Privacy Policy

1. Who we are

This Privacy Policy explains how TANGO PROPIEDADES S.A.S., CUIT 33-71601713-9, with its registered address at San Martín 439, 10th floor, Ciudad Autónoma de Buenos Aires, Argentina (“Tango Propiedades”, “we”), processes personal data in Flow - Evolution Pro, the internal platform available at flow.evolss.com (“Flow”), as the controller of the database under Argentine Personal Data Protection Law No. 25,326.

2. Who this policy covers

Flow is a work tool for the Tango Propiedades team: employees, real estate agents and the external collaborators we invite. There is no public sign-up; an administrator creates every account. This policy covers the data of those users.

Information about customers and prospects that the team records in Flow is governed by the privacy policies of tangoprop.com.ar and tangopropiedades.com.

3. Data we process

• Account: name, username, email address, role and permissions. Passwords are stored only as a hash.
• Activity: the actions you take in Flow (for example, records you create or edit), with date and time, for auditing and security.
• Content you enter: notes, tasks, documents and other work information.
• Technical: a session cookie, a language cookie and standard server logs (IP address, browser).

4. Google user data

Signing in with Google and connecting Google services are optional. Flow asks for each permission below only to provide the feature it describes, and you choose which ones to grant.

Google Sign-In

Scopes: openid, email, profile. We use your Google account’s email address to find the Flow account an administrator already created for you, and your name to display it. Google Sign-In never creates an account by itself, and we never receive your Google password. The first time you sign in with Google on a browser, Google’s consent screen also offers Google Calendar as an optional checkbox: if you leave it unticked, no Google token is stored; if you tick it, Flow connects Google Calendar at that moment, as described below.

Google Calendar

Scope: https://www.googleapis.com/auth/calendar.app.created. When you connect Google Calendar, Flow creates a secondary calendar named “Flow — Tasks” in your account and creates, updates and deletes events in it for the Flow tasks you choose to sync. Flow cannot see your other calendars or their events.

Gmail

Scope: https://www.googleapis.com/auth/gmail.send. If you enable sending email from Flow (where available), Flow uses this permission only to send the messages you write and send yourself from Flow, from your own Gmail address. Flow does not read, search or delete the messages in your mailbox.

How we store it

To keep a connection working, Google gives Flow a refresh token. We store it encrypted (AES-256-GCM) in our database and use it only for the actions described above. Short-lived access tokens are kept in memory only while a request runs.

What we never do with Google user data

• We do not sell it.
• We do not use it for advertising.
• We do not transfer it to third parties, except as necessary to provide the features above, to comply with the law, or as part of a merger or acquisition with prior notice to you.
• We do not use it to develop, improve or train generalized artificial intelligence or machine learning models, and we do not send it to AI providers.
• No person reads it, unless you ask us to (for example, for support), it is necessary for security purposes such as investigating abuse, or the law requires it.

Revoking access

You can disconnect Google Calendar from your Profile in Flow at any time: Flow revokes the token with Google and deletes it, together with its sync records. You can also remove Flow’s access at myaccount.google.com/permissions.

Flow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use data

To provide and operate your account, authenticate you and keep Flow secure, run the features you turn on, give you support and meet our legal obligations. We process this data because of your working or collaboration relationship with Tango Propiedades and, for the optional Google features, because you consent when you connect them.

6. Service providers

We share data only with providers that process it on our behalf: Google Cloud (hosting, database and storage), Resend (email delivery), Meta (WhatsApp Business messaging) and the AI model providers behind Flow’s assistant features. The Google user data described in section 4 is never sent to AI providers. We also disclose data to authorities when the law requires it.

7. International transfers

Flow runs on Google Cloud servers in the United States, and some providers process data outside Argentina. We require them to provide adequate safeguards under Law No. 25,326.

8. Retention

We keep account data while your account is active, and afterwards for the statutory limitation periods. Google tokens are kept until you disconnect the service.

9. Security

We apply reasonable technical and organizational measures: encryption in transit (HTTPS), encrypted Google tokens, hashed passwords, permission-based access and activity logs.

10. Your rights

You may exercise your rights of access, rectification, update and deletion of your data (sections 14 to 16, Law No. 25,326) by writing to info@tangopropiedades.com. The data subject may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown.

The Agency for Access to Public Information (AAIP), the supervisory authority of Law No. 25,326, handles complaints regarding breaches of the personal data protection rules: argentina.gob.ar/aaip.

11. Changes

If we change this policy, we will publish the current version on this page with its revision date and, for material changes, let users know inside Flow.

12. Contact

TANGO PROPIEDADES S.A.S. · San Martín 439, 10th floor, Ciudad Autónoma de Buenos Aires, Argentina · info@tangopropiedades.com