Privacy Policy

Version 1.0 – Last updated: June 2026

In the event of any conflict or inconsistency between the Swedish and English versions of this Privacy Policy, the Swedish version shall prevail.

1. Data Controller

Hevma AB, org.nr 559539-9261, Artillerigatan 55, 114 45 Stockholm, is the data controller responsible for the processing of your personal data in connection with your use of nezto.com and the Nezto Vision Engine™.

If you have questions about how we process your personal data, please contact us at hello@nezto.com.

2. Personal Data We Collect

We collect personal data in the following situations:

  • When you register an account: name, email address, phone number, postal address, and any personal preferences you provide.
  • When you use the Nezto Vision Engine™: property information and images you upload, as well as your valuation history.
  • When you submit a contact request (lead): the account details associated with your request, including name, contact information, and the property in question.
  • When you visit the Site without registering: technical data such as IP address, browser type, device, pages visited, and time spent on the Site, collected via cookies and similar technologies.

Please refer to our separate Cookie Policy for further information.

3. Purposes and Legal Bases for Processing

  • We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:
  • Providing and administering your account — Contract (Art. 6(1)(b))
  • Delivering valuation results via the Nezto Vision Engine™ — Contract (Art. 6(1)(b))
  • Forwarding contact requests to partner brokers — Consent (Art. 6(1)(a))
  • Sending transactional emails (e.g. account confirmation) — Contract (Art. 6(1)(b))
  • Sending marketing emails — Consent (Art. 6(1)(a))
  • Website analytics via Google Analytics — Legitimate interests (Art. 6(1)(f))
  • Compliance with legal obligations — Legal obligation (Art. 6(1)(c))

4. How Long We Retain Your Data

We retain your personal data for as long as necessary for the purposes for which it was collected, or as long as we are legally required to do so.

Our standard retention periods are:

  • Account data: 3 years after your last login
  • Valuation history: 3 years after the valuation was completed
  • Lead data: 12 months after the contact request was forwarded to a partner broker
  • Analytics data (Google Analytics): in accordance with Google's standard retention periods, typically 14 months
  • Marketing consent and communication history: for the duration of your subscription, plus 3 years after unsubscribing

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

5. Recipients of Personal Data

We share your personal data with the following categories of recipients:

Partner brokers

If you submit a contact request, relevant account details are shared with selected partner brokers to fulfil your request. Hevma AB receives commercial consideration from partner brokers in connection with this. Partner brokers are independent data controllers in respect of their processing of your data following receipt.

Google Cloud (infrastructure)

Our technical infrastructure is hosted on Google Cloud Platform with servers located in Finland (EU). Google acts as a data processor on behalf of Hevma AB.

Mailchimp / Intuit Inc. (email service)

We use Mailchimp to send both transactional and marketing emails. Mailchimp is a US-based company and therefore constitutes a transfer of personal data to a third country (USA). The transfer takes place on the basis of EU Standard Contractual Clauses (SCCs) under GDPR Article 46(2)(c). Further information is available at mailchimp.com/legal/data-processing-addendum.

Google Analytics

We use Google Analytics to analyse the use of the Site. Google Analytics sets cookies and may transfer data to Google LLC in the USA. The transfer takes place on the basis of SCCs and the EU-US Data Privacy Framework. Please refer to our Cookie Policy for further information and how to opt out. We do not sell your personal data to third parties beyond what is described above.

6. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Art. 15): You have the right to receive confirmation of whether we process your data and to obtain a copy of it.
  • Right to rectification (Art. 16): You have the right to request that inaccurate or incomplete data be corrected.
  • Right to erasure (Art. 17): You have the right to request deletion of your data under certain conditions ("the right to be forgotten").
  • Right to restriction (Art. 18): You have the right to request that processing of your data be restricted in certain circumstances.
  • Right to data portability (Art. 20): You have the right to receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): You have the right to object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): You may withdraw any consent given — e.g. to marketing emails or to a broker contact request — at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, please contact us at hello@nezto.com. We will respond within 30 days in accordance with the GDPR.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): Web: imy.se | Email: imy@imy.se | Tel: +46 8 657 61 00

7. Withdrawal of Consent to Broker Contact

If you have submitted a contact request and wish to withdraw your consent to your data being shared with partner brokers, please send an email to hello@nezto.com.

Please note that withdrawal does not affect data already transmitted to a partner broker before your request was received. In such cases, we recommend that you also contact the relevant broker directly.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or unlawful disclosure, in accordance with GDPR Article 32.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and post a notice on the Site. We recommend that you review this policy periodically.

10. Contact

Hevma AB, Artillerigatan 55, 114 45 Stockholm, hello@nezto.com