Data Processing Agreement
How Smart Movers Club processes and protects your data
Last updated: 10/5/2026
Overview
This Data Processing Agreement ("DPA") describes how Smart Movers Club processes personal data in accordance with applicable data protection laws, including GDPR, CCPA, and other privacy regulations.
This agreement supplements our Privacy Policy and applies to all personal data processing activities performed by Smart Movers Club on behalf of our users.
Data Processing Purposes
Primary Processing Activities
- •Account Management: Creating, maintaining, and managing user accounts
- •Service Delivery: Providing real estate intelligence and market analysis
- •Payment Processing: Managing subscriptions and billing through Stripe
- •Communication: Sending transactional emails and support responses
AI and Machine Learning Processing
- •Market Analysis: Processing location data to generate market intelligence
- •Algorithm Improvement: Using aggregated data to enhance AI models
- •Sentiment Analysis: Processing public data for market sentiment insights
- •Pattern Recognition: Identifying market trends and investment opportunities
Legal Basis for Processing
GDPR Legal Bases
- •Contract Performance: Processing necessary to provide our services
- •Legitimate Interest: Service improvement and fraud prevention
- •Consent: Newsletter subscriptions and optional features
- •Legal Obligation: Tax compliance and regulatory requirements
Data Categories and Sources
Personal Data Categories
- •Identity Data: Name, email address, user ID
- •Contact Data: Email addresses for communication
- •Financial Data: Subscription status and billing information
- •Technical Data: IP addresses, browser data, device information
- •Usage Data: Search history, saved locations, platform interactions
Data Sources
- •Direct Collection: Information provided during registration and platform use
- •Automatic Collection: Technical data collected through platform interaction
- •Third-Party Services: Authentication data from OAuth providers
- •Public Sources: Publicly available real estate and market data
Data Processing Security
Technical Safeguards
- •Encryption in Transit: All data transmission protected with TLS 1.2+
- •Encryption at Rest: Database encryption for stored personal data
- •Access Controls: Role-based access with principle of least privilege
- •Authentication: Multi-factor authentication for administrative access
Organizational Measures
- •Data Minimization: Collecting only necessary data for service provision
- •Regular Audits: Periodic review of data processing activities
- •Staff Training: Regular privacy and security training for team members
- •Incident Response: Established procedures for data breach response
Data Transfers and Sub-Processors
Sub-Processors
We work with the following sub-processors to provide our services:
- •Supabase: Database hosting and authentication (EU/US)
- •Stripe: Payment processing (Global, GDPR compliant)
- •Cloudflare: Security and CDN services (Global)
- •Resend: Transactional email delivery (EU/US)
International Transfers
When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place:
- •Standard Contractual Clauses (SCCs) with sub-processors
- •Adequacy decisions where applicable
- •Additional technical and organizational measures
Data Subject Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
- •Right of Access: Request copies of your personal data
- •Right to Rectification: Correct inaccurate data
- •Right to Erasure: Request deletion of personal data
- •Right to Restriction: Limit processing activities
- •Right to Portability: Export your data
- •Right to Object: Opt out of certain processing
- •Right to Withdraw Consent: Revoke consent-based processing
- •Right to Lodge Complaints: Contact supervisory authorities
Exercising Your Rights
To exercise any of these rights, please contact us at hello@smartmoversclub.com. We will respond within one month of receiving your request.
Data Retention
Retention Periods
- •Account Data: Retained while account is active + 90 days after deletion
- •Search History: Retained for service improvement (anonymized after 2 years)
- •Payment Records: 7 years for tax and accounting purposes
- •Support Communications: 3 years for quality assurance
- •Technical Logs: 90 days for security and performance monitoring
Contact Information
For questions about data processing or to exercise your rights, please contact us:
Agreement Updates
This Data Processing Agreement may be updated to reflect changes in our processing activities, legal requirements, or service improvements. We will notify you of significant changes through email or platform notifications.
Continued use of our services after such updates constitutes acceptance of the revised agreement.
This Data Processing Agreement is effective as of 10/5/2026