Privacy Policy

Effective date: 1 April 2026

1. Who we are

Eignasaga is an Icelandic digital service for homeowners and contractors. The data controller is: Eignasaga, hallo@eignasaga.is.

2. Data we collect

• Name and email address on registration
• National ID (kennitala) — optional, used to link you to properties in the national registry
• Property records you create
• Photos and documents you upload
• Messages sent through the marketplace
• Session tokens for authentication

3. How we use your data

• To provide the service and maintain your property history
• To send you verification emails and system notifications (e.g. password reset)
• To verify contractors via magic link

4. Legal basis (GDPR)

We process personal data on the basis of contract (Art. 6(1)(b) GDPR) when you use the service, and legitimate interests (Art. 6(1)(f)) where applicable.

5. Data sharing

We share data with third parties only where necessary to deliver the service:

• Neon (PostgreSQL database, AWS eu-west-2)
• Vercel (hosting and Blob storage)
• Resend (email delivery)

We never sell data to third parties.

6. Retention

We retain your personal data while your account is active. You can request deletion by emailing hallo@eignasaga.is.

7. Your rights

Under GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability

To exercise your rights, email hallo@eignasaga.is.

8. Complaints

If you believe we have violated data protection law, you may lodge a complaint with the Icelandic Data Protection Authority (personuvernd.is).

9. Contact

hallo@eignasaga.is