Privacy policy

1. Who we are

Anidola is run by Anidola Technologies LLC, registered in New York, United States, under number 8032062 (DOS ID), 2100 Nesconset Highway #1082, Stony Brook, New York 11790, United States. We decide what your data is used for: we’re the controller.

For anything about your data, write to privacy@anidola.com. Our representative in the European Union is [name and address of the EU representative]. You can write to them instead of us, in any EU language, about anything in this policy.

2. What we keep, and why

For each use, the data and the reason the law lets us keep it:

• Your account: your email address, your language, the country you signed up in and how you sign in, to give you an account (our contract with you).
• What you buy: the product, the price, the date, and the record, with its time, that you asked for a report to start at once and so gave up your 14-day right of withdrawal. Stripe handles your card; we never see it. We keep these to give you what you bought and for our accounts (the contract, the law on accounting, and the law on consumer contracts, to prove it if needed).
• A report bought without an account: the email address you give when paying, to send you its private link, which opens signed in with that address (the contract). A report you share: the email addresses you share it with, so those people can read it signed in (the contract).
• Your saved addresses, notes, cost estimates and, with Anidola Professional, your renovation and rent cases, your client report’s business details and logo, your notes to clients, the addresses you follow and the address lists you check in bulk (kept 90 days), as you entered them (the contract).
• A home you’ve claimed: your role, what you enter under “Your home”, your calendar, reminders, the renovation works you record (dates, costs, the business that did them, grants) and selling plans (the contract).
• Anidola’s Home Companion: your alert settings and the alerts we sent you (the contract).
• Estate agencies: the agency’s details, its members’ email addresses and invitations (the contract with the agency).
• Support: your message and your email address, to answer you (our legitimate interest in helping you).
• Preventing abuse: a scrambled form of your internet address (never the address itself) to limit how often something can be tried, the records of a suspension, and what our administrators changed on your account, with who and when (our legitimate interest in protecting Anidola and its users).
• Keeping Anidola working: technical logs and error reports, without the addresses you search or what you type (our legitimate interest).
• Statistics: how many pages are viewed and how many reports are opened per day and area, counted without any cookie and without keeping who you are. These figures say nothing about a person (our legitimate interest in knowing how Anidola is used).
• The Report Assistant, if you use it: your questions about a report and its answers, with your ratings, to answer you, and to check and improve the answers (the contract, and our legitimate interest in answers that are right). Don’t type personal details in a question: the assistant doesn’t need them.

You don’t have to give us anything, but without an email address we can’t open an account or send you a report you bought.

3. Where your data comes from

Mostly from you. Some comes from others: if someone shares a report with you, they give us your email address; if your estate agency invites you, the agency gives us your email address; if you choose “Continue with Google”, Google gives us your email address.

4. What we never do

We don’t sell your data, don’t use it for advertising, and don’t build profiles of you. We never look up or keep the names of a property’s owners. Your report is about an address, not about you.

We make no decisions about you by automated means alone.

5. If you live at or own an address someone looks up

A report gathers public information about a property from official sources: the cadastre (FPS Finance’s CadGIS: parcels and buildings), the regions’ permit registers (Flanders’ Omgevingsloket, the Walloon Public Service’s permits, Brussels’ Nova), their soil registers (OVAM, the Walloon soil database BDES, Brussels Environment), Flanders’ housing registers (Wonen in Vlaanderen’s inventory of unfit and uninhabitable homes and its register of restoration claims), their flood maps (the Flanders Environment Agency’s Waterinfo, the Walloon Public Service, Brussels Environment), their heritage inventories (the Flanders Heritage Agency, the Walloon Public Service, urban.brussels), their zoning and planning maps (Digitaal Vlaanderen, the Walloon Public Service, urban.brussels), and the area’s air, noise, hazard, water, elevation and internet maps (IRCEL-CELINE, the regions, the BIPT and the European Environment Agency). Sometimes this information could say something about the person who owns or lives in the property. We use it because of our legitimate interest, and the interest of buyers and tenants, in knowing about a property before deciding. We present it as the official source gives it, never look up or keep owners’ names, and show nothing about anyone’s private life. If something is wrong, or you object to it being shown, write to privacy@anidola.com: we’ll correct it, or remove it unless a buyer’s interest in an official record outweighs yours, and we’ll explain our answer.

6. Who else sees your data

Companies that run part of Anidola for us, each bound by a data processing agreement:

• Microsoft Azure hosts Anidola in its Belgian and West European data centres.
• Microsoft Entra ID handles signing in.
• Brevo sends our emails.
• Google Workspace keeps our support and privacy mailboxes, so it holds the emails you write to us.
• Anthropic writes the Report Assistant’s answers. It receives your question, the earlier ones in the conversation and the report’s data (with the price, loan and “only home” you saved on the cost card, if you did), never your name or email address, and doesn’t use them to train its models.

