Privacy Policy

BostadAI AB ("BostadAI", "we", "us") provides AI-powered analysis of Swedish real estate listings. We act as the data controller for personal data processed through our website and product. Contact: support@bostadai.com.

• Account data: email address, password hash, name (optional), authentication provider (email or Google).
• Usage data: property listings you submit, generated reports, saved favorites, dashboard activity.
• Technical data: IP address, browser, device, timestamps, error logs.
• Billing metadata: subscription tier, renewal status, customer ID. Card and payment details are handled exclusively by Paddle and never reach our servers.

• To create and operate your account and store your saved reports.
• To generate AI analyses of the listings you submit.
• To enforce plan limits, prevent abuse, and secure the service.
• To send transactional emails (sign-up confirmation, password resets, billing notices).
• To improve our models and product through aggregated, de-identified usage analytics.

Legal bases: performance of contract (providing the service you signed up for), legitimate interests (security, product improvement), legal obligation (tax, accounting), and consent where required (analytics cookies).

Reports produced by BostadAI are generated by large language models using publicly available signals and the listing text you provide. Outputs can be incomplete, outdated, or incorrect. They are intended for informational purposes only and do not constitute financial, legal, tax, or investment advice. You remain responsible for verifying information before making any property decision.

We use essential cookies to keep you signed in and to remember your preferences. We may use privacy-friendly analytics to understand aggregate usage of the product. Where required by law, we ask for consent before setting non-essential cookies. You can clear cookies at any time in your browser settings.

We share personal data only with the subprocessors required to operate the service:

• Cloud hosting & database for storing your account and reports.
• AI providers to generate the property analyses you request.
• Paddle.com Market Limited (Merchant of Record): Paddle is the seller of record for all paid subscriptions. Paddle handles checkout, payment processing, tax compliance, invoicing, refunds and chargebacks. See Paddle's Buyer Terms and Paddle's Privacy Notice.
• Professional advisers and authorities where required by law.

Some subprocessors may process data outside the EU/EEA. Where this happens we rely on Standard Contractual Clauses or adequacy decisions to safeguard your data.

We keep account data while your account is active. Saved reports are retained until you delete them or close your account. Billing records are kept for the period required by Swedish tax law. On deletion of your account we erase or anonymize your personal data within 30 days, except where we are legally required to retain it.

If you are in the EU/EEA you have the right to:

• Access your personal data and request a copy.
• Request rectification of inaccurate data.
• Request erasure ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY).

To exercise any of these rights, email support@bostadai.com. We respond within 30 days.

We apply industry-standard technical and organizational measures — encryption in transit, encrypted storage at rest, access controls, audit logging and least-privilege secrets management — to protect your data. No system is perfectly secure; please use a strong unique password and keep it private.

We may update this policy from time to time. Material changes will be announced in-product or by email. The "last updated" date at the top of this page reflects the latest revision.

Questions about your privacy? Email support@bostadai.com.