Privacy Policy

Zestate is a real-estate platform connecting buyers, agents and agencies. In this policy “we”, “us” and “Zestate” mean the operator of the Zestate website and mobile apps. Contact: zestateco@gmail.com.

• Account data — your name, email, phone number and, for agents, agency details, CNIC and licence documents submitted for verification.

• Listings & media — property details, photos and video reels (including their audio) that agents and sellers upload, including images processed for AI virtual staging.

• Activity — properties you view, save, search and enquire about, messages you send through the platform, comments and reviews you post, and voice-search recordings (transcribed to text to run your search; the audio itself is not stored).

• Payment data — plan/credit purchases are processed by our payment provider; we store transaction records, not your full card details.

• Technical data — device and browser information, account identifiers, push-notification tokens (so alerts can reach your device), and — on the website — approximate location derived from your internet connection, used only to operate and secure the service. The mobile app never accesses your device's GPS location.

To provide and improve the service, match buyers with agents and listings, power AI features (search, descriptions, valuation, staging), process payments, verify agents, send service and lead notifications, prevent fraud, and comply with law.

Some content (search queries, listing details and photos, buyer questions) is processed by third-party AI models to generate descriptions, virtual staging, valuations and answers. AI outputs are estimates and assistance only — they are not professional or financial advice.

We share data with providers who process it on our behalf, including Supabase (authentication, database, storage), Google (Gemini AI features and Firebase push notifications), Replicate (AI virtual staging of listing photos), Groq (voice-search transcription), our payment gateway (Safepay), and our email provider. Some of these may process data outside your country. We only share what is needed to deliver the service.

When you contact an agent, your name, phone and message are shared with that agent (and their agency) so they can respond. Agents are contractually required to use this only to serve your enquiry.

We keep your data while your account is active and as needed for legal, accounting and dispute-resolution purposes. You can ask us to delete your account and associated personal data.

You may access, correct or delete your personal data, and object to certain processing, by emailing zestateco@gmail.com. We will respond within a reasonable time.

We use industry-standard measures (encryption in transit, access controls, row-level security) to protect your data. No system is perfectly secure; please use a strong, unique password.

Zestate is intended for users aged 18 and over. We do not knowingly collect data from children.

If you choose to sign in or verify your account with a phone number, we send you a one-time passcode by SMS. These messages are transactional only — we never send marketing or promotional SMS. You consent by entering your own phone number and requesting a code; you receive one message per sign-in or verification attempt. Message and data rates may apply. Reply STOP to opt out, or email us to have your number removed — phone sign-in will then be unavailable and you can continue with email or Google. We do not sell or rent phone numbers, and we share them only with the SMS provider that delivers your code.

We may update this policy; material changes will be posted here with a new “last updated” date.