Privacy statement

This statement explains which personal data InfoBrick processes, why, on what legal basis, for how long, with whom it is shared and what rights you have. It applies to the website, the app and the service behind them. Last updated: 15 October 2026.

1. Who is responsible

InfoBrick is a product of Prasavik B.V., a private limited company under Dutch law. Prasavik B.V. is the controller for the processing described here, within the meaning of the General Data Protection Regulation (GDPR).

Controller: Prasavik B.V.
Chamber of Commerce (KvK) number: 42118895
Address: Topaasring 41, 5629 GD Eindhoven
Contact for privacy questions: support@infobrick.nl

We have not appointed a data protection officer, because the law does not require one for our processing. Questions about this statement can be sent to the address above.

2. What we process, why, and on what basis

2.1 Visiting the website or the app without an account

A random browser id in a cookie (piq_guest), so we can give you a few free homes a day without an account and count how many you have opened. Basis: our legitimate interest in offering a limited free trial and preventing its misuse (art. 6(1)(f) GDPR).
Your network (IP) address, which every website necessarily receives. We use it to deliver the page and, as a one-way code, to protect the service against abuse and to count free homes. The code for free homes changes every day and is deleted after two days; the code against abuse after an hour. The address itself is not stored in our database; it does appear in the server logs described in section 3. Basis: legitimate interest (art. 6(1)(f) GDPR).
The address you search for and the homes you open. An address of a home is, in itself, not information about you; we do not link it to you when you have no account.
The free checks on the website. The address you type on a free check page (for example the flood risk at an address) is used to answer and then forgotten: we keep only how many checks each page was asked that day, and how many it answered.

2.2 Counting visits

We count visits ourselves, on our own servers, to know how many people use InfoBrick and how they found it. This count sends nothing to anybody else and does not depend on your cookie choice. A visitor is counted with a code that changes every period and cannot be traced back to you once the period has ended. We keep whether a visit was signed in, the type of account, which homes were opened, and the name of the site that referred you, never the search that led you here. Your network address is used only for a moment to see which country and province a visit comes from, and is not stored. Visit counts are kept for 25 months.

When you open a partner's link on a home's page, such as a mortgage adviser's, we count one click for that partner on that day. That is all we keep of it: not who you are, not which home and not your network address. We use the count to settle with the partner.

Basis: our legitimate interest in running and improving the service (art. 6(1)(f) GDPR). Our own count uses only cookies the service needs, so it does not ask for your consent. Google Analytics, below, does.

2.2a Google Analytics, only if you accept it

The cookie banner at the bottom of the page asks whether you allow statistics. Until you switch them on, with Accept all or with Statistics and Accept, nothing is loaded from Google. If you do, we also use Google Analytics, a service of Google Ireland Limited, to see how many people use the website and the app, which pages and screens they use and how they found us.

What Google receives: the page you are on without anything after a question mark or a hash in its address, so never an address you searched for or a link you pasted; in the app, only the name of the screen (for example "compare"); the name of the site that referred you; your browser, device, screen size and language; and a few steps, without any details: opening a home (and which of our layouts of the home's page it was shown in), opening a premium feature, opening a partner's link (only the kind of help, such as a mortgage adviser), asking an adviser to call you (only the kind of help, a mortgage adviser; never who you are, the adviser or the home), answering one of the free checks (only which check, such as flood risk), starting and completing a payment, and creating an account. Google Analytics also notes by itself how far down a page you scroll, and which link to another website or which file you open. It never receives your name, your e-mail address, the address of a home you look up or anything you type.
Cookies in your browser: _ga and _ga_ followed by a code (see section 6). They are only set once you accept.
Your network address: Google receives it, as any website does. According to Google, Google Analytics does not store it: it is used on servers in the European Union to estimate your country and region, and then discarded.
Switched off: Google signals, advertising features and the sharing of data with Google for its own purposes. We do not use Google Analytics for advertising, and not on the pages our own staff use.
How long: Google keeps the data linked to the cookie for 14 months; after that only counts remain.
Who: Google processes this data on our behalf, as our processor, under Google's data processing terms. Google may access it from the United States; that transfer is covered by the EU–US Data Privacy Framework, under which Google LLC is certified.
Basis: your consent (art. 6(1)(a) GDPR, and art. 11.7a of the Dutch Telecommunications Act for the cookies). You can change or withdraw it at any time with Cookie settings at the bottom of every page, and in the app's menu. Withdrawing deletes Google's cookies from your browser. Your choice is kept for 12 months; then we ask again.

