Privacy Policy

1. Who We Are

HomLista is operated by Suenitza LLC, a limited liability company incorporated in the State of Wyoming, USA, with mailing address at 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Registered agent: Registered Agents Inc (Wyoming).

Privacy contact: hola@homlista.com

Note: If you interact with HomLista from Mexico or the EU, we also follow the LFPDPPP (Mexico) and the GDPR (EU). In Canada we apply PIPEDA. In the USA, we apply the notices required by state privacy laws (e.g., California CCPA/CPRA) when applicable to our activity.

2. Data We Collect

2.1. Provided by you

• Name, email, phone, password, language and country.
• Information when creating an account, posting/searching properties and submitting forms (contact, leads, support).
• Preferences, interests and responses to surveys/promotions.

2.2. Collected automatically

• Technical data (IP, device, operating system, browser, online identifiers).
• Cookies and similar technologies (pixels/SDK) for analytics, marketing, fraud prevention and performance.
• Approximate location (derived from IP).

2.3. Financial data

• Payment data (tokenized by the payment provider), billing and receipts when applicable. <em>We do not store card numbers on our servers.</em>

2.4. Verification and security data

• Anti-fraud signals, activity logs, logs, and (if applicable) basic identity verification.

3. Purposes and Legal Bases

Purposes:

a) Provide and maintain the service (account management, listings, messaging between users and advisors).

b) Process payments and billing.

c) Personalize experience and recommend content.

d) Security: fraud/abuse prevention and detection, service quality.

e) Comply with legal/contractual obligations.

f) Marketing (with your consent where required by law) and campaign measurement.

Legal bases (GDPR):

• Contract performance (a, b).
• Legitimate interest (c, d), balanced with your rights.
• Consent (f, cookies/marketing where applicable).
• Legal obligation (e).

4. Cookies and Tracking Technologies

We use: Google Analytics, Meta Pixel (Facebook/Instagram), Google Ads, and CRM/anti-fraud tools. You can manage your preferences in the cookie banner and from your account settings. More details in our Cookie Policy (link in the footer).

5. Storage, Transfers and Security

Infrastructure: providers located primarily in the USA (e.g., hosting on DigitalOcean and Vercel).

International transfers: we apply Standard Contractual Clauses (EU) or other accepted mechanisms (e.g., DPF if the provider participates) and transfer impact assessments when necessary.

Security: encryption in transit and at rest where applicable, access controls, firewalls, monitoring and backups.

Retention: we retain data for up to 5 years from your last activity or as required by law; then we anonymize or securely delete it.

6. Who We Share Your Data With

We do not sell or rent personal data. We may share with:

• Processors: hosting, analytics, marketing, payments, customer service, verification and security — under data protection agreements.
• Authorities if required by law or valid legal request.
• Corporate operations (merger/sale), ensuring continued protection.

All third parties must comply with confidentiality and adequate security measures.

7. Your Rights

Mexico (LFPDPPP — ARCO rights): Access, Rectification, Cancellation, Opposition and revocation of consent.

EU/EEA (GDPR): access, rectification, erasure, restriction, portability, objection and not to be subject to automated decisions with legal effects.

Canada (PIPEDA): access and correction; right to file complaints.

USA (e.g., California CCPA/CPRA, if applicable): right to know, delete, correct, limit use of sensitive data, and opt-out of sales/"sharing" for behavioral advertising (where applicable to our activity).

To exercise them: hola@homlista.com You may also contact your local authority (e.g., INAI in Mexico, CNIL in France, OPC in Canada, data protection authority of your country).

8. Minors

The service is for individuals over 18 years of age. If we detect minor accounts, we will delete them.

9. Automated Decisions and Use of AI

We may use AI models for fraud detection, search improvement and support. We do not make decisions with significant legal effects exclusively automated without safeguards and legal basis. You can object where permitted by law.

10. Communications and Marketing Control

• You can withdraw your consent or unsubscribe from any email ("unsubscribe") or from your profile.
• Marketing via WhatsApp/SMS will require your prior consent where required by law.

11. How We Protect Your Privacy in Different Jurisdictions

• Mexico: we handle ARCO requests by email; we will respond within legal timeframes.
• EU/EEA: we apply GDPR; if we designate an EU representative, we will indicate it on this page.
• United Kingdom: we apply UK GDPR principles; if we designate a representative, it will be listed here.
• Canada: we adopt safeguards in accordance with PIPEDA and maintain consent records.
• USA: for residents of states with privacy laws (e.g., California), we offer visible opt-out controls if our activity falls within their scope.

12. Changes to This Policy

We may modify this Policy to reflect legal or service changes. We will notify relevant changes by email or notice on the platform, indicating the update date.

13. Contact

Email: hola@homlista.com
WhatsApp*: +52 998 228 6242

<strong>Mailing address (USA)*:</strong> Suenitza LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

<strong>Registered agent (WY):</strong> Registered Agents Inc.

*Note: this address corresponds to the registered agent in Wyoming, used only for legal and corporate notifications. We do not receive user correspondence at this address.