Processing of buyer and client personal data needed to run the WhatsApp assistant, portal-lead intake, bookings, buyer pages and reports, for as long as the client subscribes plus the 30-day export window.
Receiving, storing and answering buyer messages; creating leads and bookings; sending reminders; storing documents buyers choose to send; producing dashboards and reports for the client; where the client enables it, answering buyers' own AI assistants through a structured interface and holding their viewing requests until the buyer confirms; measuring which parts of buyer pages and video tours are used, by opaque token; unless the client switches it off, deriving de-identified conversation patterns (question type, assistant action, outcome; no names, numbers, prices, places or listings) into a shared store used to improve reply quality across clients.
Buyers and prospective buyers: phone number, name, message content, stated budget, area, timeline, financing status, documents they send (for example proof of funds), bookings. Client staff: names, WhatsApp numbers, emails, calendar availability.
The client authorises these sub-processors: Anthropic (AI model), Meta Platforms and Twilio (WhatsApp delivery), Google (maps, geocoding, commute times), Voyage AI (document search, if enabled), Resend (email), Polar (payments), Hetzner (hosting, Finland), Cloudflare (encrypted offsite backup copies, EU jurisdiction). Viewbook gives 14 days' notice by email before adding or replacing one; the client may object, and if the objection cannot be resolved, terminate without penalty.
Encrypted transport (TLS) everywhere; webhook signature verification; per-client data isolation; hashed passwords, optional or client-required two-factor sign-in, owner and member roles, login throttling and a sign-in log; server firewall; data and backups in an encrypted volume on the server; daily backups kept 14 days on EU servers with an encrypted offsite copy; tested restores; health monitoring and alerts; document audiences so nothing reaches a public page unless the client marks it; buyer conversations are not used to train AI models. Statements about sub-processors' contractual terms are to be confirmed against the provider accounts in force at signature.
Data is hosted in the EU. Sub-processors in the United States (Anthropic, Meta, Twilio, Google, Voyage, Resend, Polar) are engaged under the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework where the sub-processor is certified.
Viewbook notifies the client without undue delay and within 72 hours of becoming aware of a breach affecting the client's data, with what is known at that point and updates as the investigation proceeds.
Each party is liable for its own breaches of data protection law; the liability caps in the terms of service apply to this agreement.
This agreement is accepted when the client accepts the terms of service. A countersigned copy on the client's paper is available on request.