Privacy Policy

We process information relevant to operating LejeScanner and keeping the platform secure.

• Account data: name, email, language, access status and account creation time.
• Onboarding data: rental preferences, move-in date, budget, areas, rooms and optional preferences.
• Usage data: saved searches, favourites, notifications, reported listings and technical events.
• Consent history: time and source for acceptance of age 18+, terms, privacy policy, service emails and marketing.
• Payment status: plan, access period, Stripe customer id and payment or cancellation status.
• Technical data: IP address, browser, device type, security logs and necessary cookies.

Payment cards, card security codes, full invoice details and billing address are handled by Stripe. LejeScanner does not store card details.

Stripe processes payments and billing under Stripe's own terms and privacy policy.

We process personal data for the following purposes and legal bases.

• Account creation and operation: necessary to perform our agreement with you.
• Access to original listings and subscription: necessary to perform our agreement with you.
• Payment status, billing and accounting requirements: agreement performance and legal obligations.
• Saved searches, favourites and rental matches: necessary to provide the features you use.
• Service emails about account, access, saved searches and important operational messages: necessary to provide the service or based on your choice.
• Marketing, offers and news: only where you have given voluntary consent.
• Security, abuse prevention and debugging: our legitimate interest in protecting the platform and users.
• Product analytics: only when relevant cookie and analytics consent has been obtained.

Service emails are practical messages that help us deliver a requested feature, such as account access, subscription, saved searches or important operational changes.

Marketing is separate from service emails and may include offers, news, campaigns and general rental updates. Marketing is only sent if you have actively consented. You can opt out from your profile.

We only share personal data where necessary to provide LejeScanner, comply with legal requirements or protect the platform.

• Stripe: payment, subscription, invoices and billing portal.
• Resend: email delivery.
• Neon or equivalent database provider: database operation.
• Vercel: frontend/API hosting.
• PostHog: product analytics, when lawfully enabled.
• Advisers, authorities or complaint bodies when necessary for legal claims or mandatory obligations.

Some providers may process data outside the EU/EEA. Where this happens, the transfer must rely on a valid transfer mechanism, such as EU Standard Contractual Clauses or another lawful basis.

Where possible, we choose EU regions for hosting and database services.

We only keep personal data for as long as necessary for the purposes for which it was collected, or for as long as we are legally required to keep it.

When a retention period expires, we delete or anonymise the data unless continued retention is necessary for accounting, security, consent documentation, disputes or legal claims.

• Account data is kept while the account is active. After account deletion, account data is normally deleted or anonymised within 30 days unless longer retention is necessary.
• Onboarding data and rental preferences are kept while the account is active and normally deleted or anonymised within 30 days after account deletion.
• Saved searches, favourites and notification settings are kept while the feature is used and deleted when the user deletes them or the account is deleted.
• Marketing consent is kept while active. If consent is withdrawn, we keep limited documentation of the opt-out so we do not contact you again by mistake.
• Consent to age 18+, terms and privacy policy is kept as documentation while the account is active and afterwards for as long as documentation may be necessary for legal claims.
• Subscription and payment status is kept as long as necessary for access, support, documentation and mandatory accounting requirements.
• Support requests are normally kept for up to 24 months after the conversation ends, unless longer retention is necessary for a specific case.
• Security logs and technical logs are normally kept for up to 90 days, unless longer retention is necessary to investigate abuse, errors or security incidents.
• Rental listings and crawler data are kept while the listing is considered active or relevant for quality, duplicate control and documentation. Expired listings are deleted or anonymised according to internal cleanup rules.
• Backups are deleted according to our normal backup rotation. Data may therefore briefly exist in backups after deletion from production systems.

You have several rights under data protection law. The rights may depend on the situation and legal basis.

• Right of access.
• Right to rectification.
• Right to deletion in relevant cases.
• Right to restriction of processing.
• Right to data portability in relevant cases.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent without affecting processing already lawfully carried out.

If you are dissatisfied with our processing of personal data, please contact us first at support@LejeScanner.dk.

You can also complain to the Danish Data Protection Agency via datatilsynet.dk.