Last updated: 10.10.2026

PLEASE READ THIS DOCUMENT CAREFULLY

Privacy Policy

1. Introduction

Brokerwall AS operates the Rellio platform (“we,” “our,” or “us”) and is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

By accessing or using the Rellio platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Privacy Policy, you should refrain from using our services.

2. Data Controller

Brokerwall AS
Organization Number: 929 377 745
Address: Prinsdalsfaret 24, 1262 Oslo, Norway

3. Personal Data We Collect

We may collect the following types of personal data:

  • Contact Information: Name, address, email address, phone number, and profile picture.
  • Property Details: Type of property and ownership, size in square meters (m²), plot size, number of bedrooms, and number of bathrooms.
  • Property Images: Images of the property uploaded to the platform by users.
  • Property Documents: Documents uploaded to the platform by users.
  • User Messages: Messages exchanged between users through the platform.
  • Calendars and Events: Events created in the calendar feature, and any calendars and events imported from Google or Microsoft.
  • Email Content: When you connect your email account to Rellio, we store the content of email messages locally in our database to provide fast inbox access and AI-powered triage. Attachments are not stored — only the text content of messages. Data is stored on servers in the EU (Neon PostgreSQL, EU region).
  • Prospect Briefs (private viewings): When you book a private viewing, we compile a brief for the agent from information you submit, your CRM history with that agent, public Brreg company data (when your email uses a corporate domain), and Kartverket property data for the listing. Briefs are retained for 24 months.

We do not intentionally collect any special categories of personal data (such as health, religion, political views) unless required by law or necessary for compliance with a legal obligation. If you voluntarily provide us with such information, you consent to our processing of that information as part of our services.

4. Purpose of Data Collection

We process your personal data for the following purposes:

  • Facilitating the Home-Selling Process: Connecting you with relevant service providers (real estate agents, photographers, surveyors, stylists, cleaning personnel, moving companies, etc.), and providing you with tools to do your work and collaborate with others.
  • Service Enhancement: Improving our services by analyzing usage and feedback.
  • Legal Compliance: Complying with legal obligations, such as mandatory record-keeping requirements.
  • Communication: Sending you updates, notifications, and information related to your use of the platform.
  • Private viewing preparation: Compiling prospect briefs so agents can prepare for scheduled private viewings you request.
  • Email triage and CRM linking: Classifying incoming emails by priority, intent, and relevance, and linking them to leads and assignments in the CRM.

5. Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

  • Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
  • Legitimate Interests: Processing is necessary for our legitimate interests in providing, maintaining, and improving our services, provided these interests are not overridden by your fundamental rights and freedoms.
  • Legal Obligations: Compliance with legal obligations to which we are subject.
  • Consent (where applicable): If you have given consent for specific processing activities (e.g., optional features or marketing communications). You can withdraw your consent at any time.

6. AI-Powered Image Modifications

The Rellio platform provides agents with AI-powered photo editing tools that may be used to modify images uploaded by photographers. These modifications may include, but are not limited to:

  • Day-to-night transformation
  • Object removal
  • Color grading
  • Image-to-video conversion
  • Virtual staging

Photographers are required to provide explicit consent to these potential modifications as part of the platform onboarding process. This consent is obtained before any images are uploaded or editing tools are applied, ensuring photographers are fully informed of how their work may be used.

The legal basis for processing images in this manner is Consent (Article 6(1)(a) GDPR). Consent is collected via a dedicated, active opt-in step during onboarding — it is never pre-ticked or buried in general terms. A timestamped record of each photographer's consent, including the version of the consent text they agreed to, is stored securely on our platform.

Photographers may withdraw their consent at any time by contacting us at hi@rellio.no. Note that withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

7. Data Retention

  • Real Estate Agency Assignments: Data and documents related to a real estate agency assignment, including personal data, are stored for up to 10 years after the assignment is archived, in compliance with legal obligations.
  • Non-Assignment Related Data: If your personal data is not related to a real estate agency assignment, it will be stored for 180 days after the last activity on your account.
  • Email Messages: Locally stored email messages are retained for as long as your email account is connected to Rellio. If you disconnect your email account, messages are deleted within 30 days. If you delete your user account, all stored email messages are deleted immediately.
  • User Profile Deletion: If you request the deletion of your user profile, we will remove personal information from your profile, including all stored email messages. To address potential disputes, other personal information will remain in our administrative systems for 60 days before being permanently deleted.

