48 hours at most and without photos or descriptions.
- Your alerts (Basic and Max plans): the areas you choose to watch, with their radius, filters and your minimum yield, until you delete them. Every week we look in them for the flats listed that week and email you the best ones.
- The listings you analyse (“Paste a listing”): the listing code and the date, to count your analyses for the month, for 35 days. If you don’t have an account, instead of your account we keep an encrypted digest of your IP address that changes every month and doesn’t reveal what it is. The listing data (without photos or descriptions) is kept for 48 hours.
- Your plan: the plan taken out, its status and dates, and the customer and subscription identifiers Paddle gives us; if you buy the trial week, when you bought it, when it ends and whether it was taken off your first payment. We never see or store your card details: Paddle handles them.
- If you agree to receive news: that you agreed, and the date you did so or withdrew it.
- If you ask us to email you a calculation or the Excel template (without an account): your email, the language, the page you asked from, the date and the text you saw next to the button, and the figures of that calculation to send it to you. If you asked from the «Where do rentals yield the most?» quiz (on the website until 22/10/2026), we also keep your answers (what you were looking for, the price of flat you had in mind and where), to make the news we send you relevant.
- Where you came from: if you arrive through a link with campaign tags (the “utm” tags in our ads, emails and posts), those tags, the first page you saw and the website you came from. Your browser doesn’t store them: we only receive them if you create an account, leave us your email or open the payment page, and we keep them with that account, that email or that payment (for payments, Paddle too).
- Technical data: IP address and server logs, so the website works and to prevent abuse (for example, limiting calculations without an account). For statistics, the IP is only used for a moment to calculate an anonymous code that changes every day; it isn’t stored.
- If you accept advertising cookies: the identifiers of those cookies, the ROInmuebles pages you view, whether you came from one of our ads and whether you create an account, leave your email, open the checkout or pay (with its price). Never your email, your name or your calculations.
What we use it for and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service: your account, the calculations, saving, the comparison, the map, the reports and the warning about your age at the end of the mortgage (with your year of birth). | Performance of the contract (art. 6.1.b) |
| Managing your plan and payments. | Performance of the contract and legal obligations (art. 6.1.b and 6.1.c) |
| Sending you news by email, only if you tick the box (it is never pre-ticked): this includes some automatic emails, such as the welcome, tips on using the website or a reminder if you leave a payment unfinished. To make it relevant, we use your answers to “Complete your profile”, your plan and how you use the website (for example, the region of your calculations or whether you haven’t signed in for a while). You can withdraw whenever you like in Your account or with the link in each email. | Your consent (art. 6.1.a) |
| Emailing you the calculation, guide or Excel template you ask for in the calculators, guides, city pages or roinmuebles.com/inicio and, as stated next to the «Send it to me» button, our news and tips. You can unsubscribe from the news at any time with the link in each email. | Your consent (art. 6.1.a) |
| Measuring our ads (whether you came from one and whether you then created an account, left your email or paid) and showing you our ads on Google, Instagram and Facebook, only if you accept advertising cookies. You can withdraw it at any time under “Cookie settings”, at the bottom of every page. | Your consent (art. 6.1.a GDPR and art. 22.2 LSSI) |
| Website security and abuse prevention. | Legitimate interest (art. 6.1.f) |
| Aggregate, cookie-free usage statistics and error detection, to improve the website. | Legitimate interest (art. 6.1.f) |
| Knowing which ads, emails and posts bring us accounts and customers (where you came from), to decide where to spend on advertising. | Legitimate interest (art. 6.1.f) |
| Answering what you write to us. | Performance of the contract or legitimate interest |
We don’t take automated decisions with legal effects on you or build profiles for purposes other than those above.
Who we share it with
We don’t sell your data. These providers (processors) handle it on our behalf and under contract. Paddle, as merchant of record for payments, also processes the payment data as an independent controller, under its own privacy policy. If you accept advertising cookies, Google and Meta receive the data from those cookies and decide on their own how to use it (they are controllers, under their policies: Google and Meta).
| Provider | Purpose | Where |
|---|---|---|
| Supabase | Database and user accounts (email, profile, saved analyses, searches). | European Union or USA, depending on the project region |
| Vercel | Website hosting and cookie-free visit statistics. | USA and European Union |
| PostHog | Website usage statistics (pages viewed, buttons used) and error detection, without cookies: it counts visits with an anonymous code that changes every day, stores nothing in your browser and doesn’t know who you are. | European Union (Germany) |
| Paddle | Payments. It acts as the merchant of record (reseller): it charges you, issues the invoice and applies your country’s VAT. | United Kingdom and other countries, with GDPR safeguards |
| Apify | Runs the listing searches on the portals and reads the listings you paste. It only receives the area, the filters or the listing code, never your personal data. | USA and European Union |
| Mapbox | Maps and address search: it receives what you type in the search box and your browser’s IP address. | USA |
| Resend | Sending emails (access to your account, the calculations and template you ask for and, if you agree, news). | USA |
| Only if you choose “Continue with Google”: it gives us your email and your name. | USA | |
| Google (Google Ads) | Only if you accept advertising cookies: it measures which ads bring us accounts and payments and shows our ads. | USA and Ireland |
| Meta (Facebook and Instagram) | Only if you accept advertising cookies: it measures which ads bring us accounts and payments and shows our ads. | USA and Ireland |
International transfers
Some providers are in the United States. Those transfers are made with GDPR safeguards: the EU-US Data Privacy Framework when the provider has joined it, or the European Commission’s standard contractual clauses.
How long we keep it
- Your account data, for as long as you have the account. If you delete it, the data is erased, except what the law requires us to keep (for example, payment data, for the tax and commercial periods).
- Consent to receive news, until you withdraw it (and proof that you gave it, while a claim is possible).
- The email you leave to receive a calculation or the template, while you keep receiving news; if you unsubscribe, only the proof that you gave and withdrew permission, while a claim is possible.
- Share links, for as long as you have the account (if you delete it, they are erased and stop working).
- Where you came from, for as long as you have the account or your email stays on our list (if they are deleted, it is deleted with them).
- Search listings, for 48 hours at most.
- What you chose in the cookie notice, 12 months in your browser; advertising cookies, as stated in the cookie policy.
- Server technical logs, for the minimum time set by the hosting provider.
Your rights
You can ask us for access to your data, its rectification or erasure (including deleting your account), the restriction of or objection to its processing, and its portability, and withdraw your consent at any time. Write to us at soporte@roinmuebles.com from your account’s email address. We will reply within one month at most.
If you think we haven’t handled your data properly, you can complain to the Agencia Española de Protección de Datos (aepd.es) or to the authority of your country.
Minimum age
ROInmuebles is for people aged 18 or over. If you are under 18, don’t create an account.
Changes
If we make an important change to this policy, we’ll tell you on the website or by email before it applies. What we do with cookies is in the cookie policy.