Privacy Policy

HindaAI is the controller for account, support, and product usage data processed through this website and application. For privacy requests and controller contact, email privacy@hindaai.ee.

Personal Information

When you create an account or use our services, we may collect your name, email address, and property addresses you search for.

Public Valuation Snapshots

When you request a public valuation snapshot without creating an account, we collect the searched property address, the verified public-register match, optional email if you enter it, valuation request/result metadata, and a private guest-access token link. The guest token is stored server-side only as a hashed guest token, but anyone with the complete private link can reopen the guest result until the link expires or is claimed into an account.

Usage Data

We automatically collect information about how you interact with HindaAI, including pages visited, features used, and actions taken within the platform.

Technical Data

We collect technical information such as your IP address, browser type, device type, and operating system to ensure platform security and performance. For public valuation snapshots, client IP data is also used for security processing, rate limiting, abuse prevention, and Cloudflare Turnstile verification where enabled.

We process your personal data based on the following legal grounds (Art. 6 GDPR):

• Contract performance — to provide you with the services you have signed up for, including property valuations and reports.
• Requested service or pre-contract steps — to process public valuation snapshot requests that you submit before creating an account, including the optional email if you provide one.
• Legitimate interests — to improve our platform, prevent fraud, and ensure security.
• Consent — for optional analytics cookies and marketing communications, which you can withdraw at any time.
• Legal obligation — to comply with applicable laws and regulations, including tax and accounting requirements.

• Provide and maintain our property intelligence services
• Generate statistical valuations and property reports
• Create and protect private guest valuation links, and let you claim a guest snapshot into an account
• Improve platform accuracy and user experience
• Send service-related communications and, with your consent, marketing updates
• Prevent fraud and ensure platform security, including IP-based rate limiting and bot checks
• Comply with legal obligations

We keep personal data only for as long as needed to operate the service, meet legal obligations, resolve disputes, and protect the platform. Account, request, and technical records are reviewed and removed or anonymised when they are no longer needed.

Deletion is not always immediate: limited records may remain in security logs, accounting records, backups, or source-governed datasets until the relevant legal, operational, or backup retention period expires.

Guest valuation access links currently expire after 30 days. Expiry removes token-gated guest access, but the underlying valuation request, report data, optional email, security records, and source-linked public-register data may be retained for the applicable service, security, legal, backup, or source-governed period unless a privacy request is fulfilled or another retention rule applies.

We use service providers where needed to run HindaAI. The current production examples and backend expect ZeptoMail for transactional email, Cloudflare for security/CDN/Turnstile, Hetzner for hosting, and Stripe only if paid checkout is enabled. Google Analytics is used only when permitted by your cookie choices.

• ZeptoMail — transactional account and verification email delivery
• Cloudflare — security, CDN, and Turnstile bot protection
• Hetzner — hosting infrastructure in EU data centers
• Stripe — payment processing if paid checkout is enabled
• Google Analytics — consent-based analytics after analytics cookies are accepted
• Open data APIs — public property and statistical data retrieval; we do not send your account identity to these sources for ordinary lookups
• Discord — optional internal operational notification channel if a public valuation webhook is enabled

If the public valuation Discord webhook is enabled, the notification payload is limited to timestamp, page or locale path, and the property address. We do not send Discord the optional email, client IP, guest token, private link, valuation id, or account identity.

We use cookies and similar technologies to operate our platform and improve your experience. For detailed information about the cookies we use, please see our Cookie Policy.

Under the GDPR, you may request access, rectification, erasure, portability, restriction, objection, and review of relevant automated processing.

We handle requests manually and may need to verify your identity. Some requests can be limited by legal duties, backup retention, fraud-prevention records, or source-license obligations. To exercise rights, contact privacy@hindaai.ee.

Many property facts come from public or open registers, but public availability does not remove GDPR transparency, lawful-basis, objection, and retention obligations when those facts are linked to your search, guest valuation, account, report, PDF, export, admin view, security log, or support request.

HindaAI has a privacy contact for data-protection questions. This contact is not presented as a formally appointed Data Protection Officer unless we publish that appointment separately. Email privacy@hindaai.ee.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

• Website: aki.ee
• Email: info@aki.ee

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and by posting a notice on our website. We encourage you to review this policy periodically.