Privacy Policy

This Privacy Policy is available in Portuguese and English. In case of discrepancy, the Portuguese version prevails.

Last updated: 24 October 2026

1. Data Controller

Hotopics Unipessoal Lda, the owner of the website FrontPoint.io (registered office and tax number: see Legal information), telephone number 922 111 910 (hereinafter referred to as Hotopics), is the data controller of the personal data sent through our website, its sub-domains, or our apps (hereinafter referred to as the “Website and Apps”).
We provide information about your rights and how we use your personal data, whether you are a User, Private Seller, or Real Estate Broker, by virtue of the GDPR.
For queries related to the processing of your personal data, contact us at info@frontpoint.io.

2. Purpose of Processing

• Manage your personal data to render services requested through the Website and Apps, such as signing up, managing searches, contacting advertisers, posting advertisements, and contact chat.
• Process your data to manage claims or queries.
• If you are a User or Private Advertiser, we may send you promotional messages with your express consent.
• Create a profile to show you similar properties that may be of interest based on your activity.
• When you are signed in and view a professional's contact details, record who viewed them, for which listing and when, and share that record with the professional so they can follow up on your enquiry. The legal basis is our legitimate interest in connecting you with the professional you chose to contact.
• If you are a representative of a Professional Advertiser, we manage your data to maintain contact and develop the business relationship.
• Process personal data to manage any claims for payment due amounts.
• If you buy a report or a plan: process the order and the payment, add and track your report credits (including free promotional credits), supply the report, issue the invoice, handle refunds, withdrawals and payment disputes, keep proof of your consent to immediate supply (what you accepted, the Terms version and when), and prevent fraud and abuse of free credits.

3. Legal Basis

• Contractual relationship: Applicable when you request one of our services.
• Legitimate interest: To handle queries and claims, manage payments, and invite you to events.
• Your consent: For sending promotional messages and marketing communication.
• Legal obligation: To issue invoices, report them to the Portuguese Tax Authority and keep accounting and tax records, and to keep proof of the information and consents that consumer law requires for online sales.

4. Recipients

• To advertisers, mortgage partner companies, or partner companies of Hotopics for direct marketing, with your consent.
• To courts, tribunals, or public authorities for legal requirements.
• To third parties in the real estate sector, energy companies, insurance companies, and other companies when you have accepted this.
• Service providers acting on our behalf (hosting, email delivery, analytics), bound by data processing agreements.
• Stripe (Stripe Payments Europe, Limited, Ireland), which processes payments, subscriptions and refunds on our behalf. You enter your card or bank details directly with Stripe; we never receive your full card number, only the information needed to manage the purchase (such as the card brand, its last four digits and the payment status). Stripe is also an independent controller for its own purposes, such as fraud prevention and its anti-money-laundering and other legal obligations, as described in its privacy policy (stripe.com/privacy).
• InvoiceXpress, Lda. (NIPC 508 025 338, Avenida Duque D’Ávila, n.º 46, 3.º A, 1050-083 Lisboa, Portugal), our certified invoicing software, which issues the invoices on our behalf with your name, billing address, NIF or VAT number and the purchase details.
• The Portuguese Tax and Customs Authority (Autoridade Tributária e Aduaneira), to which invoice data is communicated by law.

5. International Data Transfers

We host your account data in the European Union (Supabase, Frankfurt) and send emails through Brevo (France). Stripe may process payment data in the United States and other countries where its group operates. If you accept analytics or marketing cookies, Google, Microsoft and Meta may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. Details are in our Cookie Policy.

6. Period for Storing Your Data

• During the contractual relationship, while using our services.
• Until the query or claim has been settled.
• Until you revoke your consent.
• If you are a representative or contact person, during the contractual relationship with the company you represent.
• Until you request cancellation.
• Invoices and the accounting records of each payment: 10 years from the end of the year of the payment, as required by Portuguese tax law (article 52 of the VAT Code), even if you delete your account.
• Order, payment, refund and consent records (including the proof of your consent to immediate supply and of the waiver of the right of withdrawal): 10 years from the end of the year of the purchase, the same as the invoices, even if you delete your account.

Your data will remain blocked during the time-barring periods of obligations for each purpose stated in section 2.

7. Required Updated Information

When you click on the “Ok, let’s go” button, you state that the information and data provided are correct and true. Please update your information as soon as possible by contacting info@frontpoint.io.

8. Rights of Data Subjects

• The right to access your personal data.
• The right to rectify any inaccurate personal data.
• The right to cancel your personal data.
• The right to request restriction of your data processing.
• The right to oppose processing of your personal data.
• The right to the portability of your data.
• The right to revoke your consent.

When logged in, you can exercise most rights yourself in My account > Privacy and data: download a copy of your data (JSON), see and withdraw your consents, choose which emails you receive, and delete your account. Every email we send also has a one-click unsubscribe link. For anything else, write to info@frontpoint.io; we answer within one month. You can also complain to the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt).

8a. Deleting Your Account

You can delete your account in My account > Privacy and data, or by writing to info@frontpoint.io. Your public profile is hidden at once. After 30 days we permanently delete your account, profile, photos, saved searches, favourites, conversations, community posts and comments, valuation requests and email preferences, and remove you from our email lists. Until then you can cancel the request in Settings. If you are a professional, your listing, its photos and the contact requests it received are deleted too. If you viewed a professional's contact details, the professional keeps the record of that request, but without your identity. We keep only a record of the consents you gave, without your contact details, as proof that we met our legal obligations, and, if you bought anything, the invoices and payment records for the periods in section 6. Deleting your account ends any paid plan at the end of the period already paid, and unused report credits are lost. If you signed in with Facebook, this is also how you ask us to delete the data we received from Facebook.

9. Confidentiality and Security

We apply strict security levels to protect the personal data we process, considering the nature and risks involved. However, we cannot be held responsible for the use of data not through our tools, Website, or Apps.

10. Additional Information

Hotopics will make a message archive service and internal messaging available on the Website and Apps. By accepting this Privacy Policy, you consent to Hotopics storing such chats and using automatic systems to check them.

We reserve the right to block access to the messaging service if we consider that the chats could contain malicious content, spam, or imply any risk for Users or Advertisers.

When signing up on the Website and Apps, you must specify a username and password. It is essential to keep the password secret and not share it with third parties.

We may use software and/or third-party services to passively collect data while you browse or interact with our website or Apps. This information is used to improve your experience and detect possible errors.

For more information on passively collected information, please review our Cookies Policy.