Legal

Privacy Policy

Last updated: July 17, 2026

This English translation is provided for convenience. If there is any inconsistency, the Swedish version prevails.

1. Data controller

Daniel Rodolfo Treviño Bergman (“we”, “us”) is the data controller for the processing of your personal data in the Bokoll.ai service. If you have questions about this policy or our processing, you can reach us at hej@bokoll.app.

2. Data we process

  • Account data — name, email address and profile picture from your login (e.g. Google), as well as login credentials.
  • Usage data — property links you submit, saved homes, analysis results and your scan history.
  • Purchase information — which scan packages you have bought and your balance. Card and payment details are handled by our payment partner Paddle and never reach us.
  • Technical information — IP address, device and browser type, and logs, for operations and security.
  • Communication — messages when you contact our support.

3. Purposes and legal basis

Purposes and legal basis for the processing
PurposeLegal basis
Providing your account, analyses and scan balancePerformance of contract
Security, troubleshooting and abuse preventionLegitimate interest
Improving and developing the serviceLegitimate interest
Bookkeeping and other legal obligationsLegal obligation
News and offers by emailConsent (can be withdrawn)

4. Who we share data with

We never sell your personal data. Data is only shared with:

  • Service providers — providers of hosting, database and operations, and AI providers that process documents to produce your analyses, solely on our instructions.
  • Paddle — our Merchant of Record, which handles payment, receipts, VAT and purchase administration.
  • Professional advisers — e.g. lawyers and accountants, when needed.
  • Authorities — when required by law.

5. Transfers outside the EU/EEA

Some of our providers process data outside the EU/EEA, for example in the United States. When that happens we use appropriate safeguards, such as the European Commission’s standard contractual clauses or transfers to recipients covered by an adequacy decision (e.g. the EU–US Data Privacy Framework).

6. Retention

We keep your data for as long as you have an account with us. When you delete your account it is deactivated immediately and you can no longer log in. Your data is then kept for up to 2 years for audit and security purposes before being deleted or anonymized. Some data may be kept longer where the law requires it, for example accounting records.

7. Your rights

Under the GDPR you have the right to:

  • access the data we process about you (a copy of your data),
  • have inaccurate data corrected,
  • have your data deleted (“the right to be forgotten”),
  • request restriction of the processing,
  • receive your data in a machine-readable format (data portability),
  • object to processing based on legitimate interest,
  • withdraw a given consent at any time.

Contact us at hej@bokoll.app and we will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

8. Security

We protect your data with technical and organizational measures, including encryption in transit, strict access controls and row-level permissions in the database.

9. Cookies and local storage

We only use necessary storage in your browser: your login session and your theme preference. We do not use any advertising or tracking cookies. At checkout, Paddle may set its own cookies — see Paddle’s privacy policy.

10. Changes to this policy

We may update this policy, for example as the service evolves or legislation changes. In the event of material changes we will inform you in the service or by email.

11. Contact

Daniel Rodolfo Treviño Bergman
Email: hej@bokoll.app

Also read our terms of service.