Privacy
Updated: 26 October 2026. Please use the contact email below for enquiries about your data.
Service owner
Estario is an AMAR Studio product. Owner: AMAR SYSTEMS ARTSIOM MAROZAU, Poland, NIP 1182273536. Data enquiries: amar.studio.eu@gmail.com.
Data used
Sign-in uses your email and profile information supplied by your chosen authentication method. The workspace stores contacts, requests, properties, notes and actions entered by the agent. Technical requests may contain an IP address and browser information.
Purposes and grounds
Account data provides access to the service (GDPR Article 6(1)(b)). Technical requests and support enquiries are processed for security and operation, the owner’s legitimate interests (Article 6(1)(f)). An email is necessary for workspace access; the demo needs no registration.
Agents’ client records
The agent or their organisation determines the purposes and legal basis for client records. Estario provides the technical processing tool. Do not enter sensitive or unnecessary information. Property matching supports the agent and does not make legally significant decisions about clients.
Providers and external requests
Supabase supplies the database and authentication; Netlify hosts the application. Google sign-in uses Google. Location searches send the geocoding query to Nominatim/OpenStreetMap; listing imports contact the selected website. Do not enter clients’ personal information in geocoding queries. The primary Supabase database is in Ireland (eu-west-1). This does not mean all processing by other providers is confined to the EU; international processing is governed by the relevant providers’ terms. The Supabase and Netlify data processing agreements include EU Standard Contractual Clauses for applicable international transfers. Links to those documents are provided below.
Cookies and preferences
Authentication and preference cookies, such as language, and local interface preferences support sign-in and remember user choices.
Retention and deletion
Workspace data is stored to operate your database; archiving is not deletion. Request account deletion or a copy of your data by email. Automated CSV export is not yet available. Account data is retained while the account is used, until a deletion request is fulfilled; individual records may be needed longer to meet legal obligations or defend legal claims. Support correspondence is retained while needed to resolve an enquiry or related dispute. Technical log and backup availability depends on the provider’s plan; deletion may follow a separate lifecycle. The current free database plan does not include daily backups for user-initiated recovery.
Your rights
Where applicable under the GDPR, request access, correction, erasure, restriction or portability, or object to processing, by emailing us. Requests about agent-entered data involve the relevant agent as controller. You may complain to Poland’s UODO or another competent EU data protection authority.