Privacy Policy at Anyhoa
Quick summary (not a substitute for the full policy)
- We collect only what we need to run Anyhoa.
- Your association controls residents’ data; we process it for them.
- We use trusted providers like hosting, payments, and Mailgun for email.
- We don’t sell data. We respect your rights.
- Questions? Email contact@anyhoa.com.
Who we are
Anyhoa.com is owned and operated by Boligforeningsweb ApS (CVR: 33643284), Møllegade 11A, 9000 Aalborg, Denmark. You can contact us at contact@anyhoa.com.
Scope
This notice covers:
- Visitors to our website
- Users who create an Anyhoa account (e.g., board members, admins)
- Residents invited by their association to use Anyhoa
- People who contact us or subscribe to updates
Our role
- Controller: We are the data controller for our website, accounts, billing, support, logs, and marketing.
- Processor: When a homeowners’ association (HOA/COA/POA) uses Anyhoa for its members, the association is the controller. We process personal data only on their instructions. A Data Processing Agreement (DPA) is available to customers inside “Settings” once logged in.
The data we collect
We collect only what we need to run the service.
- Identity and contact: name, email, role, association name.
- Account and usage: login details, settings, activity (e.g., when you log in, features used), IP and device info for security.
- Content: documents, messages, events, images, etc. you or your association upload.
- Billing: subscription details, invoices, and payment status (payments are handled by our payment provider—no full card data stored by us).
- Support: messages you send us.
- Cookies: essential cookies to keep you logged in.
Why we use your data (and legal bases)
When we act as controller
- Provide the service (create accounts, keep you logged in, run features). Legal basis: contract necessity.
- Security and abuse prevention (logs, rate limits, fraud checks). Legal basis: legitimate interests; sometimes legal obligation.
- Billing and accounting. Legal basis: contract necessity and legal obligation.
- Support (answer questions, fix issues). Legal basis: contract necessity; legitimate interests.
- Improve the product (aggregate usage to learn what works). Legal basis: legitimate interests.
- Updates and marketing (product news, tips). Legal basis: consent, or legitimate interests for existing customers. You can opt out anytime.
When we act as processor for an association
- We process resident and association data only to deliver the service under the DPA and the association’s instructions. Legal basis: the association’s chosen legal basis.
Sharing your data
We do not sell personal data. We share it only with:
- Hosting and infrastructure: Hetzner, Germany.
- Email delivery: Mailgun (email sending). Some emails may be processed in the United States. We use Standard Contractual Clauses (SCCs) to protect data in transfers.
- Support tools: Google Mail.
International transfers
If data leaves the EU/EEA (for example via Mailgun), we rely on SCCs and additional safeguards where needed.
How long we keep data
- Account data: for as long as your account exists. We delete upon request.
- Content (documents, messages): for as long as your association keeps it. The association can delete it at any time. Backups expire after 7 days.
- Billing records: kept for 5 years to comply with accounting laws.
Your rights (EU/EEA)
You can ask to access, correct, delete, or export your data. You can ask us to limit or object to certain processing. If we rely on consent, you can withdraw it anytime. To use your rights, email contact@anyhoa.com. You also have the right to complain to your local data authority. In Denmark this is Datatilsynet.
If your data is handled under an association’s account, please contact your association first. They are the controller for that content.
Security
We take reasonable steps to protect data: encryption in transit, strict access controls, regular backups, and monitoring. No online service can be 100% secure, but we work to prevent and detect issues quickly.
Children
Anyhoa is for associations and adults who manage them. We do not knowingly collect data from children. If you believe a child’s data is in our system, contact us and we will act.
Third‑party links
Our site may link to other services. Their privacy practices are their own.
Changes to this notice
We may update this notice. If changes are significant, we will notify account owners.
Contact
Boligforeningsweb ApS
Møllegade 9A, 9000 Aalborg, Denmark
Email: contact@anyhoa.com