Last updated: 29 August 2026
This English version is provided for convenience. The German version is legally binding. Read the binding Sicherheit bei Immopix page.
This page gives an overview of how Immopix protects your photos and data. The legal details are in the privacy policy. Business customers also receive a data processing agreement, more on that below.
The application and the database run on a server in Germany. Uploaded photos and editing results are kept in object storage that is restricted to data centres in the EU.
For the AI editing itself we use specialised providers, some of which process in the United States. These transfers rest on EU standard contractual clauses. The table below shows which providers are involved and what they receive.
Immopix does not use uploaded photos to train Immopix-owned AI models, and does not sell personal data. The table below shows which providers process your images on our behalf.
When you delete a photo, a property or your account, the associated files are removed from object storage. That covers the original, all edited versions and the thumbnails.
All connections use HTTPS, including those to our providers. Passwords are stored only as hashes. The database is not reachable from the public internet, and the server is fully backed up every day. Error and performance monitoring run in the EU region of the respective provider.
As a business customer you receive our Art. 28 GDPR data processing agreement on request. It adopts the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/915) word for word. Write to contact@immopix.ai and we usually send the contract the same working day.
We use these providers to run Immopix. Customers with a DPA are notified at least 30 days before we add or replace a provider.
| Provider | Purpose | Processing location | Transfer basis |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of application and database | Germany | No third-country transfer |
| Cloudflare, Inc. | Object storage for photos and delivery | EU data centres, access from the US possible | EU standard contractual clauses |
| fal (Features & Labels, Inc.) | AI image editing | USA | EU standard contractual clauses |
| OpenRouter, Inc. | Image analysis: categorisation, quality checks, floor plans, listing texts | USA and locations of the model providers | EU standard contractual clauses |
| Mapbox, Inc. | Geocoding and location map for listings | USA | EU standard contractual clauses |
| Functional Software, Inc. (Sentry) | Error monitoring | EU region, access from the US possible | EU standard contractual clauses |
| New Relic, Inc. | Performance monitoring | EU region, access from the US possible | EU standard contractual clauses |
| Plus Five Five, Inc. (Resend) | Sending system emails | USA | EU standard contractual clauses |
Payments are handled by Stripe. For payments we act as the controller ourselves, which is why Stripe is not listed as a subprocessor.
Reply within 2 hours
We will get back to you within 2 hours.