Privacy Policy

1. Data Controller

Hemlo AB is responsible for the processing of your personal data. You can reach us at privacy@hemlo.ai.

2. Scope

This privacy policy applies to the Hemlo website (hemlo.ai) and the Hemlo browser extension for Chrome. It describes what data we collect, how it is used, and your rights.

3. Data We Collect

When you use the Hemlo extension and website, the following data may be processed:

• Property listing data displayed publicly on Hemnet, Booli, Boneo, and supported broker sites (e.g. price, address, association name) — extracted from the page to provide analysis.
• Anonymous feature-usage events in the extension (e.g. that the panel was opened or an analysis was viewed) — first-party data sent only to Hemlo, with no page URLs or browsing history, keyed to a random install ID. Deleted after 90 days.
• Authentication tokens — stored in session storage and cleared when the browser is closed.
• Chat messages — sent to the Hemlo API when you actively chat with the AI advisor.
• Saved homes — requires an account and is stored in Hemlo's database.
• Language preference — stored locally in the browser.
• Email address — if you create an account.

4. Data We Do NOT Collect

The Hemlo extension:

• Does not use third-party analytics or tracking SDKs — feature usage is measured only with the first-party data described above.
• Does not use cookies.
• Does not collect browsing history.
• Does not collect personal data beyond email address (when creating an account).

5. Browser Storage

The extension uses browser storage as follows:

• Session storage: authentication tokens and active tab state — automatically cleared when the browser is closed.
• Local storage: chat history, dismissed URLs, and language preference — stored locally in your browser.

6. Third Parties

Hemlo communicates only with Hemlo's own API (hemlo.ai). No data is shared with third parties. The extension contains no third-party analytics or tracking libraries.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to the personal data we hold about you.
• Request deletion of your data.
• Request data portability — receive your data in a structured format.
• Object to the processing of your data.

Contact privacy@hemlo.ai to exercise your rights.

8. Data Retention

Session data (authentication tokens, tab state) is cleared when the browser is closed. Account data (email, saved homes, chat history) is retained as long as you have an active account and deleted upon request. Anonymous feature-usage events are deleted automatically after 90 days.

9. Changes to This Policy

We may update this privacy policy. Material changes will be communicated via the website or extension.

10. Contact

For privacy-related questions, contact us at privacy@hemlo.ai.