Privacy Policy
Last updated: 3 May 2026
1. Introduction
This Privacy Policy explains how Zappwise AB ("Zappwise," "we," "us," or "our") collects, uses, shares, and protects personal data when you visit zappwise.com or use the Zappwise platform (the "Service").
Zappwise is a B2B real estate listing workflow platform that helps real estate professionals create, process, and publish property media and listings. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable global privacy laws.
If you have questions about this Policy or our data practices, contact us at privacy@zappwise.com.
2. Data Controller
The data controller responsible for your personal data is:
Zappwise AB
Norrsunda Skoby 126, 195 95 Rosersberg, Sweden
Org. nr: 559495-5337
Email: privacy@zappwise.com
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Information you provide directly
- Account information: name, email address, password, company name, job title, phone number.
- Profile information: profile photo, business address, billing details (when applicable).
- Content you upload: property photos, listing descriptions, project metadata, and other materials submitted to the Service.
- Communications: messages you send to our support team, feedback, and survey responses.
3.2 Information collected automatically
- Usage data: pages visited, features used, actions taken, timestamps, session duration.
- Device and technical data: IP address, browser type, operating system, device identifiers, language settings.
- Cookies and similar technologies: see Section 9 for details.
3.3 Information from third parties
- Authentication providers when you sign in via single sign-on (if offered).
- Service providers and integrations when you connect your accounts (if offered).
3.4 Property photos
Zappwise is designed for property-only photography. Our terms require users not to upload photos containing identifiable individuals. If such images are inadvertently uploaded, they will be processed under the same security and retention rules as other content, and you may request deletion at any time.
4. How We Use Your Personal Data
We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:
Provide the Service (contract, Art. 6(1)(b)): to create and manage your account, deliver platform features, process your media and listings, and provide customer support.
Improve and secure the Service (legitimate interest, Art. 6(1)(f)): to monitor performance, prevent fraud and abuse, debug issues, and develop new features. Customer content is not used to train AI models.
Communicate with you (contract / legitimate interest): to send transactional emails, service notifications, and respond to inquiries.
Marketing (consent, Art. 6(1)(a) / legitimate interest): to send you product updates and promotional communications. You can opt out at any time.
Comply with legal obligations (Art. 6(1)(c)): to meet our obligations under applicable law, including tax, accounting, and responding to lawful requests from authorities.
5. Sharing Your Personal Data
We share personal data with the following categories of recipients:
5.1 Service providers (data processors)
We use trusted third parties to provide the Service. They process personal data only on our instructions and under data processing agreements. Current key processors include:
- Google Cloud Platform (Google LLC), cloud infrastructure hosting, including compute and supporting services used to deliver the Service.
A complete and current list of subprocessors is available on request at privacy@zappwise.com.
We may add or replace subprocessors from time to time as our Service evolves. When we make material changes to our subprocessor list, we will provide reasonable advance notice (typically at least 30 days) by email or through a notice on the Service. Business customers may object to a new subprocessor on reasonable data protection grounds; in such cases, we will work in good faith to find an alternative or, if no resolution is possible, you may terminate the affected service.
5.2 Other recipients
- Professional advisors (lawyers, accountants, auditors) under confidentiality obligations.
- Authorities and regulators where required by law.
- Acquirers in connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.
We do not sell your personal data and we do not share personal data for cross-context behavioral advertising as defined under the CCPA/CPRA.
6. International Data Transfers
Zappwise is operated from Sweden (EU), but our users and service providers may be located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, UK, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, additional supplementary measures.
You can request a copy of the safeguards in place for international transfers by contacting privacy@zappwise.com.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods include:
- Account data: for the duration of your account, plus up to 12 months after closure for legal and operational reasons.
- Customer content (photos, listings): for the duration of your subscription, plus a grace period of 30 days unless you request earlier deletion.
- Billing records: 7 years, as required by Swedish bookkeeping law.
- Support communications: up to 3 years.
- Marketing data: until you opt out or after 24 months of inactivity.
8. Your Rights
Depending on your location, you have the following rights regarding your personal data:
8.1 Rights under GDPR (EU/EEA, UK, Switzerland users)
- Right of access, obtain confirmation of whether we process your data and a copy of it.
- Right to rectification, correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"), request deletion of your data in certain circumstances.
- Right to restriction, limit how we process your data.
- Right to data portability, receive your data in a structured, machine-readable format.
- Right to object, object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent, where processing is based on consent.
- Right to lodge a complaint, with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
8.2 Rights under CCPA/CPRA (California residents)
- Right to know what personal information we collect, use, and disclose.
- Right to delete personal information, subject to exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising).
- Right to limit use of sensitive personal information.
- Right to non-discrimination for exercising your rights.
8.3 How to exercise your rights
Submit requests to privacy@zappwise.com. We will respond within 30 days (GDPR) or 45 days (CCPA), with possible extensions for complex requests. We may need to verify your identity before processing your request.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. We use the following categories:
- Strictly necessary cookies, required for the Service to function (e.g., authentication, security). These do not require consent.
- Functional cookies, remember your settings and preferences.
- Analytics cookies, help us understand how the Service is used.
For users in the EU/EEA and UK, we request your consent before placing non-essential cookies via our cookie banner. You can change your preferences at any time via the cookie settings link in the footer of zappwise.com.
10. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS), access controls, regular security reviews, and employee training. However, no system is completely secure, and we cannot guarantee absolute security.
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected users without undue delay.
11. Children's Privacy
The Service is not intended for individuals under 16 years of age, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@zappwise.com and we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via a notice on the Service before the changes take effect. The "Last updated" date at the top of this Policy reflects the most recent version.
13. Contact Us
For questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:
Zappwise AB
Email: privacy@zappwise.com
Norrsunda Skoby 126, 195 95 Rosersberg, Sweden
If you are in the EU/EEA, UK, or Switzerland and we have appointed a representative or Data Protection Officer, their contact details will be listed here.