Companies that receive data and decide on their own use of it, under their own privacy notices:

• Stripe takes payments. As the seller of record it also issues your receipt and invoice.
• Google, only if you choose “Continue with Google”: it tells us your email address.
• The base map’s tiles come from the National Geographic Institute (Belgium): your browser loads them directly, so the Institute sees your internet address.
• Google Maps, only if you open the Street View link under the aerial photo: you then leave Anidola, and Google receives the address.

When we check an address with Digitaal Vlaanderen, Wonen in Vlaanderen, the Flanders Environment Agency, OVAM, the Flemish Department of Environment, the Flanders Heritage Agency, the Walloon Public Service, Brussels Environment, urban.brussels, the Brussels Regional Informatics Centre (UrbIS), FPS Finance, Infrabel, the BIPT, IRCEL-CELINE, the European Environment Agency and the Joint Research Centre, we send them the address, never anything about you.

7. Outside the European Union

We keep your data in the European Union (Microsoft Azure, Belgium and West Europe). Anidola Technologies LLC is a US company, so the few people who run Anidola may reach your data from the United States. Some of our providers are also US companies or have US parents:

• Microsoft (Azure, Entra ID): EU Data Boundary; EU–US Data Privacy Framework and standard contractual clauses.
• Stripe: Stripe Payments Europe (Ireland); transfers to Stripe, Inc. under the Data Privacy Framework and standard contractual clauses.
• Google (only with “Continue with Google”): Data Privacy Framework.
• Google Workspace (our mailboxes) and Google Maps (the Street View link): [safeguard to confirm].
• Anthropic (the Report Assistant): a US company; [safeguard to confirm: Data Privacy Framework or standard contractual clauses].
• Brevo (France) and the National Geographic Institute (Belgium) keep data in the EU.

Write to privacy@anidola.com for a copy of these safeguards.

8. How long we keep it

We delete what we no longer need, automatically:

• Your account and what hangs on it: until you close it.
• A report: 24 months after its data was last checked, with its private links; we email you 30 days before.
• Payments made without an account (or from an account since closed): 10 years, for our accounts.
• Support messages: 24 months after we handled them.
• Alerts we sent: 24 months.
• Agency invitations: 30 days after they expired or were used.
• Records of a suspension: 24 months after it ended. What our administrators changed: 24 months.
• The scrambled internet address used to limit attempts: an hour at most.
• Email addresses a report was shared with: as long as the report, or until the share is removed.
• Address lists checked in bulk: 90 days.
• A home you’ve claimed, and what you entered under it: until you give up the claim or close your account.
• The Report Assistant’s conversations: 12 months after their last message.

Logs and error reports are kept for 30 days.

9. Your rights

You can ask us at any time:

• for a copy of your data: “Download my data” on your account page gives it to you at once, in a file you can take elsewhere;
• to correct it: most of it you can change yourself, the rest through support;
• to delete it: “Close my account” on your account page deletes it, except what the law makes us keep;
• to limit how we use it;
• to object to the uses based on our legitimate interest (support, preventing abuse, keeping Anidola working, statistics): we then stop unless we have a compelling reason, which we’ll explain to you;
• without an account: write to support from the email address you used.

We answer within one month. You can also write to our representative in the European Union.

If you think we don’t respect your rights, you can complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, or to the data protection authority of the EU country where you live or work.

10. How we protect it

Everything is encrypted when it travels and where it’s stored. Our systems sign in to each other without passwords where they can, the rest are kept in a secure vault, and only a few people at Anidola can reach your data, when they need to.

11. Cookies

We only use cookies Anidola can’t work without, so we don’t ask for your consent:

• anidola_session keeps you signed in, for 30 days or until you sign out.
• anidola_login is used while you sign in, for 10 minutes.
• anidola_report_keys keeps the agency listing links opened in this browser, so their reports open again, for 24 months. anidola_purchase_keys opens a report you just bought without an account, in this browser until you close it. anidola_share_keys opens a report shared with you, in this browser, for 30 days.

Some things stay in your browser only and are never sent to us: the answers you give to estimate costs, the visit checklist’s ticks, an agency invitation while you sign up, and a short notice after you close your account.

We use no analytics or advertising cookies: we count page views without any cookie.

12. Children

Anidola is not for people under 16, and we don’t knowingly keep data about them.

13. Changes to this policy

When this policy changes, the date at the top changes too; if the change matters, we tell account holders by email before it applies.

This policy exists in Dutch, French, German and English; all versions say the same thing.