2.3 If you have an account

What	Why	Basis
Your e-mail address, your name (from Google if you sign in with it, or as you enter it), your phone number if you give it, how you sign in, a hashed password if you set one, and security records such as the time of your last sign-in and failed attempts	To create and secure your account and let you in, and to fill in the forms that ask for your name or phone number	Performance of the agreement (art. 6(1)(b))
Your plan, any limits that apply to it and your use of the service, including the valuations you request	To provide the service, to apply the limits of your plan and, for business customers, to meter use	Performance of the agreement (art. 6(1)(b))
Which homes you asked us to value, and when, and which premium parts you opened for them	To see which homes draw interest, so we can improve what we show about them. Only our own staff see it, in our console; it is never shown to other customers, estate agents or partners	Legitimate interest (art. 6(1)(f))
The homes you save, compare and receive alerts about, and your e-mail preferences	To show them back to you and, if you choose, to send you a monthly overview or an alert when something changes	Performance of the agreement (art. 6(1)(b))
What you tell us about your own home (for example its condition, or the WOZ value on your assessment)	To adjust your valuation and to prepare, at your request, an objection letter. It changes your own valuation and nobody else's. What you report about a home's condition is also pooled, without your name and only with reports of at least five people on at least five homes of the same kind, into how often buyers found work needed in that area	Performance of the agreement (art. 6(1)(b))
Your viewing checklist, including any notes you type	To keep your checklist for you, also what you fill in offline, which is sent once you are back online	Performance of the agreement (art. 6(1)(b))
Your income, your partner's income, savings, debts and whether you are a first-time buyer, if you enter them under "What can I bid"	To calculate what you can bid. They are shown only to you and used for nothing else	Performance of the agreement (art. 6(1)(b))
A bid you made on a home and its outcome, only if you tick the box to share it	To pool it, without your name, with bids of at least five people on at least five homes into figures about how buyers bid in an area, and to measure how accurate our values are. Never shown on its own	Your consent (art. 6(1)(a)), which you can withdraw at any time by deleting the bid
Whether you bid on a home you had our odds of winning for, and how it went (won, lost or did not bid); if you add them, your bid, the winning price and the day; the chance our odds gave at your bid; the consent you gave and when. To know whom to ask, we note which homes you opened the odds for or made a bid plan for, and when	To check how well our odds of winning match how real bids go. Only ever combined, without your name, with answers about at least five homes from at least five people; never shown for a home or as yours, and never sold. We ask at most twice, a couple of weeks after you open the odds or make a bid plan	Your consent (art. 6(1)(a)), given by answering under the words shown with the question, which you can withdraw at any time by deleting your answers on your account page
A list of homes you send for the landlord check: postcode, house number and the rent you enter, with the results	To check the list after you close the page and keep it for you to open or download again	Performance of the agreement (art. 6(1)(b))
A rent you enter for a home you let	For your own landlord check and, pooled without your name, into what similar homes nearby let for: shown only as a range and its middle, once at least five homes from at least five landlords stand behind a figure	Performance of the agreement (art. 6(1)(b)) and our legitimate interest in providing reliable rent figures (art. 6(1)(f))
A bid plan you choose to share	To show it to anybody you send its link to. It contains no name, income or reported bid of yours, and you can withdraw the link at any time	Performance of the agreement (art. 6(1)(b))
Your e-mail address, phone number and message when you ask for quotes: for solar panels, a heat pump, insulation, glazing or the steps of an upgrade plan, for electricity and gas, or for internet and TV	To pass your request to the installers, energy suppliers or internet providers you ask for a quote, who then contact you. The sentence you tick names which	Your consent (art. 6(1)(a)), given when you send the request
For estate agents: the office's name, the name, e-mail address and phone number of whoever signs it up, its website, the system its listings are in, its feed address, and the consent it gave, word for word, with the moment	To get in touch to set up the office's listing feed, and as the record of what the office agreed to	The office's consent (art. 6(1)(a)) and steps prior to an agreement (art. 6(1)(b))
Your contact details and message when you ask about a paid plan	To answer you and, if you wish, to set up the plan	Your request, i.e. steps prior to an agreement (art. 6(1)(b))
The country and province your network address belonged to when you opened the account, and the name of the site that referred you to us (for example "Google"), if any	To know where our customers come from and which channels bring them. The network address itself is not stored	Legitimate interest (art. 6(1)(f))
For business customers: the addresses and data in files you upload for a portfolio valuation, and your API keys (stored as a one-way code)	To value the portfolio and give you access to the API	Performance of the agreement (art. 6(1)(b))

2.3a If somebody invites you

Somebody who knows you can ask us to invite you to tell us about your home. We then hold your name, your e-mail address and the address of your home as they gave them to us, and send you one e-mail with a personal link. We use them only for that invite. Basis: legitimate interest (art. 6(1)(f) GDPR). If you do not use the invite, we delete it 90 days after its link runs out; if you do, it is kept with your account.

