1. Who we are
This Privacy Policy is issued by Ovela Interactive SL ("Ovela", "we", "us"), operator of IIPE — International Intelligent Property Exchange ("IIPE", "the Platform"). It applies to all visitors, registered members, listing owners, professional partners, buyers and studio clients.
Primary jurisdiction: European Union (primary) with global reach. Contact: david.macieira@ovelainteractive.com.
Effective from 9 July 2026. Version 1.0.
2. Data we collect
Account data: name, email, password hash, company/agency name, phone, profile photo, preferred language.
Listing data: property details, addresses, photos and video you upload, pricing and any material you choose to share for cinematic production.
Transactional data: purchases of memberships, reports, marketing packages and add-ons, together with billing information handled by our payment processor (Stripe).
Communications: messages you exchange with Mirella (our AI concierge), enquiries submitted to professionals, bookings, and email correspondence.
Technical data: IP address, device and browser identifiers, cookies and similar technologies, usage logs, error diagnostics.
Voice data (opt-in only): if you use Mirella's voice mode we temporarily process audio via ElevenLabs for speech-to-text and text-to-speech; audio is not retained after the exchange ends.
3. Legal bases (Art. 6 GDPR)
Contract (Art. 6(1)(b)): to create and operate your account, deliver purchased services, produce and publish your listings, process payments and provide support.
Legitimate interest (Art. 6(1)(f)): platform security, fraud prevention, service improvement, aggregated analytics, defence of legal claims.
Legal obligation (Art. 6(1)(c)): tax, accounting, anti-money-laundering, records retention, cooperation with authorities.
Consent (Art. 6(1)(a)): non-essential cookies, marketing communications, voice processing, and inclusion of your enquiries in Cortex training material.
4. IIPE Cortex — Artificial Intelligence
Cortex is IIPE's proprietary intelligence engine. It powers Mirella and generates property, investment, country and relocation reports.
Personal data (your name, email, phone) is never used to train Cortex.
Property-level content you publish (address, photos, description, price) may be indexed by Cortex to enable retrieval and referencing while a listing is active.
Cortex retrieval requests are logged with anonymised session identifiers to measure knowledge coverage; the logs do not contain your name or email.
See our AI Transparency Notice for a plain-language explanation.
5. Sharing your data
Payment processing: Stripe Payments Europe Ltd (Ireland).
Email delivery: Mailgun via Lovable Cloud infrastructure, from our verified sender domain notify.iipe.exchange.
Hosting & database: Supabase (data hosted in the EU) and Cloudflare (edge delivery).
AI vendors: OpenAI, Anthropic, Google (LLM inference), ElevenLabs (voice), Cloudinary (media). Processing is carried out under Data Processing Addenda and, where relevant, EU Standard Contractual Clauses.
Professional partners: contact information for enquiries you deliberately submit through the Professionals directory.
Authorities: only where legally required.
We do not sell personal data.
6. International transfers
Where a processor is outside the EU/EEA, transfers rely on EU Standard Contractual Clauses and, where applicable, supplementary measures. A copy of the relevant safeguards is available on request from david.macieira@ovelainteractive.com.
7. Retention
See our Data Retention Policy for full detail. In summary: account data is kept while your account is active plus 12 months; transactional records are kept for 10 years (statutory accounting); listing data is deleted or anonymised on request or on account closure; voice audio is not retained; Cortex logs are anonymised after 90 days.
8. Your rights (Art. 15–22 GDPR)
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with your supervisory authority.
Request handling: use Account Settings → Data & Privacy, or email david.macieira@ovelainteractive.com. We respond within 30 days.
9. Security
Encryption in transit (TLS 1.2+) and at rest, hardened role-based access control, row-level security on every user table, restricted admin accounts, and continuous monitoring. Any confirmed personal data breach is notified to the supervisory authority within 72 hours and to affected users without undue delay.
10. Contact & complaints
Data controller: Ovela Interactive SL. Privacy contact: david.macieira@ovelainteractive.com.
You may lodge a complaint with your national data protection authority. Because IIPE operates EU-wide, the Spanish AEPD acts as lead supervisor.