This includes account, transaction, submitted listing, analysis, Report, support and security information.
Legal and privacy
Privacy Policy
This policy explains what personal data Ylasore Labs collects, why we use it, who receives it and the choices and rights available to you.
We disclose data only for the purposes described here, where the law permits or requires it.
You may ask to access, correct, erase, restrict or export your data, or object to certain uses.
View policy contents
1. Who controls your personal data
Ylasore Labs is the trading brand used for PropScan. Globalfusion IBC, an international business company in Seychelles, owns and operates Ylasore Labs and is the controller responsible for the personal data described in this policy.
Email privacy questions and requests to hello@ylasore.com. Include “Privacy Request” in the subject. We may ask for information needed to verify your identity before acting on a request.
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Account and identity | Name, email address, account identifier and account preferences. | You and the account system. |
| Orders and payments | Service or Report pack purchased, price, currency, order reference, payment status, billing details and limited payment-provider information. Where an external payment provider handles payment, Ylasore Labs does not receive or store your full payment-card number. | You, WooCommerce and the selected payment provider. |
| PropScan submissions | Property-listing URL, submitted facts, instructions, manually supplied evidence and comparison requests. | You and publicly accessible listing sources. |
| Reports and evidence | Retrieved listing content, structured property facts, photographs or image references, analysts’ working notes, analysis results, evidence states, reviewer decisions, recommendations and Report files. | You, public sources, independent analysts and reviewers, and PropScan systems. |
| Support communications | Messages, attachments, complaint or refund details and our responses. | You and our support records. |
| Technical and security | IP address, timestamps, browser and device information, request identifiers, authentication events, error records, consent records, security signals and audit logs. | Your device, WordPress, Cloudflare and service systems. |
| Cookie and preference data | Session, authentication, cart, consent and optional analytics information where enabled. | Your browser and the technologies described in our Cookie Policy. |
Do not submit passwords, full payment-card details, identity documents or private property material unless Ylasore Labs specifically requests it through an approved secure channel.
3. Why we use personal data
| Purpose | Typical legal basis |
|---|---|
| Create and secure your account and provide account access. | Performance of our contract and legitimate interests in account security. |
| Process orders, confirm payment, award credits and maintain transaction records. | Performance of our contract, compliance with accounting and tax duties, and legitimate interests in preventing fraud. |
| Collect evidence from the submitted listing, carry out personalised analysis and prepare and deliver the requested Report. | Performance of our contract and legitimate interests in using relevant public property-market information for the requested analytical service. |
| Provide support, correct faults, handle refunds and resolve disputes. | Performance of our contract, legal obligations and legitimate interests in customer service and legal claims. |
| Protect accounts and services, prevent abuse, investigate incidents and maintain audit records. | Legitimate interests in security, fraud prevention and service integrity, and legal obligations where applicable. |
| Maintain, diagnose and improve service reliability and evidence quality. | Legitimate interests in operating and improving PropScan, using data proportionately. |
| Store your consent choices and send marketing communications you requested. | Consent. You may withdraw consent at any time. |
Where we rely on legitimate interests, we assess the need, effect on your rights and available safeguards. Where the law requires consent, refusing or withdrawing consent does not affect earlier lawful processing.
4. Property listings, reports and public information
PropScan collects evidence from the listing you submit and related property-market sources. Independent analysts use this material to carry out personalised analysis and prepare the Report. Technology and AI-assisted processes support the analysis work and Report preparation. A public listing may contain an address, photographs, agent contact details, seller-supplied text or other information linked to identifiable people.
- Only submit a listing or private evidence which you have authority to use for the requested analysis.
- Authorised analysts, reviewers and PropScan systems use submitted and collected evidence to carry out the analysis, prepare and review the Report, verify evidence integrity, diagnose faults and protect the service.
- We do not publish your Report as a case study or public example without separate permission.
- PropScan provides property-listing analysis and recommendations. It does not use personal data to make solely automated decisions producing legal or similarly significant effects about a person.
