Privacy Policy
As of 28 October 2026 — pursuant to the GDPR and the Austrian Data Protection Act
1. Data controller
The controller within the meaning of the GDPR is: Fabian Seisl, Innsbruck, Austria. Email: info (at) immomonk.com immoMonk is a private, non-commercial learning and development project in its pilot phase.
2. Visiting the website and the app
When you visit, our servers process technically necessary data such as the requested address, time, browser type and possibly the IP address to ensure operation and security (Art. 6(1)(f) GDPR). Server logs are deleted after 7 days. Calls to our programming interfaces are also recorded in a security log; IP addresses in it are removed after 7 days and the entries deleted after three to four months. We do not use analytics, tracking or advertising tools.
3. Cookies and local storage
The website only stores your language setting in a cookie (icm_lang). After you sign in, the app uses technically necessary cookies or your browser's local storage for sign-in, session, security and settings. There are no tracking or advertising cookies, and therefore no consent banner.
4. Contact form and beta sign-up
When you write to us, we use your name, email address, message and voluntary details (company, phone) to answer your request; the message reaches us by email and is not stored in a database. For the beta sign-up we store your email address to inform you about access; voluntary details (name, role, number of units) reach us by email only. The legal basis is Art. 6(1)(b) and (f) GDPR. We delete the data once it is no longer needed, and the beta sign-up at any time at your request.
5. Calculators
Inputs into the calculators (such as rent, months, index values) are used for the calculation only. They are not stored, not linked to you and not written to server logs.
6. Using the app
For your account we process your name, username, email address, your password (as a hash only, never in plain text) and voluntary details such as landlord address, IBAN or passkeys. In the app you enter data on properties, tenants, contracts, meter readings and documents yourself. You are the controller for the data of your tenants and other third parties; we process it on your behalf and only to provide the software to you. The legal basis for your account data is Art. 6(1)(b) GDPR (terms of use). If you enable push notifications, they are delivered through the push service of your browser or device manufacturer. At your request we delete your account and the related data; in encrypted backups it remains until they expire.
7. AI features
The app's AI features (assistant, analysis of uploaded documents, setup help) use language models from Anthropic (Anthropic PBC, USA) and Google (Gemini). Your inputs and, for document analysis, the document are transmitted to the respective provider. For the assistant, we replace recognisable personal details in your messages with placeholders where possible before transmission; transmission of personal data cannot be ruled out entirely. The AI features only run when you call them yourself. If you connect the app to your own AI assistant via the MCP interface, the data retrieved goes to that service.
8. Service providers and recipients
The following providers process data on our behalf: – Hetzner Online GmbH, Germany: servers in data centres in Nuremberg (website, app, database). – Brevo (Sendinblue SAS), France: sending emails. – Cloudflare, Inc., USA: protecting forms against spam and abuse (Turnstile; loaded on the website, processing your IP address and technical characteristics of your browser) and storing backups (R2), which are encrypted before upload. – Anthropic PBC, USA, and Google: AI features (see section 7). The website loads the typeface “Satoshi” from the Fontshare service of the Indian Type Foundry (India); your IP address is transmitted to its servers in the process (Art. 6(1)(f) GDPR). For providers in the USA, transfers are based on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
9. Data security
Connections to the website and the app are encrypted (TLS 1.2 or higher). Backups are encrypted before they are stored. Access to servers and the database is limited to what is necessary, and we review security regularly. No online service can guarantee absolute security.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Contact info (at) immomonk.com to exercise them. You can also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).