Privacy policy
Last updated:
Who we are
Inmevo is a product of CrmHood AB (reg. no. 559600-1908, Stenåldersvägen 3, 265 32 Åstorp, Sweden). This policy explains how we process personal data on inmevo.com, in the Inmevo CRM and in the Inmevo mobile app for real estate agents.
For any privacy question, write to info@inmevo.com.
Our role
The real estate agencies that use Inmevo decide what data they keep in the CRM: properties, owners, clients, leads, calendar and documents. For that data the agency is the controller and we are the processor: we process it only on the agency's instructions and under the data processing agreement we sign with it.
The same applies to agents' accounts (email address, login codes, devices for notifications), because the agency creates and closes them. If you are a client or an agent of an agency and want to exercise your rights, contact the agency first; we help it respond.
CrmHood AB is the controller only for this website, for the emails you send us (for example to request a demo) and for our business relationship with the agencies.
This website
inmevo.com uses no cookies, no analytics and no third-party scripts. There are no forms: a demo request is made by email.
The site is served through Cloudflare, which logs technical connection data (such as the IP address) to deliver the pages and protect the service.
Emails you send us are kept for at most 24 months after the last contact, unless they become part of a contract with your agency. The legal basis is our legitimate interest in answering you.
The CRM and the app
Agents sign in to the app with their email address and a one-time code we send by email; in the web CRM, with a password and, depending on the role, a second factor. We keep the agent's email, name, agency and role, and a log of sign-ins and of activity in the CRM.
To send notifications to the phone we store a device identifier (Expo token). Notifications about viewings and tasks carry only references, never the client's name. Team messages do send the first 140 characters of the text in the notification, through Expo, Apple and Google, and that text may contain client names if the agent writes them.
Some features use artificial intelligence (Anthropic) to process content the agency chooses: reading incoming invoices and expense receipts, processing emails that arrive from the portals, preparing owner reports, drafting property descriptions, drafting messages about matches between properties and buyers, and translating texts.
Providers (sub-processors)
We use these providers to deliver the service. Each processes only what its function needs:
- Supabase — database, files and sign-in. Data hosted in the EU (Paris).
- Cloudflare — hosting of the website and the application, receiving portal emails, backups, network and security.
- Resend — sending emails and login codes (EU region).
- Expo — sending notifications to the app (United States).
- Apple and Google — delivering notifications to phones and distributing the app (App Store and Google Play).
- Google (YouTube) — playing the help videos and live viewings embedded in the CRM (youtube-nocookie.com). When they play, YouTube receives the IP address and browser data.
- Anthropic — artificial intelligence processing in the features described above (United States).
Transfers outside the EEA
When a provider processes data outside the European Economic Area, we rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.
How long we keep data
- CRM data: for as long as the contract with the agency lasts; afterwards, as set out in the data processing agreement (return or deletion).
- Sign-in and activity log: 12 months.
- Notification tokens: until the agent unregisters the device or the account is deleted. A token not renewed within 30 days is no longer used.
- Cloudflare technical logs: according to Cloudflare's retention periods.
- Demo emails: at most 24 months after the last contact.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Write to info@inmevo.com; if the data belongs to an agency, we pass your request on to it.
You can complain to the Swedish supervisory authority (IMY, Integritetsskyddsmyndigheten) or, if you live in Spain, to the Spanish Data Protection Agency (AEPD).
Changes
We update this policy when providers or processing change. The date of the last update is shown above.