Privacy Policy

Last updated: 13 September 2026

The short version. Searching properties collects nothing about you. Personal data is collected at one moment only — when you choose to send an enquiry or request a viewing — and it is used to have an agent get back to you. Your conversation is never stored by us, and nothing you type is used to train AI models.

1. Who we are

This app is operated by Sunny Casas, an estate agency registered in the Valencian Community under RAICV 5942, at Calle Patricio Zammit 1, 03182 Torrevieja, Alicante, Spain.

Sunny Casas is the data controller for the personal data described here. Contact: info@sunnycasas.com or +34 691 160 120.

This policy covers the Sunny Casas app inside ChatGPT and its MCP server at mcp.sunnycasas.com. The separate policy for our website is at sunnycasas.com/en/privacy.

2. What this app does

The app lets you search Sunny Casas’ available property listings on the Costa Blanca and Costa Cálida by describing what you want in conversation. It returns matching properties with photos, prices and specifications, and lets you send an enquiry or ask for a viewing. It is free, and it requires no account, no sign-up and no payment.

3. Information we collect

What we do not collect

Search activity

When you search, ChatGPT sends your criteria — things like a budget, a town, a bedroom count — to our server. These are used to run the database query and are then discarded. They are not stored against you and are not linked to any identity.

ChatGPT may send our server an anonymised conversation identifier and an anonymised user identifier so that a server can enforce rate limits. We do not store these and do not attempt to resolve them to a person.

Enquiries and viewing requests

This is the only point at which personal data is collected, and it happens only when you actively choose to submit one. We collect:

ChatGPT is instructed to show you these details and ask you to confirm before anything is submitted. Nothing is sent silently.

Technical logs

Our hosting provider records standard request logs (timestamp, request path, response status, IP address) for security and debugging. Our own application logs record error diagnostics and never contain your name, email, phone number or message text.

4. How we use your information

We do not use your data to train AI models. We do not sell personal data, and we do not share it for advertising. We will not add you to a marketing list on the strength of a property enquiry alone.

5. Legal basis for processing (GDPR Article 6)

PurposeLegal basis
Responding to your enquiry or viewing requestArt. 6(1)(b) — steps taken at your request prior to entering a contract
Running property searchesArt. 6(1)(f) — legitimate interest in operating the service
Abuse prevention and security loggingArt. 6(1)(f) — legitimate interest in protecting the service
Retaining records of transactions where a sale proceedsArt. 6(1)(c) — legal obligation under Spanish law

6. Cookies

This app sets no cookies. It runs inside ChatGPT and its own web pages carry no analytics, no advertising tags and no tracking of any kind. There is nothing to consent to and nothing to opt out of.

The property results view stores your comparison selections only in the memory of the open view. Nothing persists after you close it.

Our main website, sunnycasas.com, does use cookies; that is covered by its own policy.

7. Who processes your data

ProviderPurposeLocationPolicy
OpenAIOperates ChatGPT, the interface you are using. Your conversation is subject to OpenAI’s own policy, not ours.USAPolicy
VercelHosting for the app and its MCP serverUSA / global edgePolicy
SupabaseProperty database and storage of submitted enquiriesEU (Frankfurt, Germany)Policy
n8nSelf-hosted automation that routes an enquiry to our CRMSunny Casas infrastructurePolicy
GoHighLevelOur customer relationship management system, where an agent works your enquiryUSAPolicy

No property search data is sent to any of these beyond what is needed to run the query. Only enquiries and viewing requests reach n8n and GoHighLevel.

8. AI disclosure

You are interacting with this service through ChatGPT, an AI system operated by OpenAI. What it says is generated probabilistically and can be wrong, incomplete or out of date, even when the underlying property data is correct. Property details, prices and availability should always be confirmed with us before you act on them.

Sunny Casas does not operate its own AI models and does not use anything you submit to train, fine-tune or evaluate any model. Property descriptions shown in listings may have been machine-translated from Spanish.

9. How long we keep your data

DataRetention
Search criteriaNot stored — discarded once the query returns
Conversation contentNever stored by Sunny Casas
Enquiry and viewing request recordsKept while we are in contact with you and for up to 3 years after the last contact, then deleted
Records relating to a completed transactionKept for the period Spanish tax and anti-money-laundering law requires
Server request logsRetained by our hosting provider on its standard short-term schedule

10. International transfers

Enquiry data is stored in the European Union. It is transferred to the United States when it reaches our CRM, and the conversation itself is processed in the United States by OpenAI. These transfers rely on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

11. Your rights

Under the GDPR you have the right to:

Email info@sunnycasas.com. We respond within one month. Because the app collects nothing until you submit an enquiry, we will normally only hold data about you if you sent one — please tell us the email address you used.

If you are not satisfied with our response you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), www.aepd.es, or to the supervisory authority where you live.

12. Children

This app is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us an enquiry, contact us and we will delete it.

13. Security

All traffic is encrypted in transit with HTTPS. Enquiry records are held in an access-controlled EU database, and the app itself reads the property database through a restricted, read-only interface that cannot reach private information such as vendor details or commercial terms. Because there are no accounts, there are no passwords to be stolen. If a breach affects your rights and freedoms, we will notify you and the AEPD as the GDPR requires.

14. Changes to this policy

We may update this policy. Material changes will be posted here with a new “last updated” date. Please review it from time to time.

15. Contact

Sunny Casas, Calle Patricio Zammit 1, 03182 Torrevieja, Alicante, Spain.
info@sunnycasas.com · +34 691 160 120 · RAICV 5942