Privacy policy

Last updated 10 September 2026

Costa Del Sol Studio answers the phone for estate agencies on the Costa del Sol when nobody in the office picks up. Doing that means handling other people’s personal data — the agent’s, and the buyer’s. This page says exactly what we hold, why, and who else sees it.

Who we are

Costa Del Sol Studio operates this site and the service described on it. For anything on this page, including a request to see or delete your data, write to dimitri@fantera.app.

For the enquiries and calls that belong to an agency, the agency is the data controller and we are its processor: we handle that data on the agency’s instructions and for no purpose of our own. For this website and for our own contact with agencies, we are the controller.

What we collect

Agencies

The name, email address, phone number and office hours of the people we set the service up for, plus what they tell us while we do it.

Buyers who enquire

When someone enquires about a property through a portal or a form, we receive the details that enquiry carries: name, phone number, email address and the message. If our voice agent calls them back, we also hold a recording of the call, its transcript, and the facts the call establishes — budget, whether they are paying cash or with a mortgage, which areas they are looking in, and when they arrive. If a viewing is agreed, we hold the time, the property and the buyer’s name so the appointment can be created and the invitation sent.

Visitors to this site

Pages visited, roughly where in the world the visit came from, the browser used, and a recording of how the page was used. Inputs are masked in those recordings, so a phone number typed into the demo form is stored as asterisks, not as digits. If you give us a phone number to demonstrate the agent, we use it to place that one call.

Buyers who use our property quiz

Our advert pages ask seven quick questions — language, timing, budget, bedrooms, areas, wishes and when you can view — and save each answer as you give it, under a random id, so we can see where people stop. Nothing there identifies you. Your name, email address and phone number are asked only at the end, and only then does the profile become an enquiry that the agency named on the page receives. If you ask us to call you, our voice agent calls you about the homes shown, and that call is recorded as described below.

Those pages can also use Meta’s pixel, so we learn which advert brought you and Meta learns that its advert worked. The pixel sends nothing until you say yes on the page; say no and it stays off, and we remember your answer in your browser so you are not asked again. Meta processes that data under its own terms as a joint controller for the measurement.

Why we hold it

To answer an enquiry, book a viewing and tell the agency what was said — the service itself.
To keep our own agreement with an agency, and to invoice it if it ever pays us.
To keep the service working and safe: error reports, abuse prevention, and usage figures.

The lawful bases are performance of a contract, our legitimate interest in running and improving a service people asked for, and consent where you gave us a number to call.

Calls are recorded

Calls placed or received by the agent are recorded and transcribed so the agency has a record of what was agreed. The recording is available to that agency and to us; it is not shared with anyone else, and it is not sold. Ask us and we will delete a specific call.

Google user data

When an agency connects its Google Calendar, we read free/busy windows only — the times marked busy, never the titles, guests, or contents of any event — and we create viewing events that the agency has agreed on a call. We store an encrypted Google refresh token so the desk can do this while nobody is at the office. We do not use Google user data to train models, we do not sell or share it, and disconnecting the calendar from your desk page deletes the token immediately.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else processes it

We keep the list of companies involved short, and it is this one:

Vercel — hosting for this site and the service.
Supabase — the database the enquiries, calls and bookings are stored in.
ElevenLabs — places the calls and produces the recordings and transcripts.
Google — calendar free/busy and the viewing events, for agencies that connect it.
Resend — the email that carries the morning brief and the enquiries in.
PostHog — website analytics and session replay.
Cal.com — the booking form for a call with us.

Some of these are based in the United States, so data may be transferred there under the standard contractual clauses their terms include. Nobody outside this list gets the data, and we do not sell it to anyone.

How long we keep it

Enquiries, calls and bookings stay for as long as the agency uses the service, and are deleted within 30 days of it asking us to close its account. Website analytics are kept for 12 months. A Google refresh token is deleted the moment the calendar is disconnected.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to dimitri@fantera.app and we will answer within 30 days. If the data reached us through an agency, we will pass the request to that agency, since it is theirs to decide. If you think we have handled your data badly, you can complain to the Spanish data protection authority, the AEPD.

Changes

If this policy changes we will change the date at the top of the page. Anything that materially affects an agency, we tell that agency directly.