2.3b If you sign in for a partner

A partner whose link is on a home's page, such as a mortgage adviser, can see how many clicks its link received each day. For that we keep the e-mail addresses of the people at the partner who may sign in, as the partner gave them to us, with the language their sign-in e-mail is written in, when the address was added and by which of our staff, when our staff last sent it a sign-in link, and when it was last used to sign in. We use them only to let those people sign in and to send them their sign-in links. Signing in leaves the piq_partner cookie (section 6). They see the partner's clicks per day and nothing about the people who clicked. Basis: our legitimate interest in letting our partners check the clicks we settle with them (art. 6(1)(f) GDPR). An address is deleted as soon as it is taken off the partner's list, or when the partner is deleted.

2.3c If you ask a mortgage adviser to call you

On a home's page you can ask a mortgage adviser who works with us to call you, with Have a mortgage adviser call me. It is free for you; the adviser may pay us for each request we pass on.

What we pass on: your name, phone number and e-mail address, when you would like to be called, your note if you write one, the home's address with a link to its page and, only if the sentence you tick says so, what we would bid on the home and what you can bid on your own figures. Nothing else, and only to the one adviser you pick.
Only with your tick: we pass nothing on until you tick the sentence that names the adviser and what goes to them. We keep that sentence word for word, with the moment you sent it, and e-mail you a copy of your request once it has reached the adviser.
The adviser is responsible from then on: once your request reaches the adviser, the adviser is responsible for your details, as a controller in its own right and under its own privacy statement. To have them deleted there, ask the adviser.
Our own copy: we keep your request to send it, to send it again if it did not arrive, and to settle with the adviser. We delete your contact details, your note, the home's address and the figures 90 days after you send it, or with your account if that is sooner. After that we keep only that a request went to that adviser, on which day and in which town, which says nothing about you. If you are signed in, your requests are in Download my data on your account page.
Basis: your consent (art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us; that does not undo a request that has already reached the adviser.

2.4 Questions and the written summary

Where the written summary of a home or the possibility to ask a question about it is switched on, we send the question you type and a sheet of facts about the home (not your account details) to the provider of the language model that writes the answer (see section 4). Please do not type personal details in a question. Basis: performance of the agreement (art. 6(1)(b)).

2.5 Information about homes and their owners

InfoBrick brings together information about homes that public bodies and others publish, such as the building register, energy labels, permits, the WOZ value and the market. Some of it can, in combination with an address, relate to the owner or occupant of a home. We process it on the basis of our legitimate interest, and that of our users, in transparency about the housing market (art. 6(1)(f) GDPR). We limit what we show: sale prices are shown only in bands, pooled figures only above a minimum number, and the official values of neighbouring homes only as a value per square metre, rounded, with the street and a range of sizes but without the house number, also in the objection letter an owner can prepare against their own WOZ value. If you believe information about your home should not be shown, you may object (see section 7).

2.6 Automated assessment

The valuation, the advised bid and the other scores are produced automatically by our models. They are assessments of a home, not decisions about you, and they have no legal effect on you within the meaning of article 22 GDPR.

3. How long we keep it

Account data: as long as you have an account. After you ask us to close it, we delete your account and the data linked to it within 30 days, except what we must keep by law (for example invoices, which are kept for seven years under Dutch tax law).
The record of valuations requested through an account is kept for as long as the account exists and, without the link to you, afterwards, to measure how accurate our values are.
The free-homes count: two days. Visit counts: 25 months, as described in section 2.2.
Google Analytics, only if you accepted statistics: 14 months at Google, as described in section 2.2a. Your cookie choice: 12 months.
An invite you did not use: 90 days after its link runs out.
The e-mail address of somebody who may sign in for a partner: until it is taken off the partner's list, or the partner is deleted.
An estate agent's sign-up: as long as the office's listing feed is on file. One we decline: 90 days after we decline it.
Quote requests: 24 months after you send them, or until you delete your account if that is sooner. The installers, energy suppliers or internet providers you sent them to keep their own copy under their own terms.
A request for a mortgage adviser to call you: your contact details, note, the home's address and the figures 90 days after you send it, or until you delete your account if that is sooner; then only a count with the day and the town remains. The adviser keeps its own copy under its own terms.
Your answers about your bids, and the note of which homes to ask you about: 24 months after you give them or open the odds, or until you delete them or your account if that is sooner.
Files uploaded for a portfolio valuation, and shared bid plans (also withdrawn ones): as long as the account exists.
Lists of homes you sent for the landlord check, with their results: until you delete them under Your earlier lists, or your account.
Pooled figures contain no personal data and are kept as long as they are useful.
Server logs used for security and fault finding, which can contain your network address and e-mail address: no longer than 30 days, unless needed to investigate an incident.

