Privacy Policy

This Privacy Notice for AstaBG ltd (doing business as propelia) (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at propelia.eu or any website of ours that links to this Privacy Notice.
• Use Propelia, a web-based platform for listing, searching, and managing industrial, commercial, and residential properties across Europe. The service enables users to browse property listings, submit new properties (including crowd-sourced submissions), participate in property auctions, and access market insights powered by artificial intelligence. The platform supports multiple languages (Bulgarian, English, German, Russian), offers advanced search and filtering, and integrates with third-party services for payments, AI analysis, and real-time notifications. Registered users can create profiles, manage their submissions, and benefit from contributor rewards and verification features.
• Engage with us in other related ways, including any marketing or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at office@propelia.eu.

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

• names
• phone numbers
• email addresses
• usernames
• passwords
• contact preferences
• contact or authentication data
• billing addresses
• debit/credit card numbers
• mailing addresses

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• financial data
• social security numbers or other government identifiers

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the associated security code. All payment data is handled and stored by Stripe and PayPal. You may find their privacy notices here:

• stripe.com/privacy
• paypal.com privacy notice

Payment processing is handled via secure third-party APIs (Stripe, PayPal). No payment card details are stored on our servers; all sensitive payment information is processed directly by the payment vendors. Transaction records (amount, status, user reference) are stored for accounting and support, but not card details. Payment data is transmitted securely using HTTPS.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
• Device Data. Information about the computer, phone, tablet, or other device you use to access the Services, such as IP address, device and application identification numbers, browser type, hardware model, and system configuration.
• Location Data. Information about your device’s location, which can be precise or imprecise. You can opt out of location collection by disabling the Location setting on your device, though some Services features may then be unavailable.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, and other outside sources.

To enhance our ability to provide relevant marketing, offers, and services and to update our records, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and other third parties, including mailing addresses, job titles, email addresses, phone numbers, IP addresses, and social media profiles.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

• To facilitate account creation and authentication and otherwise manage user accounts.
• To save or protect an individual’s vital interest, such as to prevent harm.
• To verify user identity and perform KYC checks (for contributors and certain transactions).
• To process payments and manage billing.
• To provide customer support and resolve issues.
• To notify users about updates, changes, or important information related to their account or services.
• To manage contributor rewards and participation in the property crowd system.
• To comply with legal and regulatory requirements.
• To facilitate secure payments and prevent payment fraud.

3. What legal bases do we rely on to process your personal information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal basis to do so, such as your consent, to comply with laws, to provide services or fulfil contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

The GDPR and UK GDPR require us to explain the valid legal bases we rely on. We may rely on:

• Consent. You can withdraw your consent at any time.
• Performance of a Contract. To fulfil our contractual obligations, including providing our Services.
• Legitimate Interests. Where processing is reasonably necessary to achieve our legitimate business interests.
• Legal Obligations. To comply with law, cooperate with authorities, or defend our legal rights.
• Vital Interests. Where necessary to protect your vital interests or those of a third party.

4. When and with whom do we share your personal information?

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We have contracts in place with our third parties designed to help safeguard your personal information. Categories of third parties include:

• Cloud Computing Services
• Data Analytics Services
• Data Storage Service Providers
• Payment Processors
• Website Hosting Service Providers
• User Account Registration & Authentication Services
• Finance & Accounting Tools
• Communication & Collaboration Tools
• AI Platforms

We may also need to share your personal information in the following situations:

• Business Transfers. In connection with a merger, sale of assets, financing, or acquisition of all or part of our business.
• Google Maps Platform APIs. We use certain Google Maps Platform APIs (e.g. Google Maps API, Places API) to retrieve information when you make location-specific requests, including IP address, device/browser info, and map interactions. Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. You may revoke your consent at any time by contacting us.
• Affiliates. We may share information with our affiliates, who are required to honor this Privacy Notice.
• Business Partners. To offer you certain products, services, or promotions.

5. Do we use cookies and other tracking technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. We also permit third parties and service providers to use online tracking technologies for analytics and advertising.

Google Analytics. We may share your information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics, visit tools.google.com/dlpage/gaoptout.

6. Do we offer artificial intelligence-based products?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

We provide the AI Products through third-party service providers (“AI Service Providers”), including DeepSeek and Microsoft Azure AI. Your input, output, and personal information will be shared with and processed by these providers to enable your use of our AI Products.

Our AI Products are designed for: AI research, AI insights, AI document generation, and image analysis. To opt out, you can contact us using the contact information provided in this notice.

7. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or securely isolate it if deletion is not immediately possible.

8. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

Despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk.

9. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use of the Services. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and delete the data. Contact us at office@propelia.eu if you become aware of any such data.

10. What are your privacy rights?

In Short: In some regions, such as the EEA, UK, and Switzerland, you have rights that allow you greater access to and control over your personal information.

These may include the right to (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing, (iv) data portability, and (v) not be subject to automated decision-making. You can make such a request by contacting us using the details in Section 13.

If you are located in the EEA or UK, you have the right to complain to your data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent. If we rely on your consent, you may withdraw it at any time by contacting us or updating your preferences; this will not affect the lawfulness of prior processing.

Opting out of marketing. You can unsubscribe at any time via the unsubscribe link in our emails or by contacting us.

Account information. You may review, update, or terminate your account at any time by logging in to your account settings. We may retain some information to prevent fraud, comply with legal requirements, or resolve disputes.

11. Controls for Do-Not-Track features

At this stage, no uniform technology standard for recognizing and implementing Do-Not-Track (“DNT”) signals has been finalized. We do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will inform you in a revised version of this Privacy Notice.

12. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently.

13. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at office@propelia.eu or contact us by post at:

AstaBG ltd, Sevlievo 5400, Bulgaria

14. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please visit your account profile settings or contact us at office@propelia.eu.