Privacy Policy
Last updated: March 22, 2026
1. Information We Collect
ReppingDR collects information you provide directly, such as your name, email address, and phone number when you create an account, submit an inquiry, or contact a developer. We also collect usage data including pages visited, search queries, and property interactions to improve our service.
2. How We Use Your Information
We use your information to:
- Provide and maintain our real estate listing platform
- Connect you with property developers and agents
- Send property alerts and market updates you've opted into
- Improve our search algorithms and recommendations
- Prevent fraud and ensure platform security
3. Information Sharing
We share your contact information with property developers only when you explicitly submit an inquiry or request information about a listing. We do not sell your personal data to third parties. We may share anonymized, aggregated data for market analysis purposes.
4. Data Storage & Security
Your data is stored securely using Google Cloud infrastructure with encryption at rest and in transit. We retain your account data as long as your account is active. You may request deletion of your data at any time by contacting us.
5. Cookies & Tracking
We use essential cookies for authentication and session management. We use analytics tools to understand how visitors interact with our platform. You can disable cookies in your browser settings, though some features may not function properly.
6. Your Rights
You have the right to:
- Access and download your personal data
- Correct inaccurate information
- Request deletion of your account and data
- Opt out of marketing communications
7. Contact
For privacy-related questions or requests, contact us at privacy@reppingdr.com
8. Third-Party Service Disclosures
ReppingDR integrates with the following third-party services to operate the platform. Each service receives only the data necessary to perform its function. We encourage you to review their individual privacy policies.
Firebase & Google Cloud (Authentication, Database, Storage)
Firebase Auth handles user account creation, sign-in, and session management. Firestore stores your account profile, saved searches, and inquiry history. Firebase Storage holds profile photos and uploaded documents. Google Cloud provides the underlying infrastructure for all of the above, including encryption at rest and in transit.
Data received: Email address, display name, profile photo, account activity, device identifiers.
Vercel (Hosting, Analytics, Speed Insights)
ReppingDR is hosted on Vercel's global edge network. Vercel Analytics and Speed Insights collect anonymized, aggregated performance and usage data to help us understand page performance and visitor behavior. No personally identifiable information is shared with Vercel Analytics — IP addresses are not stored.
Data received: Page views, referrer URLs, device type, browser type, country-level location (anonymized), Core Web Vitals metrics.
Mapbox (Maps & Location Data)
We use Mapbox to render interactive property maps on listing pages and in the search interface. When you interact with a map, your browser sends tile requests to Mapbox servers, which may include your approximate location if you use the “near me” feature. We do not store your location data.
Data received: IP address (for tile delivery), viewport coordinates, map interaction events.
Anthropic Claude API (AI Property Enrichment)
We use Claude to enrich property listings — generating descriptions, extracting structured data from developer documents, and improving listing quality. This processing happens server-side as part of our ingestion pipeline. Property data (price lists, brochures, floor plans) is sent to Anthropic's API for analysis. No personal user data is sent to Anthropic.
Data received: Property documents and listing content (no user PII).
OpenAI (Image Analysis)
OpenAI's Vision API is used to analyze property images — specifically scanned PDFs and documents where standard text extraction is insufficient. This is a server-side operation performed during data ingestion. No personal user data or user-uploaded images are sent to OpenAI.
Data received: Property document images (no user PII).
DeepSeek (Text Extraction & AI Chatbot)
DeepSeek powers two functions on ReppingDR: (1) server-side text extraction from property documents during ingestion, and (2) Sofia, our AI real estate assistant chatbot. When you interact with Sofia, your messages are sent to DeepSeek's API to generate responses. Conversations are not stored beyond the active session.
Data received: Property document content (ingestion); chat messages you send to Sofia (chatbot).
Resend (Email Delivery)
Resend handles transactional email delivery — account confirmations, inquiry notifications, property alerts, and other platform-triggered emails. Email content is transmitted through Resend's infrastructure and subject to their data processing terms.
Data received: Recipient email address, email content, delivery status.
9. GDPR — Rights for EU Residents
If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) applies to your personal data. This section explains our legal basis for processing and your rights under GDPR.
Legal Basis for Processing
- Contractual necessity: Processing your account information, inquiries, and property alerts is necessary to provide the service you signed up for.
- Consent: Marketing communications and analytics cookies are processed only with your explicit consent. You may withdraw consent at any time.
- Legitimate interest: Platform security, fraud prevention, and product improvement are processed under legitimate interest — these activities do not override your rights.