4. Who receives it

We do not sell personal data and do not share it with advertisers. We use service providers who act only on our instructions under a data processing agreement, in these categories:

hosting of the service, its database and files, in the European Union;
sending e-mail, such as sign-in links, alerts and the monthly overview;
writing the summaries and answers described in section 2.4;
measuring how the website and the app are used, only if you accept statistics (Google Analytics, section 2.2a).

When you ask a mortgage adviser to call you, we pass your request to the one adviser you pick, who is then responsible for it (section 2.3c).

When you ask for a quote, we pass your request to the installers, energy suppliers or internet providers you ask it from. When you choose to sign in with Google, Google tells us your e-mail address and name. Maps and map images are loaded by your browser directly from map providers, who then receive your network address as any website does and process it under their own terms. On request we tell you which providers we use.

When you open a partner's link, your browser goes to the partner's website, which receives your network address as any website does. We pass on nothing about you or the home, and the link does not tell the partner which page you came from.

We may also share personal data where the law requires it, for example at the order of a court or a competent authority.

5. Outside the European Economic Area

Our data is stored in the European Union. Some of our providers belong to groups based in the United States, which means that data may be accessible from there. Where that is the case, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses, with additional measures where needed.

6. Cookies and your browser

We use cookies that are necessary for the service, one that remembers which site referred you to us, and one that remembers your cookie choice. Only if you accept statistics, Google Analytics adds its own two. None of them tracks you across other websites.

Name	Purpose	Kept for
piq_session	Keeps you signed in	14 days
piq_oauth	Protects signing in with Google	15 minutes
piq_partner	Keeps somebody who signed in for a partner signed in to the partner page	14 days
piq_guest	Counts the free homes you open without an account	One year
piq_invite	Remembers the invite you opened while you sign in	Until you sign in, at most 30 days
ib_lang	Remembers the language you chose	One year
ib_src	Remembers the name of the site that referred you, so we know which channels bring customers	30 days
piq_view_as	Our own staff only: which kind of customer's view they are looking at	Until the browser closes
ib_consent	Remembers your cookie choice, per kind of cookie	12 months
_ga	Google Analytics, only if you accept statistics: tells visits from the same browser apart	12 months
_ga_XPL3TM75K1	Google Analytics, only if you accept statistics: keeps track of the current visit	12 months

You can change your choice at any time with Cookie settings at the bottom of every page, and in the app's menu. Switching statistics off deletes Google's cookies.

Your preferences, such as the language, light or dark theme, recently viewed homes and the homes you compare, are kept in your own browser (local storage) and not sent to us, except the homes you save while signed in, which are also kept with your account so we can send you alerts, and your viewing checklist, which is kept with your account. You can delete all of this through your browser settings.

7. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to receive it in a structured, commonly used format (data portability) and to object to processing based on our legitimate interest. Where we rely on your consent, you may withdraw it at any time, without affecting what was done before.

To use these rights, write to support@infobrick.nl from the e-mail address of your account. We may ask you to confirm your identity. We answer within one month; if a request is complex, we may extend this by two months and will tell you so.

You can stop the monthly overview and alerts at any time with the link in each e-mail.

If you are not satisfied with how we handle your data, please tell us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

8. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), encryption of stored data, passwords stored only as a strong one-way code, access limited to the people who need it, and session cookies that cannot be read by scripts. If a data breach nevertheless occurs that is likely to affect you, we will inform you and the Autoriteit Persoonsgegevens as the law requires.

9. Children

InfoBrick is intended for people aged 16 and over. We do not knowingly process personal data of children under 16.

10. Changes

We may change this statement, for example when the service or the law changes. The current version is always on this page, with its date. If a change materially affects you, we will tell you by e-mail or in the app before it takes effect.

Credits

Visitor regions: IP Geolocation by DB-IP, licensed under CC BY 4.0.