Privacy policy

1.What we collect

We collect only what is needed to run the service. Specifically:

• Account details: the name and email address you provide at signup, plus an encrypted password.
• Property details: what you enter about your property, and the data we fetch from the listing link you paste (title, description, photos, price, size and location).
• Content you generate: AI-generated post copy, images and presentation videos, along with any edits you make to them.
• Connected channels: access tokens and profile names for the social accounts you choose to connect (Facebook, Instagram, TikTok, LinkedIn, YouTube).
• Payment details: subscription status, purchase history and receipts. We never see your full card number — that is handled solely by Stripe.
• Technical data: IP address, browser type, language preference and service events, used for operations, security and troubleshooting.
• Statistics: aggregated site usage via Google Analytics — only if you have consented to statistics cookies.

2.Why we process it, and on what basis

We process your data for a specific purpose and on a legal basis under the General Data Protection Regulation (GDPR):

3.AI processing of your content

When you request a post, an image or a video, we pass the necessary property data and photos to our AI providers, which generate the content and return it to us.

We use Anthropic (Claude) for post copy and Google (Gemini and Veo) for images and video. Both act as processors on our behalf under terms that do not permit them to use your data to train general-purpose models.

You should not enter sensitive personal data — such as health information, religious beliefs or national ID numbers — into fields that are sent for AI generation. The service is built for marketing properties, not for handling sensitive data.

4.Who we share data with

We never sell your personal data. We share it only with the providers needed to run the service, and only to the extent they need it:

5.Transfers outside the EU/EEA

Some of our providers process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework.

You can request a copy of the relevant transfer safeguards by writing to us.

6.How long we keep it

• Account data and content are kept for as long as your account is active.
• When you delete your account, your properties, posts and videos are deleted within 30 days.
• Access tokens for social channels are deleted immediately when you disconnect the channel.
• Accounting records, including invoices, are kept for 5 years after the end of the financial year they relate to, as required by Danish bookkeeping law.
• Operational and security logs are kept for up to 12 months.

7.Security

All traffic to and from the service is encrypted with TLS. Data in our database is access-restricted per user, so you can only reach your own properties, posts and videos, and passwords are stored hashed — never in plain text.

Access to production systems is limited to the staff who need it. If we discover a breach that poses a risk to your rights, we notify the Danish Data Protection Agency within 72 hours, and you directly where the risk is high.

8.Your rights

Under the GDPR you have a set of rights you can exercise at any time by writing to us. We respond within one month.

• Access: you can find out what data we hold about you and get a copy.
• Rectification: you can have inaccurate data corrected.
• Erasure: in many cases you can have your data deleted — you can also delete your account yourself in settings.
• Restriction: you can ask us to pause processing temporarily.
• Portability: you can receive the data you provided in a machine-readable format.
• Objection: you can object to processing based on our legitimate interest.
• Withdrawing consent: if you accepted statistics cookies, you can withdraw that at any time — it does not affect the lawfulness of processing before the withdrawal.

9.Complaints

If you are unhappy with how we handle your data we would like to hear it first — but you can always complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, datatilsynet.dk.

10.Changes to this policy

We update this policy as the service or the law changes. The date at the top shows when it was last revised. For material changes we notify you by email or in the service before they take effect.