Privacy Policy

1. Data Controller

Hemlo AB is responsible for the processing of your personal data. You can reach us at privacy@hemlo.ai.

2. Scope

This privacy policy applies to the Hemlo website (hemlo.se) and the Hemlo browser extension for Chrome. It describes what data we collect, how it is used, and your rights.

3. Data We Collect

When you use the Hemlo extension and website, the following data may be processed:

• Property listing data displayed publicly on Hemnet, Booli, Boneo, and Idealista (e.g. price, address, association name) — extracted from the page to provide analysis.
• Authentication tokens — stored in session storage and cleared when the browser is closed.
• Chat messages — sent to the Hemlo API when you actively chat with the AI advisor.
• Watchlist selections — requires an account and is stored in Hemlo's database.
• Language preference — stored locally in the browser.
• Email address — if you create an account.

4. Data We Do NOT Collect

The Hemlo extension:

• Does not collect analytics or tracking data (zero third-party SDKs).
• Does not use cookies.
• Does not collect browsing history.
• Does not collect personal data beyond email address (when creating an account).

5. Browser Storage

The extension uses browser storage as follows:

• Session storage: authentication tokens and active tab state — automatically cleared when the browser is closed.
• Local storage: chat history, dismissed URLs, and language preference — stored locally in your browser.

6. Third Parties

Hemlo communicates only with Hemlo's own API (hemlo.se). No data is shared with third parties. The extension contains no third-party analytics or tracking libraries.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to the personal data we hold about you.
• Request deletion of your data.
• Request data portability — receive your data in a structured format.
• Object to the processing of your data.

Contact privacy@hemlo.ai to exercise your rights.

8. Data Retention

Session data (authentication tokens, tab state) is cleared when the browser is closed. Account data (email, watchlist, chat history) is retained as long as you have an active account and deleted upon request.

9. Changes to This Policy

We may update this privacy policy. Material changes will be communicated via the website or extension.

10. Contact

For privacy-related questions, contact us at privacy@hemlo.ai.