Please note that you can request the deletion of information related to you at any time, unless we are legally required to retain such information for a specific period.

8. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

  • Service Providers: Relevant parties involved in the selling process (real estate agents, photographers, surveyors, stylists, cleaning personnel, moving companies, etc.) when necessary to fulfill the services you have requested.
  • Hosting and Cloud Services: The Rellio platform is hosted on Vercel, and we store user-uploaded images and related data on Google Cloud. These services process data on our behalf and are contractually obligated to keep your data secure and confidential.
  • Legal Authorities: When required by law, regulation, or legal request, or to protect our rights, property, and safety or the rights, property, and safety of others.
  • Business Transactions: In the event of a merger, acquisition, bankruptcy, or other business transaction, your data may be transferred as part of that transaction, subject to standard confidentiality arrangements.

We do not sell or rent your personal data to third parties. We only share data to the extent necessary for the purposes described in this Privacy Policy or to comply with legal obligations.

9. Data Processors (Sub-processors)

We use the following third-party data processors to deliver our services. Each processor acts on our behalf under a Data Processing Agreement (DPA) and processes only the data necessary for its stated purpose.

ProcessorPurposeData ProcessedPrivacy / DPA
VercelPlatform hostingTechnical log dataPrivacy Policy / DPA
Google CloudCloud infrastructureUser contentPrivacy Policy / DPA
ClerkAuthenticationAccount credentialsPrivacy Policy / DPA
NylasCalendar and email integrationCalendar data, email messagesPrivacy Policy / DPA
AyrshareSocial media publishingSocial account dataPrivacy Policy
CreatomateContent renderingMarketing contentPrivacy Policy
ElevenLabsVoice services and call transcriptionText input, call audioPrivacy Policy / DPA
TelnyxPhone calls and SMSPhone numbers, SMS content, call audioPrivacy Policy / DPA
Pusher (Bird)Real-time communicationSession dataPrivacy Policy / DPA
MailgunEmail deliveryEmail addressesPrivacy Policy / DPA
OpenAIAI servicesText you type or dictate (notes, reminders, email rewrites), listing details for drafted messages, and uploaded property documentsPrivacy Policy
AnthropicAI servicesText you type or dictate (notes, reminders, email rewrites), listing details for drafted messages, and uploaded property documentsPrivacy Policy / DPA
ReplicateAI image servicesImagesPrivacy Policy
Runway MLAI video servicesImagesPrivacy Policy
CloudinaryMedia storageImages and videosPrivacy Policy / DPA
MessageBirdSMS messagingPhone numbers, message contentPrivacy Policy / DPA
HedraAI avatar video generationUser photos, audioPrivacy Policy
Vitec NextReal estate management integrationProperty data, user emailPrivacy Policy
Google Maps PlatformMapping and geocodingProperty addresses, coordinatesPrivacy Policy / DPA
Google GeminiAI image editingProperty imagesPrivacy Policy / DPA
Virtual Staging AI (Collov)AI virtual stagingProperty imagesPrivacy Policy
NeonDatabase (PostgreSQL)All application data, including email messagesPrivacy Policy / DPA
Cookiebot (Usercentrics)Consent managementConsent recordsPrivacy Policy / DPA

This list is reviewed and updated regularly. If we engage a new sub-processor that materially changes how your data is processed, we will update this list and, where required, notify affected users.

10. International Data Transfers

If we transfer your personal data outside the European Economic Area (“EEA”), we will ensure that appropriate safeguards are in place to protect your data, such as using the European Commission’s Standard Contractual Clauses or transferring to a country that has been recognized as providing an adequate level of data protection.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures may include encryption, access controls, and intrusion detection systems. However, no electronic transmission or storage of information can be guaranteed to be 100% secure.

