Privacy Policy
Estava is a real-estate management platform used by real-estate companies and their teams. Your account is created for you by the company you work with, and that company remains the owner and controller of its business records. This page explains what the Estava app and platform collect, why, and how it is protected.
What the app collects
- Account data: your name, your work email, and your password (stored as a one-way hash), plus a session token after sign-in.
- Business records your company manages in the system: client names and phone numbers, properties, contracts and their values, instalments, commissions and treasury figures.
- Search queries you type inside the app.
- Precise location — while the app is open only, and only at attendance check-in and check-out when your company enables geofenced attendance. The app never reads your location in the background.
- Camera images: an attendance selfie when your company requires one, and any documents or photos you choose to attach yourself.
- A short voice recording when you use voice dictation — it is transcribed to text and then deleted; it is not kept on your device and not stored on our servers.
Biometrics stay on your device
App Lock uses the fingerprint or face recognition of your own device, through the operating system. Biometric data never leaves your device and is never sent to Estava.
AI features
Voice recordings are transcribed by an AI service and then deleted. Messages drafted by AI for clients are proposals only: a staff member reviews and approves them before anything is sent.
What we never do
The app contains no advertising SDK, no analytics or tracking SDK, and no third-party crash reporter. We do not sell data, and we do not track you across other apps or websites.
Security
All traffic is encrypted in transit (HTTPS). Passwords are stored as one-way hashes. Each company works inside its own isolated tenant, and sensitive integration keys are encrypted at rest.
Retention and deletion
Business records belong to the company that operates your account and are retained according to its policies and the law. To delete your personal account, see: Account Deletion
Contact us
For any question about this policy or about your data, write to us:
Effective date: 21 September 2026. We will update this page whenever the policy changes.