Privacy Policy

We process information relevant to operating LejeScanner and keeping the platform secure.

• Account data: name, email, language, access status and account creation time.
• Onboarding data: rental preferences, move-in date, budget, areas, rooms and optional preferences.
• Usage data: searches, saved searches, favourites, rental alerts and other notifications, reported listings, feedback, ratings, cancellation reasons and technical events.
• Consent history: time and source for acceptance of age 18+, terms, privacy policy, service emails and marketing.
• Payment and subscription data: plan, access period, discounts, payment and cancellation status, and Stripe identifiers such as customer ID, subscription ID, checkout session ID and payment intent ID. We do not store card details.
• Technical data: IP address, browser, device type, security logs and necessary cookies.
• Analytics and campaign data: pages visited, product interactions, events such as signup_completed, checkout_started and purchase_completed, UTM parameters and advertising click identifiers such as gclid, gbraid, wbraid, _fbp and _fbc, where permitted by your consent.
• Conversion data: transaction ID, amount, currency, discounts and, where applicable, your email address in hashed form when your marketing consent permits conversion measurement.

Payment cards, card security codes, full invoice details and billing address are handled by Stripe. LejeScanner does not store card details.

Stripe processes payments and billing under Stripe's own terms and privacy policy.

We process personal data for the following purposes and legal bases.

• Account creation and operation: necessary to perform our agreement with you.
• Access to original listings and subscription: necessary to perform our agreement with you.
• Payment status, billing and accounting requirements: agreement performance and legal obligations.
• Saved searches, favourites and rental matches: necessary to provide the features you use.
• Service emails about account, access, saved searches and important operational messages: necessary to provide the service or based on your choice.
• Marketing, offers and news: only where you have given voluntary consent.
• Security, abuse prevention and debugging: our legitimate interest in protecting the platform and users.
• Product analytics, feedback, feature flags and experiments: only when relevant cookie and analytics consent has been obtained.
• Advertising and conversion measurement: only when relevant marketing consent has been obtained.

Service emails are practical messages that help us deliver a requested feature, such as account access, subscription, saved searches or important operational changes.

Marketing is separate from service emails and may include offers, news, campaigns and general rental updates. Marketing is only sent if you have actively consented. You can opt out from your profile.

We only share personal data where necessary to provide LejeScanner, comply with legal requirements or protect the platform.

• Stripe: payment, subscriptions, discounts, invoices and billing portal. Stripe processes card details; LejeScanner instead receives payment status and Stripe identifiers.
• Resend: email delivery.
• Supabase: database and user authentication.
• Vercel: frontend/API hosting.
• PostHog: product analytics, feedback and ratings, cancellation reasons, feature flags and A/B tests when analytics consent has been given.
• Google LLC (Google Analytics 4, Google Tag Manager and Google Ads): traffic analytics, tag management and advertising/conversion measurement when the relevant analytics or marketing consent has been given. We may send events, campaign data, transaction ID, amount and currency and, where applicable, your email address in hashed form. Data may be processed by Google in the USA under a valid transfer mechanism. See Google's privacy policy at policies.google.com/privacy.
• Meta Platforms Ireland Ltd. (Meta Pixel — Facebook and Instagram): advertising and conversion measurement when marketing consent has been given. We may send events, the Meta identifiers _fbp and _fbc, campaign data, transaction ID, amount and currency and, where applicable, your email address in hashed form. Data may be processed by Meta Platforms Inc. in the USA under a valid transfer mechanism. See Meta's privacy policy at facebook.com/privacy/policy.
• Advisers, authorities or complaint bodies when necessary for legal claims or mandatory obligations.

When you have given analytics consent, PostHog may record how features are used and process feedback, ratings or a cancellation reason that you choose to provide. We use this information to understand problems and improve LejeScanner.

PostHog may also be used for feature flags and A/B tests, so different users may temporarily see different versions of a feature. These tests will not change your agreed price, automatic renewal or statutory rights without clear information and your acceptance.

Some providers may process data outside the EU/EEA. Where this happens, the transfer must rely on a valid transfer mechanism, such as EU Standard Contractual Clauses or another lawful basis.

Where possible, we choose EU regions for hosting and database services.

We only keep personal data for as long as necessary for the purposes for which it was collected, or for as long as we are legally required to keep it.

When a retention period expires, we delete or anonymise the data unless continued retention is necessary for accounting, security, consent documentation, disputes or legal claims.

• Account data is kept while the account is active. After account deletion, account data is normally deleted or anonymised within 30 days unless longer retention is necessary.
• Onboarding data and rental preferences are kept while the account is active and normally deleted or anonymised within 30 days after account deletion.
• Saved searches, favourites and notification settings are kept while the feature is used and deleted when the user deletes them or the account is deleted.
• Marketing consent is kept while active. If consent is withdrawn, we keep limited documentation of the opt-out so we do not contact you again by mistake.
• Consent to age 18+, terms and privacy policy is kept as documentation while the account is active and afterwards for as long as documentation may be necessary for legal claims.
• Subscription and payment status is kept as long as necessary for access, support, documentation and mandatory accounting requirements.
• Support requests are normally kept for up to 24 months after the conversation ends, unless longer retention is necessary for a specific case.
• Security logs and technical logs are normally kept for up to 90 days, unless longer retention is necessary to investigate abuse, errors or security incidents.
• Rental listings and crawler data are kept while the listing is considered active or relevant for quality, duplicate control and documentation. Expired listings are deleted or anonymised according to internal cleanup rules.
• Backups are deleted according to our normal backup rotation. Data may therefore briefly exist in backups after deletion from production systems.

You have several rights under data protection law. The rights may depend on the situation and legal basis.

• Right of access.
• Right to rectification.
• Right to deletion in relevant cases.
• Right to restriction of processing.
• Right to data portability in relevant cases.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent without affecting processing already lawfully carried out.

If you are dissatisfied with our processing of personal data, please contact us first at support@LejeScanner.dk.

You can also complain to the Danish Data Protection Agency via datatilsynet.dk.