Privacy Policy
Last updated: October 17, 2026
At inbilit, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform.
Our GDPR Commitment
inbilit is operated from within the European Economic Area (EEA) and is fully committed to compliance with the General Data Protection Regulation (GDPR). We process your data lawfully, fairly, and transparently. You have the right to access, correct, delete, or export your personal data at any time.
1. Information We Collect
Personal Information
When you create an account, we collect:
- Name and email address
- Company/organization name
- Billing information (processed by our payment provider, not stored by us)
- Building and property information you provide
Usage Data
We automatically collect:
- Log data (IP address, browser type, pages visited)
- Device information
- Usage patterns to improve our service
2. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your transactions (via our payment provider)
- Send you service-related communications
- Provide customer support
- Improve our platform based on usage analytics
- Ensure security and prevent fraud
3. Data Storage & Security
Data Stored in the EU
Your data is stored in the European Union. Our application servers and database run in Frankfurt, Germany, for every customer, wherever they are located. Some services we use process data outside the EU; they are listed in section 7. We use industry-standard encryption (TLS 1.3) for data in transit and AES-256 encryption for data at rest. We never sell your data to third parties.
4. Your Rights (GDPR)
Under GDPR, you have the following rights:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate personal data.
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data. We will erase your data within 30 days of your request, unless we have a legal obligation to retain it.
Right to Data Portability
Export your data in a machine-readable format (JSON/CSV).
Right to Withdraw Consent
Withdraw consent for data processing at any time.
To exercise any of these rights, contact us at support@inbilit.com or use the data management tools in your account settings.
5. Your Rights (United States)
If you are a resident of California or another U.S. state with consumer privacy legislation (such as the California Consumer Privacy Act / CCPA, Virginia CDPA, Colorado CPA, or Connecticut CTDPA), you may have additional rights including:
Right to Know
Request disclosure of what personal information we collect, use, and share.
Right to Delete
Request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale
We do not sell your personal information. There is nothing to opt out of.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at support@inbilit.com. We will respond to verifiable requests within 45 days as required by applicable law.
6. Cookies
Our website (inbilit.com) sets no cookies of its own. If you choose a language there, that choice is kept in your browser's local storage and is never sent to us. The application (app.inbilit.com) uses only essential cookies, to keep you signed in. Website statistics are collected without cookies (see section 7).
7. Third-Party Services
We use the following third-party services:
- Supabase - Database, sign-in and file storage, including uploaded documents and bill PDFs (EU: Frankfurt, Germany)
- Fly.io - Hosting of our application servers and their logs (EU: Frankfurt, Germany)
- Anthropic (Claude) - AI features: the in-app assistant (your messages and the account data it looks up to answer them, never contact details — and only after you enable AI answers, which we record), reading uploaded invoices and import files, and sorting bug reports (United States)
- Voyage AI - Search for the in-app assistant: the text of your questions (United States)
- Resend - Sending e-mail, such as invitations, alerts, reports and the bills you send to your tenants (United States)
- Stripe - Subscription billing: the account owner's name and e-mail; card and billing details are entered on Stripe's own pages (United States and EU)
- OpenStreetMap Foundation (Nominatim) - Looking up the location of a building from its address (United Kingdom)
- Plausible Analytics - Website statistics for inbilit.com, without cookies: your IP address and browser type are used only to compute an anonymous identifier that changes every day, and are not stored. We also count account sign-ups, with the plan and country chosen. We see aggregated reports only; this is based on our legitimate interest in understanding how our website is used (EU)
Each service has its own privacy policy. We only share the minimum data necessary for these services to function. Where a provider processes personal data outside the European Economic Area, the transfer is covered by the provider's data processing terms: the EU Standard Contractual Clauses (Anthropic, Supabase, Stripe) or the provider's certification under the EU-U.S. Data Privacy Framework (Resend, Stripe).
On your instruction, we also exchange data with services you connect yourself, such as your meter or building-management system provider, to fetch your meter data.
8. Data Retention
We retain your data for as long as your account is active. After account deletion:
- Personal data is deleted within 30 days
- Anonymized usage data may be retained for analytics
- Billing records are retained as required by law (typically 7 years)
9. Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email. The "Last updated" date at the top indicates when this policy was last revised.
11. Contact Us
For privacy-related inquiries or to exercise your data rights:
- Email: support@inbilit.com