Your Data Subject Rights
- Right of access: Request a copy of all personal data we hold about you.
- Right to rectification: Correct any inaccurate or incomplete personal data.
- Right to erasure (“right to be forgotten”): Request deletion of your account and associated personal data. We will process this within 30 days.
- Right to data portability: Receive your personal data in a structured, machine-readable format (JSON) for transfer to another service.
- Right to object: Object to processing based on legitimate interest, including profiling for property recommendations.
- Right to restrict processing: Request that we limit how we use your data while a dispute is resolved.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Data Retention
- Account data: Retained for the lifetime of your account, plus 90 days after deletion to allow for dispute resolution.
- Inquiry history: Retained for 24 months to support follow-up communications with developers.
- Analytics data: Aggregated and anonymized — no retention limit applied to personal data.
- Chat conversations (Sofia): Not stored beyond the active browser session.
International Data Transfers
ReppingDR operates in the Dominican Republic. Our infrastructure relies on US-based services (Google Cloud, Vercel, Anthropic, OpenAI, DeepSeek, Resend). When your data is transferred from the EEA to the United States or Dominican Republic, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, or the data processing agreements maintained by each service provider. By using ReppingDR, you acknowledge that your data may be processed outside the EEA.
How to Exercise Your Rights
Submit any GDPR rights request to privacy@reppingdr.com. Include your full name, email address on file, and a description of the right you wish to exercise. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10. CCPA — Rights for California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding your personal information.
Categories of Personal Information We Collect
- Identifiers: Name, email address, phone number, account ID.
- Commercial information: Properties viewed, inquiries submitted, saved listings.
- Internet activity: Pages visited, search queries, click events, session duration.
- Geolocation data: Country and region (derived from IP address); precise location only if you opt into “near me” search.
- Inferences: Property preferences and market interest derived from platform activity.
Your California Consumer Rights
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to delete: Request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, security, legal obligations).
- Right to correct: Request correction of inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing: See the “Do Not Sell or Share” statement below.
- Right to non-discrimination: We will not deny you services, charge different prices, or provide a different level of service because you exercised any of these rights.
Do Not Sell or Share My Personal Information
ReppingDR does not sell your personal information to third parties, and we do not share your personal information with third parties for cross-context behavioral advertising purposes. We share data only as described in Section 3 (Information Sharing) and Section 8 (Third-Party Services) above — all of which are service providers operating under data processing agreements, not buyers of your data.
How to Exercise Your California Rights
Submit a verifiable consumer request to privacy@reppingdr.com with the subject line “CCPA Request”. You may submit up to two requests per 12-month period. We will respond within 45 days, with a possible 45-day extension if needed.
11. Cookie Policy
ReppingDR uses cookies and similar technologies to operate the platform, measure performance, and improve your experience. Below is a breakdown of every cookie category in use.
Essential Cookies
These cookies are required for the platform to function and cannot be disabled. They do not track you across other sites and contain no personally identifiable information beyond what is necessary to maintain your session.
- Authentication token: Set by Firebase Auth when you sign in. Maintains your logged-in state across page loads. Expires when you sign out or after 30 days of inactivity.
- Session preferences: Stores your selected language (EN/ES) and currency display preference (USD/DOP). Session-scoped, expires when you close the browser.
- CSRF protection: Prevents cross-site request forgery on form submissions. Session-scoped.
Analytics Cookies
We use Vercel Analytics to understand how visitors interact with ReppingDR. This service collects anonymized, aggregated data — no user profiles are built, and IP addresses are not stored. Analytics cookies are only set if you have not opted out via your browser's Do Not Track signal.
- Vercel Analytics (_vercel_analytics): Tracks page views, referrer, device type, and country. Anonymized — no cross-site tracking. Expires after 90 days.
Performance Cookies
Vercel Speed Insights measures real-user performance metrics (Core Web Vitals) to help us identify and fix slow pages. This data is aggregated and not linked to individual user accounts.
- Vercel Speed Insights (_vercel_speed_insights): Captures LCP, FID, CLS, TTFB, and FCP metrics per page. No personal data collected. Session-scoped.
Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, and to block cookies from specific sites. Note that disabling essential cookies will prevent you from signing into your account. Instructions for major browsers:
To opt out of Vercel Analytics specifically, enable the “Do Not Track” setting in your browser. Vercel respects this signal and will not set analytics cookies.