Start free trial

Security and privacy

Who can see your agency's data, how SADE's access is limited and logged, what is public, how passwords and sessions work, and what happens to your data.

This page gathers in one place how SADE CRM keeps your agency’s data to your agency: who can see what, how SADE and Enterprise organizations get in and how you see that they did, what goes public on the marketplace, and how sign-in is protected.

For SADE’s legal commitments, read the privacy policy and the terms of service.

Your agency’s data is yours alone

Every agency’s data is kept apart from every other agency’s: its clients, leads, tasks, templates, lists, listings, projects, documents and payments. One agency never sees another’s records.

The one exception is a project sold with partner agencies. If your agency sells another agency’s project as a partner, the developer sees only how many clients you have registered for it, until you reserve a unit for one of them. At that moment the buyer’s name, phone and email are passed to the developer. See Selling as a partner.

Who can see what

Who What they see
Agency admin Everything in their own agency.
Agent Their own leads, clients, listings, viewings, deals and tasks, and the shared pond. No settings, team or billing. See Team and roles.
Organization admin Only the agencies in their own organization, and only as far as the organization’s access policy allows. Every opening is logged and shown to the agency.
SADE staff The platform side of your account: your agency’s details, your verification documents, and your listings and projects, which they review. Your clients, leads, deals and settings only through a logged, read-only view.

SADE’s access to your CRM

SADE’s staff don’t belong to any agency. To look at your clients, leads, deals, appointments, tasks, settings or billing, they must start a view as agency:

  • They must give a reason, which you can read.
  • The view is read-only: they can’t change anything.
  • It ends on its own after one hour.
  • Every request they make is logged.
  • Every agency admin gets a notification “SADE is viewing your CRM” when it starts.

You see every view, with its reason, duration and number of requests, on the SADE access page. See Agency settings.

Enterprise organizations

If your agency belongs to an organization, its admins may open your CRM, depending on the access policy agreed with SADE: to work in it as your admins do, to look without changing anything, or not at all (numbers only). Each opening lasts at most 12 hours and is listed on your SADE access page, with the requests and changes made. See Organizations.

Private documents

Your verification documents are private:

  • They are stored without any public link.
  • Only your agency’s admins and SADE’s moderators can open them. Agents can’t.
  • Photos are re-saved when you upload them, which removes hidden camera data such as the place a photo was taken.

What is public

The marketplace is public by design, so some of what you enter is shown to everyone once your agency is verified and a listing is published:

  • Your listings, with their photos, and your agency’s public profile: logo, name, public email and phone, website, city and office address.
  • The name and photo of the agent on each listing. An agent’s work phone is shown to buyers who ask for it.

Some things never go public:

  • A listing’s exact position, unless you choose to show it. Otherwise the marketplace shows an area of about 300 metres around it.
  • A listing’s property code (its official cadastral number).
  • Your clients, leads, deals and notes.

See Adding a listing for what each listing field shows.

Passwords and sign-in

  • Passwords need at least 8 characters, with an uppercase letter, a lowercase letter, a number and a symbol.
  • Five wrong passwords in a row lock the account for 5 minutes.
  • Password reset links work for one day. Sign-up confirmation links work for 24 hours.
  • Changing or resetting a password signs the person out on every device.
  • When someone asks for a password reset or a new confirmation link, the CRM never says whether the email address has an account.

See Signing in.

Sessions

  • With Keep me signed in, a session lasts 7 days. Without it, it lasts until the browser is closed, and at most 12 hours.
  • Signing out in one browser tab signs you out in the others.
  • When an agency admin removes an agent, the agent’s sessions are ended and they can no longer sign in.

What happens to your data

  • When a plan ends, most of the CRM closes, but nothing is deleted. Paying again brings everything back. See Plans and billing.
  • When an agent is removed, their account is closed, but their listings, clients and deals stay in the agency.
  • When an organization deactivates one of its agencies, nobody in it can sign in and its listings leave the marketplace, but its data stays.
  • When someone sends a website form, the CRM keeps the consent wording they agreed to with their lead, as a record. See Website forms.

Ilir wants to know who has been inside Tirana Living’s CRM this month. He opens SADE access.

He sees one SADE view, from the day he asked SADE for help with a lead’s source: the reason, “1 minute”, and the number of requests. Above it, under “Openings by Riviera Group”, are two openings by Olsa Kola, each with 0 changes.

He also checks that only he can open the agency’s QKB extract: Arta, Besnik and Erjona see the verification banner, but not the documents.

Something unclear or missing? Write to [email protected] or call +355 69 808 0118.