12. Cookies and Tracking Technologies

We only use cookies that are necessary for the operation of the Rellio platform, and have no interest in tracking you or harvesting your personal data for marketing purposes. We use cookies and similar technologies for the following purposes:

  • Managing user sessions and authentication
  • Remembering your language and other platform settings
  • Enabling real-time communication features

You can manage your cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of the Rellio platform.

13. Your Rights

Under the GDPR, you have the right to:

  • Access: Request information about the personal data we hold about you, and obtain a copy of that data.
  • Rectification: Request the correction of inaccurate or incomplete personal data.
  • Erasure: Request the deletion of your personal data under certain conditions.
  • Restriction of Processing: Request that we limit how we process your data in certain circumstances.
  • Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and request the transfer of that data to another controller, where feasible.
  • Objection: Object to the processing of your personal data based on legitimate interests or direct marketing.
  • Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

To exercise these rights, please contact us at hi@rellio.no. We may require verification of your identity before addressing your request.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on the Rellio website or by other appropriate means. Changes are effective immediately upon posting unless otherwise stated.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Brokerwall AS
Prinsdalsfaret 24, 1262 Oslo

16. Levi, the AI Assistant

Rellio includes Levi, an AI assistant that helps real estate agents keep track of their work with clients. For client data, the real estate agency is the controller and we process the data on its behalf.

  • Promise tracking: Levi reads emails and text messages between an agent and a client, and transcripts of recorded calls, to find promises such as “I will send the documents on Friday”. It saves a short summary, the due date and a short quote, so the agent remembers to follow up.
  • Call transcription: Calls are connected through Telnyx. When a call is recorded, with the notice the law requires, ElevenLabs turns the audio into text. Recording retention is set by each agent: 90 days by default, at most 365 days.
  • AI-drafted messages: Levi can prepare a draft email or text for the agent. A draft is only sent after the agent has reviewed and approved it.
  • Social media auto-replies: This is a separate feature that an agent can turn on. Levi then answers direct messages on the agent’s social media pages by itself, without the agent approving each reply. The first reply asks for consent, you can stop it at any time by writing “stop”, and the agent can take over the conversation.

How long Levi keeps data

  • Quotes from emails and text messages: 90 days. Quotes from calls are deleted together with the call recording.
  • Promises: deleted 12 months after they are done or dropped. Open promises and promises waiting for review stay until they are done or dropped, or the contact is deleted.
  • Drafts: once a draft is sent, rejected, expired or failed, its message text is deleted after 30 days. A record without the text, saying which contact, deal and trigger it was about, is deleted after 13 months.
  • Draft texts kept to learn how the agent edits drafts: 90 days.
  • Call recordings and transcripts: deleted after the period each agent chooses, 90 days by default, at most 365 days. The short call summary stays in the contact’s history until the contact is deleted.

Saying no to Levi

You can ask your agent not to use Levi for you. When the agent turns on “Don’t use Levi for this person” on your contact, from then on Levi does nothing new with you, neither reading nor acting. This stops:

  • Promise tracking
  • Prepared drafts and suggestions
  • AI email replies and email summaries
  • AI call summaries
  • Levi chat and voice answers and actions about you
  • Buyer profiling and AI lead scoring
  • Voice writing that uses your details
  • AI outreach and property pitches to you
  • Social media auto-replies and automatic follow-ups to you

Open drafts and promises are closed. Stored AI email summaries and draft replies, and saved property pitches, are deleted.

What does not stop

  • Data stored before the switch was turned on is kept until its normal retention period ends, or is erased on request. This includes earlier call transcripts and call summaries, buyer profiles, Levi chat history, and dropped promises with their quotes.
  • Emails from you still arrive in your agent’s inbox.
  • Your agent can still write to you and call you themselves, and your calls still reach your agent normally.
  • The switch is on a contact. Visitors who are not contacts in Rellio cannot be switched off this way; on social media you can write “stop” to end auto-replies.

You can also write to us at hi@rellio.no.

17. Complaints

If you believe that our processing of your personal data is not in accordance with applicable data protection laws, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway

This Privacy Policy is effective as of October 2026. It is your responsibility to review this Policy periodically for any updates.

Rellio is operated by Brokerwall AS
Org.nr: 929 377 745

Privacy policy | Rellio