Privacy Policy

Last updated: 8 August 2026. This policy explains how Aether Group (“we”, “us”, “Aether”) collects, uses and protects personal data through the Aether website, agency platform and mobile marketplace apps (together, the “Service”). We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Cyprus law providing for the protection of natural persons with regard to the processing of personal data (Law 125(I)/2018).

1. Controller and contact

The data controller is Aether Group, based in Cyprus. For any privacy matter, or to exercise your rights, contact us at privacy@aetherprop.com. Where we have appointed a Data Protection Officer or EU representative, their details are available on request at the same address.

2. The personal data we collect

Agency account data — name, work email, role, and the agency you belong to.
Marketplace account data (buyers/sellers) — name, email, phone, and account type.
Enquiry & lead data — name, email, phone, budget, timeline, financing preference and the message you submit when you enquire about a listing or post a “want”.
In-app messages — the content of messages you exchange with owners/agencies through the Service.
Listing & owner data — property details and owner contact information supplied by sellers/agencies. Owner contact details are never shown publicly.
Valuation inputs — the property attributes you enter to obtain an indicative valuation, and any email you give to receive it.
Marketing subscribers — email address (and name, if given) when you opt in to updates.
Partner-referral data — details you submit when you ask to be connected to a mortgage, legal, survey, currency or relocation partner.
Payment data — where you buy a paid feature, payment is processed by Stripe; we receive confirmation and limited billing metadata but not your full card number.
Technical & usage data — device and app version, IP address, and server logs needed to run and secure the Service.

3. Why we use it and our lawful bases

To create and operate your account and provide the Service — performance of a contract (Art. 6(1)(b)).
To route enquiries, deliver requested valuations and connect you with partners — performance of a contract and/or consent (Art. 6(1)(a)) given when you submit a form.
To send marketing updates you opted into — consent, which you can withdraw at any time.
To secure the Service, prevent fraud/abuse and improve features — legitimate interests (Art. 6(1)(f)).
To take payment and keep accounting records — performance of a contract and legal obligation (Art. 6(1)(c)).
To comply with law and respond to lawful requests — legal obligation.

4. Owner and buyer privacy by design

Property owners’ contact details are never displayed publicly on the marketplace. Buyer enquiries are routed through Aether, and contact details are only exchanged where there is a match and with the parties’ agreement. You must not use data obtained through the Service for unsolicited marketing or to circumvent this process.

5. Who we share data with

We do not sell personal data. We share it only with:

the agency/agent or seller handling your enquiry or listing;
a partner you explicitly ask to be connected to (mortgage, legal, survey, currency, relocation);
processors acting on our instructions under contract — including Supabase (hosting, database, authentication), Stripe (payments), our email/notification provider, and Apple/Google for app distribution and crash reporting;
authorities, advisers or acquirers where required by law or in connection with a corporate transaction.

6. International transfers

Some processors may process data outside the European Economic Area. Where they do, we rely on an adequacy decision or appropriate safeguards under the GDPR, such as the European Commission’s Standard Contractual Clauses. A copy of the relevant safeguard is available on request.

7. How long we keep it

Account data — for as long as your account is active, then deleted or anonymised within a reasonable period after closure.
Enquiries, leads, messages and buyer requests — typically up to 24 months after the last interaction, unless a transaction or legal need requires longer.
Payment and accounting records — for the period required by Cyprus tax and company law (generally 6 years).
Marketing subscribers — until you unsubscribe.

8. Your rights

Subject to the GDPR, you have the right to access your data; to rectify inaccurate data; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. To exercise any right, email privacy@aetherprop.com; we respond within one month. In the app, you can also delete your account from Account → Delete account.

If you believe we have not handled your data lawfully, you may lodge a complaint with the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus, commissioner@dataprotection.gov.cy, https://www.dataprotection.gov.cy.

9. Automated decisions

Indicative valuations are generated by a rule-based model and are estimates only; they do not produce legal or similarly significant effects and are not a substitute for a professional valuation. We do not carry out solely automated decision-making that produces legal effects concerning you.

10. Children

The Service is intended for users aged 18 or over and is not directed at children. We do not knowingly collect data from minors.

11. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security. No system is perfectly secure; please keep your login credentials confidential.

12. Changes

We may update this policy from time to time. The current version is always available here, and we will notify you of material changes where required.

13. Contact

Aether Group, Cyprus — privacy@aetherprop.com.