LEGAL
Privacy policy.
Last updated: July 30, 2026
FlipMedellín is operated by Momentum 24 LLC, a Florida (United States) limited liability company, which is responsible for the personal data described in this policy. For newsletters and waitlists, we store the email address you provide, any notes or search preferences you choose to share, the submission timestamp, and the consent-text version you accepted. Signed-in product features also store the account and saved-list information described below.
For a HomeFax order, we process the buyer's account ID and email, the submitted listing URL, questions and property notes, the uploaded predial or exact property registration number, the official records we obtain for that order, internal review notes, order-status history, and the final report. Source records can contain owner names, exact addresses, registration numbers, and other title information. Those source files remain private, are not placed in analytics, and are not the public product.
We use your email to send you what you signed up for: new listings, analyses, and product updates. We do not sell or rent your data, and we do not show ads.
When you use FlipMedellín anonymously, saved listings and your buyer profile stay in your browser's local storage on this device. When you sign in, your saved lists sync to your account and are stored in our database through our hosting providers so they travel across devices; any pre-existing local lists merge into your account when you sign in.
Google and email sign-in are currently available. Phone and WhatsApp sign-in are not currently offered. If phone verification is enabled later, Supabase will store the number used to create and secure the account, and we will keep a separate hashed form of it to enforce anti-abuse limits.
We use privacy-conscious analytics to understand how the site is used. PostHog records pageviews and product events that never contain your name, email, or the details of a saved listing — only things like barrio names, counts, and yes/no flags — and includes session replay in which every form input, email fields included, is masked. PostHog honors your browser's "Do Not Track" setting, and we do not build advertising profiles. Vercel Analytics gives us aggregate, cookieless traffic counts.
To keep the service reliable and secure, we log errors through Sentry, record sign-in attempts (including the IP address and a hashed phone number), and rate-limit requests by IP address to detect and prevent abuse.
HomeFax intake files, official source records, and final reports are stored in private Supabase Storage buckets. Browser users receive only short-lived, exact-file upload or download links after an account or curator authorization check. Buyers cannot browse source records or another buyer's order. Delivery email is handled by Resend and links back to the signed-in account; the private report is not attached to the email. The internal purchase copilot uses Anthropic only to translate or explain portal interface text and is designed not to receive buyer documents, title contents, payment credentials, or owner information.
HomeFax files that fail upload verification are removed promptly. Unless the buyer asks for earlier deletion or a legal or contractual duty requires longer retention, buyer-supplied predial files and official source records are deleted 180 days after delivery; the final report and buyer-safe order history are retained for 24 months so the buyer can access the report and we can support the order. Preview orders that never receive a usable property document may be deleted after 30 days. We may retain a minimal deletion, consent, or dispute record where required to document compliance.
The providers that process data on our behalf — Vercel (hosting), Supabase (database, authentication, and private file storage), Resend (transactional delivery email), PostHog (analytics), Sentry (error monitoring), and Anthropic for the restricted internal copilot described above — operate under their own security and privacy terms. Because Momentum 24 LLC and these providers are based in the United States, your data is processed there and in the other countries where they operate; by using the site you consent to that transfer.
To unsubscribe or ask a question, reply to any email from us or write to hola@flipmedellin.com. To access, correct, or delete your personal data, write to datos@flipmedellin.com, and we will take care of it.