Privacy policy
Last updated: 6 November 2026
1. Controller
Immoprobe – Sergey Novikov, c/o Online-Impressum 11306, Europaring 90, 53757 Sankt Augustin — contact@immoprobe.de
2. What we process
Immoprobe is a calculator and a place to keep rental investment properties. You connect your own AI assistant (Claude or ChatGPT, say) yourself; its provider is your contractual partner, and we run no language model of our own. The calculator without an account needs no data from you; an account exists only with an e-mail address.
| Where | Which data | Purpose · legal basis (Art. 6(1) GDPR) | Retention |
|---|---|---|---|
| Calculator without account | your inputs — not stored; a share link carries them in its address, and who gets it is your choice; once opened, it stays in the technical logs for up to 7 days like any address (Hosting). IP address | calculation; rate limiting and troubleshooting · (f) | counters: minutes |
| Account and sign-in | e-mail address, last sign-in, language, plan; sign-in link and code as a hash; session cookie | providing the service · (b) | link and code 10 minutes, cookie 30 days, account until you delete it |
| Properties, notes, lists | what you or your assistant save: calculator inputs, address, origin (portal, listing id, link), notes — which may name third parties, such as an agent —, who created the entry | providing the service · (b) | until you delete them; trash 90 days |
| Files of a property | what you upload or your assistant has us fetch by address: photos, floor plans, exposés and other documents — which may name third parties, such as an agent —, their name and the address they came from; resized versions of photos | providing the service · (b) | until you delete them; with the property after the trash |
| Tokens and connected apps | label, scopes, hash (never the token itself), created, last used; for OAuth the app's name and the tokens issued | providing the service · (b) | until revoked in the settings |
| Your AI assistant | what it sends us (property data, addresses, notes); our answers go back to its provider | at your instigation · (b) | — |
| Address lookup | the address, sent to Geoapify to be turned into coordinates; the result cached without reference to your account; a monthly counter for your quota | providing the service · (b) | cache 30 days, counter up to two months |
| Activity log | per call: operation, success or error code, duration, time, account, name of the token or app — no content; shown to you under "Activity" | security and troubleshooting · (f); showing it to you · (b) | 30 days |
| Ads | only if you arrive through an ad with a campaign tag in the address (utm_source, utm_medium, utm_campaign): once per visit as soon as you enter something in the calculator, and once as soon as you open the data for a place on the map, a signal with that tag to our server — without your inputs or the place, without a cookie, nothing stored in the browser | measuring what our ads achieve · (f) | up to 7 days in the technical logs (Hosting) |
| Hosting | IP address and technical logs at Cloudflare | delivery and protection against attacks · (f) | briefly |
Land values, the other geodata and the map come from our own data on our own servers; no map provider receives your IP address. The only cookie is session (HttpOnly, Secure, SameSite=Strict); it is required for the service and needs no consent (§ 25(2) no. 2 TDDDG). There are no tracking, advertising or analytics cookies. Database backups are overwritten within 30 days of a deletion.
3. Recipients
| Recipient | Purpose | Location | Basis |
|---|---|---|---|
| Cloudflare, Inc. | hosting, databases, storage, protection | USA — databases and files in the EU | processor agreement, standard contractual clauses (Art. 46(2)(c) GDPR) |
| Resend, Inc. | sign-in e-mails | USA | processor agreement, standard contractual clauses |
| Geoapify GmbH | address lookup | Germany | processor agreement |
| the provider of your AI assistant | our tools' answers to your assistant | your choice | your contract with the provider |
We sell no data and pass none on for advertising.
4. Your rights
Access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests (Art. 15–21 GDPR): write to the address above. You may complain to a data protection authority (Art. 77), for instance the Berlin Commissioner for Data Protection and Freedom of Information. In the settings you download all data of your account as JSON and delete the account yourself — at once and completely.