- Portal access limits and incomplete evidence may restrict the analysis. Evidence states and holds form part of service integrity.
5. Who receives personal data
We disclose only the information needed for the relevant service. Recipient categories include:
- website hosting, content delivery, security and infrastructure providers;
- WordPress, WooCommerce and account-system providers;
- payment providers selected at checkout;
- independent analysts and reviewers, property-data retrieval providers and web-access providers used for the submitted analysis;
- AI model and processing providers used to organise evidence, support analysis work and assemble Reports;
- email, customer-support, logging, monitoring and file-storage providers;
- professional advisers, insurers, auditors, regulators, courts or public authorities where needed or legally required; and
- a buyer, seller or successor involved in a genuine corporate transaction, subject to suitable confidentiality and legal safeguards.
These recipients receive only the personal data needed for their assigned role. Our service providers, analysts and reviewers work under contracts and access controls appropriate to their role. We do not authorise them to use personal data for unrelated purposes.
6. International data transfers
Globalfusion IBC operates from Seychelles and engages analysts, reviewers and service providers in several countries. Personal data is therefore processed in countries outside the customer’s country. Where applicable law restricts an international transfer, we apply the required transfer mechanism and safeguards before making the transfer. Contact us for information about safeguards relevant to your personal data.
7. How long we keep personal data
We keep personal data only for as long as the relevant purpose, contract, legal duty, security need or legal-claims period requires. Our retention framework is:
| Record | Retention approach |
|---|---|
| Account records | For the life of the account, followed by a limited closure and legal-claims period. |
| Orders, invoices and payment records | For the period required by applicable accounting, tax and commercial law. |
| Submitted listings, evidence, analysts’ working notes and Reports | While the Report remains available in the customer’s account. After account closure, we retain relevant records for correction, security, dispute handling, legal claims and any period required by law. |
| Support and refund records | For issue resolution and a suitable legal-claims period. |
| Security, consent and audit logs | For the documented security, compliance and evidence-integrity period. |
| Optional analytics data | For the period shown in the Cookie Policy or consent tool. |
We delete, anonymise or restrict data when the applicable period ends, unless the law requires continued storage.
8. Your data-protection rights
Depending on your location and the circumstances, you may have the right to:
- receive information about our processing and access your personal data;
- correct inaccurate or incomplete data;
- request erasure;
- restrict processing;
- receive certain data in a portable format;
- object to processing based on legitimate interests or to direct marketing;
- withdraw consent without affecting earlier lawful processing; and
- complain to a competent data-protection authority.
Globalfusion IBC is based in Seychelles. You have the right to complain to a data-protection or privacy authority with jurisdiction over the relevant processing. You are welcome to contact us first, but you do not need to do so before lodging a complaint.
Some rights have legal limits. We will explain any refusal or restriction which applies to your request.
9. Security
We apply technical and organisational safeguards suited to the nature and risk of the data. These include access controls, authentication safeguards, protected credentials, restricted Report access, entitlement checks, rate limits, logging and measures designed to protect service requests.
No internet service offers absolute security. Contact hello@ylasore.com promptly if you suspect unauthorised access to your account or report.
10. Cookies and similar technologies
We use essential technologies for account access, authentication, checkout, cart and security. If we enable optional analytics or similar technologies, we request any consent required by law before using them and provide a way to change your choice. Our Cookie Policy gives further details.
11. Children
PropScan is for adults and business users. It is not directed to children. You must not create an account or submit personal data unless you have legal capacity to enter the relevant contract. Contact us if you believe a child has supplied personal data without proper authority.
12. Changes to this policy
We will update this page when our processing, providers, safeguards or legal duties change. The version and date at the top identify the current policy. We will provide an additional notice where a material change requires it.
Privacy contact
Send your request, account email and enough detail for us to identify the relevant records. Never send your password or full payment-card details.
Email the privacy team