Last updated: June 2026

Privacy Policy

This policy explains how we handle your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Data Controller

Nataliya Kondranina, [STREET], [ZIP] [CITY], Austria, [email protected]

The service is currently operated by a natural person. A sole-trader business registration (Einzelunternehmen) is in progress.

2. What Data We Collect and Why

• Email address — to send you rental listing alerts via Telegram or email. Legal basis: your consent (Art. 6(1)(a) GDPR).
• Uploaded PDF content — to perform AI-based analysis of your rental contract. Legal basis: performance of a service you requested (Art. 6(1)(b) GDPR). This content is not stored after the analysis completes.
• IP address — used for rate limiting only. It is held in memory and not persisted. Legal basis: our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).

3. Third-Party Processors

We use the following service providers to operate mietscan.app:

• Anthropic — performs the AI contract analysis. Data may be processed in the United States under EU Standard Contractual Clauses (SCCs).
• Railway.app — hosting infrastructure, located in an EU region.
• Cloudflare R2 — temporary storage of uploaded files, which are deleted immediately after the analysis completes.

No payment service providers are used, as the service is free during the beta and no payments are processed.

4. Data Retention

Your email address is kept until you unsubscribe. Uploaded PDF content is deleted immediately after analysis. No other personal data is stored.

5. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise any of these rights, contact us at [email protected].

6. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian data protection authority (Datenschutzbehörde), dsb.gv.at.

7. Cookies

We use only technically necessary cookies. We do not use tracking cookies or analytics.

8. Automated Profiling

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects concerning you.