Privacy policy
Last updated: 28 September 2026
1. Controller
Immoprobe – Sergey Novikov, c/o Online-Impressum 11306, Europaring 90, 53757 Sankt Augustin — contact@immoprobe.de
2. What we process
Immoprobe is a calculator and a place to keep rental investment properties. You connect your own AI assistant (Claude or ChatGPT, say) yourself; its provider is your contractual partner, and we run no language model of our own. The calculator without an account needs no data from you; an account exists only with an e-mail address.
| Where | Which data | Purpose · legal basis (Art. 6(1) GDPR) | Retention |
|---|---|---|---|
| Calculator without account | your inputs — not stored; a share link carries them in its address, and who gets it is your choice; once opened, it stays in the technical logs for up to 7 days like any address (Hosting). IP address | calculation; rate limiting and troubleshooting · (f) | counters: minutes |
| Account and sign-in | e-mail address, last sign-in, language, plan; sign-in link and code as a hash; session cookie | providing the service · (b) | link and code 10 minutes, cookie 30 days, account until you delete it |
| Properties, notes, lists | what you or your assistant save: calculator inputs, address, origin (portal, listing id, link), notes — which may name third parties, such as an agent —, who created the entry | providing the service · (b) | until you delete them; trash 90 days |
| Tokens and connected apps | label, scopes, hash (never the token itself), created, last used; for OAuth the app's name and the tokens issued | providing the service · (b) | until revoked in the settings |
| Your AI assistant | what it sends us (property data, addresses, notes); our answers go back to its provider | at your instigation · (b) | — |
| Address lookup | the address, sent to Geoapify to be turned into coordinates; the result cached without reference to your account; a monthly counter for your quota | providing the service · (b) | cache 30 days, counter up to two months |
| Activity log | per call: operation, success or error code, duration, time, account, name of the token or app — no content; shown to you under "Activity" | security and troubleshooting · (f); showing it to you · (b) | 30 days |
| Hosting | IP address and technical logs at Cloudflare | delivery and protection against attacks · (f) | briefly |
Land values, the other geodata and the map come from our own data on our own servers; no map provider receives your IP address. The only cookie is session (HttpOnly, Secure, SameSite=Strict); it is required for the service and needs no consent (§ 25(2) no. 2 TDDDG). There are no tracking, advertising or analytics cookies. Database backups are overwritten within 30 days of a deletion.
3. Recipients
| Recipient | Purpose | Location | Basis |
|---|---|---|---|
| Cloudflare, Inc. | hosting, databases, storage, protection | USA — databases and files in the EU | processor agreement, standard contractual clauses (Art. 46(2)(c) GDPR) |
| Resend, Inc. | sign-in e-mails | USA | processor agreement, standard contractual clauses |
| Geoapify GmbH | address lookup | Germany | processor agreement |
| the provider of your AI assistant | our tools' answers to your assistant | your choice | your contract with the provider |
We sell no data and pass none on for advertising.
4. Your rights
Access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests (Art. 15–21 GDPR): write to the address above. You may complain to a data protection authority (Art. 77), for instance the Berlin Commissioner for Data Protection and Freedom of Information. In the settings you download all data of your account as JSON and delete the account yourself — at once and completely.