Privacy Policy

We process your data in accordance with Law 81 of March 26, 2019 on Personal Data Protection of the Republic of Panama and its implementing regulations. This policy covers www.faroinmo.com, FARO 0.5 at portal.faroinmo.com and the managed services Faro provides to its clients.

Owner

The data controller is Faro, operated by its founder, Enrique Padrón, in Panama City. Contact: epadron@faroinmo.com. When Faro processes the data of a client’s buyers or contacts, such as leads received through a broker’s website, it acts as a data processor on behalf of that client, who is the data controller.

What data we process and why

Visitors to this site

Through the forms, we collect your name, email address and type of real estate operation. We use them to answer your inquiry, send the material you requested and follow up commercially. The legal basis for processing is your consent, given when you submit the form.

Voice conversations with FARO

The voice assistant is an artificial intelligence system. The widget loads when you choose to open it, and your browser asks for permission before using the microphone. Your voice and the conversation content are processed through LeadConnector (GoHighLevel) and its AI and voice providers to answer your inquiry. If you request an appointment, the name, email address and meeting details you confirm are used to manage it in FARO's calendar. You can end the call or close the panel at any time, and you can also book through the form. Do not share sensitive information during the conversation.

FARO 0.5 clients

If you are a client, we process: your account details (name, email address and role on your team); your property inventory, including listings, photos and documents; your operation's leads and contacts; the visits and leads recorded by your website; and the content you create on the platform. If you purchase a managed service layer, we also process the information needed to operate that service. We use it exclusively to provide the service you have contracted. Each account is isolated: one client's data is never combined with another's.

Sign in with Google

The portal’s ‘Continue with Google’ button uses only your Google identity, including your name, email and account verification, to sign you in. It does not give us access to your Gmail, Drive or any advertising account. Any access granted for a managed Google Ads service is separate from sign-in.

Managed Google Ads service

When a client purchases and authorizes campaign management, Faro may access only the information in Google Ads necessary to manage and report on that client's own advertising account:

• Identifiers for the account and managed campaigns.
• Setup of campaigns, ad groups, ads and search terms.
• Investment and performance metrics available in Google Ads.

The purpose is to provide the contracted service and communicate its results. FARO 0.5 does not currently offer a native module or reports through the Google Ads API. Faro does not sell this information, use it for its own advertising or share it with third parties unrelated to providing the service. You can revoke access through Google Ads or request it by support; the procedure is in Data deletion.

Website analytics

This site uses Google Analytics 4 to understand usage in aggregate. FARO 0.5 also records visits and leads on its clients’ websites to display them in ‘How my website is doing.’ Any managed work involving Google Analytics or Search Console is agreed separately and is not presented as a native FARO 0.5 integration.

Who it is shared with

We do not sell or transfer your data to third parties. To provide the service, we work with these processors and providers, each under its own terms:

• Vercel: hosting for the website, FARO 0.5 and file storage.
• Neon: the platform’s database.
• Upstash (Redis): abuse prevention, budget controls, idempotency, email verification and FARO Digital Assessment recovery. It receives identifiers pseudonymized using HMAC, stores the verification code only as a cryptographic fingerprint and temporarily retains the encrypted report so a retry can be completed without charging for another AI generation.
• Google LLC: Google Analytics 4, Google Ads when the client contracts that managed service, and Google Workspace email.
• Meta Platforms, Inc.: Meta Pixel and Conversions API on this site (your email is sent as a SHA-256 hash, never in plain text), and the optional Instagram connection a client authorizes for the Content Factory.
• LeadConnector (GoHighLevel): the CRM used to manage Faro's sales contacts and, for clients who connect it, deliver leads to their own accounts.
• Anthropic: the AI model that writes drafts in the Content Factory, generates the report requested through FARO Digital Assessment and, when contracted, supports the managed bot. It does not use data sent through the API to train its models.
• Bright Data: reading public information from Instagram profiles when a client requests it for their content strategy.
• Sentry: technical monitoring of platform errors, configured not to receive personal data.

Within Faro, access to client data is restricted to the team operating the platform, and every administrative account access is logged with who entered, when and for how long.

How long we retain them

• Website sales contacts: up to 24 months after the last contact, or until you request removal, whichever comes first.
• Client data from the platform and managed services: while the account is active and for up to 90 days after the service ends, unless we receive a deletion request earlier. A request is completed within a maximum of 30 days, except for records that a legal obligation requires us to retain, such as billing records. When an account is deleted, its data is also removed from encrypted backups as those backups are refreshed.
• Data from the managed Google Ads service: the advertising account retains its own information under the client’s ownership. Copies or reports retained by Faro follow the account’s retention period and are deleted within 30 days of a request, unless retention is legally required.
• Analytics: according to each platform's retention settings (by default, 14 months in Google Analytics 4).
• Faro Assessment security and recovery: the code fingerprint expires after 10 minutes; the pseudonymized confirmation and fingerprints used for limits and idempotency are retained for 24 to 48 hours. If the report is generated, an encrypted and authenticated copy is retained in Upstash for up to 7 days to recover a pending delivery without regenerating it; it then expires automatically.

Your rights

You may exercise your rights of access, rectification, cancellation, objection and portability (ARCO+ rights) at any time by writing to epadron@faroinmo.com. Every email we send includes an unsubscribe option. The full deletion procedure, including Meta and Google connections, is available at Data deletion. You can also submit complaints to ANTAI, Panama’s data protection authority.

Cookies and tracking

This website does use cookies and measurement technologies. We want you to know exactly which ones:

• Meta Pixel (cookies _fbp and _fbc): they measure which ads and content bring visits and registrations. These are advertising cookies from Meta Platforms, Inc.
• Google Analytics 4 (cookies _ga and _ga_*): site usage analytics (page views, traffic sources, technical performance). Google receives this data as a processor.

You can block these cookies in your browser settings or with any blocking extension; the site will continue to work normally and forms will still be submitted. If you want us to delete data already associated with your email address, write to us and we will do so.

Security of your data

All traffic is encrypted (HTTPS with HSTS). Each platform account is isolated by design: every database query filters by the account associated with the session, and connection tokens for third-party services are stored encrypted. Integration credentials are kept in environment variables, never in the code. Your inventory and contacts remain associated with your account, and you can request an export if you decide to leave. When you subscribe to a managed WhatsApp service, the number remains in the relevant account of the client or authorized provider, according to the agreed scope.

← Back to home Data deletion → Support →