Privacy policy
This policy explains how personal data is handled in RealtyKeep. Version 2026-11-12.
Who is responsible
- For your own account (name, email, phone, settings) and for running the service, [company name] (organisation number [organisation number], [address], [email]) is the controller.
- For "Find a home" — your search requests, and passing them to landlords when you ask us to — [company name] is the controller until a landlord receives them; from then on that landlord is the controller of what it keeps.
- For data a landlord stores about its tenants, applicants and staff — leases, spaces, service requests, keys — that landlord (the company using RealtyKeep) is the controller, and we process the data on its behalf under a data processing agreement. Questions about that data are best sent to your landlord.
What we process, why and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, password (stored hashed), language and other settings | Create and run your account, sign you in, send you messages about the service | Contract |
| Two-step sign-in secret and recovery codes (protected) | Protect your account | Contract and legitimate interest (security) |
| What you add: service requests, comments, applications, search requests | Provide the functions you use | Contract |
| A search request you allow landlords to see (the box is never ticked for you): your name, email, phone and what you are looking for, shown to landlords with an open waiting list and property in the city you named | Help you find a home | Consent — untick the box or delete the request at any time |
| Activity log: what was changed, by whom and when, and the IP address | Security, finding errors, showing landlords who changed what | Legitimate interest |
| Business contact details published on company websites, in public directories or in OpenStreetMap (companies we invite): company name, a shared company email address (such as info@ — never a person's own address), phone number, website and where we found them; when an invitation was sent and whether its link was clicked. We do not send such invitations to countries where they need prior consent | Offering RealtyKeep to landlords and property companies | Legitimate interest — object at any time with the unsubscribe link in the email |
| Visits to the start page: time, where the visit came from (an invitation, a search engine, another website or directly) and the page language. No cookies; the IP address is only used, together with a random value that is replaced every day, to make a code that tells today's visitors apart — the IP address itself is never stored, and the code can't be traced back to it | Knowing how many people find RealtyKeep and how | Legitimate interest |
| Visitor statistics, only if you accept statistics cookies: country, browser, operating system and kind of device, counted as daily totals — nothing that identifies you | Knowing which countries and devices RealtyKeep is used from | Consent — change it at any time under Cookie settings |
| Sign-ins and session times (when a session started and was last active) | Usage statistics for the platform and for your landlord, shown as totals per role | Legitimate interest |
| Company and billing details, invoices | Charge for the service and keep accounts | Contract and legal obligation (accounting law) |
| Technical data: requests, response times, error counts (no content) | Keep the service running | Legitimate interest |
We do not sell personal data, do not use your account data for advertising and do not make automated decisions with legal effect.
Who receives data
We use these sub-processors to run the service:
- [list your hosting and email providers]
Payments by card are handled by Stripe; we never see or store card numbers. Property addresses (not personal data about tenants) are looked up on OpenStreetMap's Nominatim service to show properties on a map. When you look at a map in RealtyKeep, your browser loads the map pictures from the OpenStreetMap Foundation (UK), which then sees your IP address. If data is transferred outside the EU/EEA, we make sure there are appropriate safeguards, such as the EU's standard contractual clauses.
How long we keep data
- Accounts: until you delete your account, or the agreement with your landlord ends and the data is deleted.
- Activity log: two years; IP addresses in it are removed after 90 days.
- Session times: two years.
- Contacts found by our crawler: deleted after 12 months if they were never invited, and 12 months after the invitation if they were. Who clicked an invitation's link: 90 days. We keep only the address and the date of an invitation, so the same company is not invited twice, and addresses that unsubscribe on a do-not-email list so we never contact them again.
- Visits to the start page: two years (without IP addresses). Visitor statistics (totals only): 13 months.
- Addresses typed at failed sign-ins: 90 days.
- Backups: kept for 30 days, then deleted automatically.
- Invoices and accounting records: seven years, as Swedish accounting law requires.
- Email links (password reset and similar): stored hashed, expire within days and are deleted 30 days after use or expiry.
Your rights
You have the right to access, correct and delete your personal data, to restrict or object to processing, and to receive your data in a machine-readable format. Under Profile settings you can download all data about your account and delete your account yourself. For other requests, contact [email] (or your landlord, for data it stores about you). You also have the right to complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
RealtyKeep uses necessary cookies that keep you signed in, protect forms and remember your cookie choice. It also stores display preferences (such as a collapsed menu or the theme on the start page) in your browser. If you accept statistics, your first visit each day is counted by country, browser, operating system and kind of device, as totals only; without your consent nothing is counted. You can change your choice at any time under "Cookie settings" at the bottom of every page. No tracking or advertising cookies are used. Fonts are served by RealtyKeep itself; map pictures come from OpenStreetMap (see "Who receives data").
Security
Passwords are hashed, connections are encrypted, two-step sign-in is available, access is limited to the people who need it, and every change is logged. If a personal data breach occurs that is likely to put you at risk, we will inform you and, where required, IMY.
Contact
[company name] · [address] · [email]