Legal
Privacy Policy
Last updated: July 17, 2026
This English translation is provided for convenience. If there is any inconsistency, the Swedish version prevails.
1. Data controller
Daniel Rodolfo Treviño Bergman (“we”, “us”) is the data controller for the processing of your personal data in the Bokoll.ai service. If you have questions about this policy or our processing, you can reach us at hej@bokoll.app.
2. Data we process
- Account data — name, email address and profile picture from your login (e.g. Google), as well as login credentials.
- Usage data — property links you submit, saved homes, analysis results and your scan history.
- Purchase information — which scan packages you have bought and your balance. Card and payment details are handled by our payment partner Paddle and never reach us.
- Technical information — IP address, device and browser type, and logs, for operations and security.
- Communication — messages when you contact our support.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Providing your account, analyses and scan balance | Performance of contract |
| Security, troubleshooting and abuse prevention | Legitimate interest |
| Improving and developing the service | Legitimate interest |
| Bookkeeping and other legal obligations | Legal obligation |
| News and offers by email | Consent (can be withdrawn) |
4. Who we share data with
We never sell your personal data. Data is only shared with:
- Service providers — providers of hosting, database and operations, and AI providers that process documents to produce your analyses, solely on our instructions.
- Paddle — our Merchant of Record, which handles payment, receipts, VAT and purchase administration.
- Professional advisers — e.g. lawyers and accountants, when needed.
- Authorities — when required by law.
5. Transfers outside the EU/EEA
Some of our providers process data outside the EU/EEA, for example in the United States. When that happens we use appropriate safeguards, such as the European Commission’s standard contractual clauses or transfers to recipients covered by an adequacy decision (e.g. the EU–US Data Privacy Framework).
6. Retention
We keep your data for as long as you have an account with us. When you delete your account it is deactivated immediately and you can no longer log in. Your data is then kept for up to 2 years for audit and security purposes before being deleted or anonymized. Some data may be kept longer where the law requires it, for example accounting records.
7. Your rights
Under the GDPR you have the right to:
- access the data we process about you (a copy of your data),
- have inaccurate data corrected,
- have your data deleted (“the right to be forgotten”),
- request restriction of the processing,
- receive your data in a machine-readable format (data portability),
- object to processing based on legitimate interest,
- withdraw a given consent at any time.
Contact us at hej@bokoll.app and we will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
8. Security
We protect your data with technical and organizational measures, including encryption in transit, strict access controls and row-level permissions in the database.
9. Cookies and local storage
We only use necessary storage in your browser: your login session and your theme preference. We do not use any advertising or tracking cookies. At checkout, Paddle may set its own cookies — see Paddle’s privacy policy.
10. Changes to this policy
We may update this policy, for example as the service evolves or legislation changes. In the event of material changes we will inform you in the service or by email.
11. Contact
Daniel Rodolfo Treviño Bergman
Email: hej@bokoll.app
Also read our terms of service.