šŸ”FlatCheck
Last updated: 1 June 2026

Privacy Policy

Last updated: 1 June 2026

Who is responsible

The data controller is Saksadata OƜ, registered in the Estonian Commercial Register under code 17299500, at Juhkentali 8, Tallinn 10132, Estonia.

For privacy matters, contact support@flat-check.com.

What we process

  • The video file you upload (typically a property walkthrough)
  • The audio track of that video, transcribed for analysis
  • The intake form you submit (email, target city and neighbourhood, optional household details)
  • Your email address, used to deliver the report and any service notices
  • The payment record from Stripe (we never see your card details)
  • The acceptance timestamps for these terms and the 14-day waiver, kept as an audit record

Lawful basis (GDPR Article 6)

We process all of the above under Article 6(1)(b) GDPR ā€” performance of a contract you have entered into with us when you bought the report. We do not rely on consent as a lawful basis for processing your own data, because the data is necessary to deliver the service you paid for.

Third parties shown in your video

Your video may show other people (landlords, agents, neighbours) and the interior of a property that is not yours. By uploading you confirm that you have the right to film the property and that any persons shown have not objected. We process this material only to generate your report, store it briefly, and delete it (see retention below). If a third party identified in your video contacts us with a verifiable objection, we will erase the relevant material on receipt.

Sub-processors

We share data only with the providers needed to run the service:
  • Cloudflare R2 ā€” video and report storage (EU region)
  • Anthropic ā€” Claude Vision analyses the extracted frames
  • OpenAI ā€” Whisper transcribes the audio track
  • Google Maps ā€” address verification (Pro tier only)
  • Stripe ā€” payment processing
  • Resend ā€” transactional email delivery
  • Supabase ā€” managed PostgreSQL for job records
  • Fly.io and Vercel ā€” hosting

Retention

  • Video file: deleted from storage within 48 hours of report delivery.
  • Audio transcript and frame analyses: embedded in the report; retained with the report.
  • Report and intake record: retained so you can return to the report via the link in your delivery email. Contact us if you want it deleted earlier.
  • Consent audit record (acceptance timestamps, terms version, text hash): retained for the lifetime of the Job record.
  • Stripe payment record: retained under Stripe's policies and Estonian accounting law.

Your rights (GDPR Articles 15ā€“22)

You have the right to access the data we hold about you, ask us to correct or delete it, restrict or object to processing, and receive a copy in a portable format. Where processing is by automated means and produces a significant effect, you can request human review. To exercise any of these, email support@flat-check.com. If you are unhappy with our response you can complain to the Estonian Data Protection Inspectorate (aki.ee).

International transfers

Some sub-processors (Anthropic, OpenAI, Stripe) are based in the United States. Transfers rely on Standard Contractual Clauses where required. We minimise the data sent to them ā€” only the frames, audio, or fields strictly needed for the specific operation.

Changes to this policy

We may update this policy as the service evolves. The "Last updated" date at the top of this page reflects the latest revision.