You were briefed through appkeep. Here is what we hold about you.

appkeep is operated by Rebel Strategy Lab Oy, a company registered in Finland and based in Helsinki. For the details a homeowner records about you, Rebel Strategy Lab Oy is the data controller.

• ControllerRebel Strategy Lab Oy, Finland
• Contactprivacy@appkeep.org

When a homeowner briefs you or keeps you to ask again, appkeep stores these things about you:

• Your name — the name the homeowner has for you.
• One contact detail — either an email address or a phone number, whichever the homeowner used. Not both.
• Your trade — for example plumbing or roofing.
• Your quote, if the homeowner records it — the figures from a quote you gave them, typed in by the homeowner or read from a quote email they forward to appkeep: the total, the warranty terms, the rate for extra work, whether you visited, what the quote covers, and your name as it appears on the quote. From a forwarded quote we keep these figures and a short excerpt, not the original file.

We hold it so the homeowner can brief you, keep track of who they are waiting to hear back from, compare the quotes they received for a job, and offer you again when a similar job comes up. We do not hold your certifications, notes about you, or a rating of your work.

Our legal basis is legitimate interests (Article 6(1)(f) of the GDPR): letting a homeowner run the job they started, with the contacts they choose to keep and the quotes they choose to compare. We got your details from the homeowner, not from you, which is why we are telling you here (Article 14).

appkeep is not a marketplace and not a middleman. The enquiry you received came from the homeowner, from their own email or phone — appkeep is never in that line. We do not email or call you, we do not add you to any list, we do not show your details to other appkeep users, and we do not sell them. The service providers in the next section handle them on our instructions.

Hetzner hosts our database in Helsinki, Finland, where your details are stored, and also keeps our backups of it. Resend, our email provider (EU region), sends the emails we send the homeowner, which can name you, such as a reminder to chase a quote. It also receives a quote email when a homeowner forwards it to appkeep, and holds it briefly so we can read the figures from it. Anthropic runs the AI model that reads a forwarded quote, on our instructions, to pull those figures out.

Anthropic is in the United States, so a forwarded quote leaves the EU. That transfer is covered by our data processing agreement with Anthropic and the EU Standard Contractual Clauses, and your quote is never used to train or improve the model. When a homeowner types the figures in instead of forwarding the email, the quote is not sent to Anthropic. You can get a copy of the Standard Contractual Clauses by emailing privacy@appkeep.org.

While a job you were briefed for is on the homeowner's record, your details stay with it, and so do the figures from your quote and your name as it appears on it. The figures and the excerpt from a quote the homeowner forwarded stay on their record even if they set the quote aside, until they delete that home or their appkeep account. If the homeowner keeps you as a contact to reuse and then does not use you again, that reusable entry is removed after 24 months of no activity. If the homeowner deletes their appkeep account, everything they held about you is erased with it.

Because we hold personal data about you, the GDPR gives you rights over it. You can ask us for a copy of what we hold, ask us to correct it, ask us to limit how we use it, ask us to delete it, or object to our holding it at all. These are free to use, and we will respond within one month.

To use any of them, email privacy@appkeep.org. Tell us the name and the contact detail a homeowner would have used for you, so we can find the record. You can also complain to a data-protection authority; ours is the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi), and you can also complain where you live or work, or where you think the breach happened.