Privacy Policy

1. Data controller

The data controller for Globeda is Viktor Ervik Aune, acting as a private individual.

Contact details:

• Viktor Ervik Aune (private individual)
• Harevegen 17
• 7021 Trondheim
• Norway
• viktor.ervik.aune@gmail.com

2. Personal data we collect

Depending on how you use Globeda, we may process the following categories of personal data:

• Account information — name, email address, password hash (for email registration), role, and related account metadata.
• Google login information — when you sign in with Google, we receive and store your verified email, name, and profile picture URL from Google. We do not store Google refresh tokens.
• Agency and agent profiles — agency name, contact details, description, logo URL, languages, and agent account details created by an agency.
• Listings and uploaded images — listing content you submit, including addresses and coordinates you provide, and image files uploaded for listings or agency branding.
• Inquiries and viewing requests — name, email, optional phone and message, requested viewing date, and related property/agency routing information.
• Saved searches and favorites — search filters you save, alert settings, and favorite listing IDs.
• Feedback — feedback type, message, optional email, page path, language, and (if signed in) your user id.
• Notification preferences — in-app/email preference flags and an optional alternate notification email.
• Payment and subscription metadata — when payment flows are used, we store checkout/session identifiers, plan or promotion references, amounts, currency, and payment status. We do not store full payment card numbers.
• Technical logs and temporary rate-limit data — limited operational logs (for example email delivery metadata) and short-lived rate-limit records that may include an IP address for guest feedback abuse prevention.

3. Purposes of processing

We process personal data to:

• Operate accounts, authentication, listings, and related product features.
• Connect users with sellers and agencies (including routing inquiries and viewing requests).
• Send requested notifications and transactional messages.
• Protect security and prevent abuse (including rate limiting).
• Improve, support, and maintain the service during beta.
• Comply with applicable legal obligations.

4. External processors and service providers

We use trusted service providers to operate Globeda. Depending on the feature you use, personal data may be processed by:

• MongoDB Atlas — primary application database.
• Vercel — application hosting and delivery.
• Google OAuth / Google Identity Services — Sign in with Google.
• Mapbox — maps, geocoding, and address search.
• Cloudinary — storage and delivery of uploaded images.
• Resend — transactional email delivery.
• Stripe — checkout sessions for promote/subscription flows when payments are enabled.
• Emergent AI / LLM provider — AI search, translation, summaries, and related assistance features.
• Google Fonts — font delivery for the website.

5. Important disclosures

• Inquiry names and messages may be sent to an external AI provider for lead scoring.
• Listing and agency images are uploaded to Cloudinary.
• Email content (including inquiry, viewing, alert, and agent-invite messages) is processed through Resend.
• Card payments in Production are currently unavailable / Coming soon. A Stripe integration exists in the product, but paid Production flows remain disabled unless explicitly enabled by the operator.
• Authentication tokens and preferences (language, currency, favorites) are stored in your browser’s local storage, not in first-party session cookies.

6. Retention

We do not currently apply fixed automated retention periods for most personal data categories.

Some data is stored until it is manually deleted, until you successfully request deletion, or until it is no longer required for the purposes described above.

Certain records may be retained when needed for security, dispute handling, accounting, or other legal obligations.

A short-lived feedback rate-limit record (which may include an IP address for guests) expires automatically after a limited period.

7. Your rights

If you are in the EU/EEA or otherwise protected by applicable data-protection law, you may have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request deletion.
• Request restriction of processing.
• Object to certain processing.
• Data portability, where applicable.
• Lodge a complaint with the relevant data-protection authority (in Norway: Datatilsynet).

8. How to submit a privacy request

Account deletion and personal-data export are not currently available as in-product self-serve features.

To request access, correction, export, or deletion, email viktor.ervik.aune@gmail.com.

We handle these requests manually. Please describe what you need and the email address associated with your Globeda account.

9. Children

Globeda is intended for users aged 18 or older. We do not knowingly collect personal data from children under 18.

10. Changes

We may update this Privacy Policy as the beta evolves. The effective date above will be updated when material changes are published.