GDPR Privacy Notice

Legal Documents
10 May, 2025

This GDPR Privacy Notice supplements the information contained in the Privacy Policy of Cactus Real Estate Software, Inc. ("Cactus," "we," "our," or "us") and applies to individuals located in the European Economic Area ("EEA"), the United Kingdom ("UK"), and Switzerland (collectively, "Europe").

‍

We are committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR. This Notice explains how we collect, use, and protect personal data when you use our services.

‍

1. Data Controller

Cactus Real Estate Software, Inc. is the controller of your personal data unless otherwise stated.

‍
Email: privacy@trycactus.com

‍

2. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Performance of a Contract: To provide you with services you request.
  • Consent: For sending marketing communications, where legally required.
  • Legal Obligation: To comply with applicable laws and regulations.
  • Legitimate Interests: For security, fraud prevention, internal analytics, and improving our services.

3. Categories of Personal Data We Process

  • Identifiers: Name, email address, phone number, job title, IP address.
  • Account and transactional data.
  • Uploaded property and financial documents.
  • Usage data, including logs, cookies, and analytics.

We do not intentionally collect special category data unless explicitly provided by you.

‍

4. Data Transfers

We may transfer your personal data to the United States and other countries where our service providers are located. When we do so, we rely on:

  • Adequacy decisions by the European Commission or UK government.
  • Standard Contractual Clauses (SCCs) or UK Addendum.
  • Other appropriate safeguards as required by law.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Notice or as required by law. This may vary depending on the nature of the data and our legal obligations.

‍

6. Your Rights Under the GDPR

If you are located in Europe, you have the following rights:

  • Right of Access: Request access to your personal data.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (“right to be forgotten”).
  • Right to Restriction: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Receive your data in a portable format.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw your consent at any time (where processing is based on consent).
  • Right to Lodge a Complaint: Contact your local data protection authority.

To exercise any of these rights, contact us at privacy@trycactus.com.

‍

7. Automated Decision-Making

We do not engage in profiling or automated decision-making that has a legal or similarly significant effect on individuals.

‍

8. Children’s Data

We do not knowingly collect personal data from individuals under 18 years of age. If we learn that we have collected such data, we will delete it promptly.

‍

9. Contact Information

To exercise your GDPR rights or ask questions about this Notice:Email: privacy@trycactus.com
Website: https://www.trycactus.com

‍

10. Updates to This Notice

We may update this GDPR Privacy Notice from time to time to reflect legal or operational changes. Updates will be posted on our website with the revised effective date.

‍