1. Data controller
The data controller for personal data processing is PropertIA, headquartered in Paris, France. You can contact the data controller at: contact@propertia-app.com.
In accordance with Article 37 of Regulation (EU) 2016/679 (GDPR), PropertIA has appointed a Data Protection Officer (DPO) who can be contacted at the same email address for any questions regarding the protection of your personal data.
2. Data collected
PropertIA collects the following personal data as part of the Platform's operation:
- Identification data: full name, email address, profile (buyer, seller, professional).
- Connection data: IP address, date and time of connection, browser type, operating system.
- Usage data: tools used, analysis parameters, results viewed, credit history.
- Prospecting data (for professionals): agency name, business sector, lead responses.
- Uploaded photos: photos submitted for the AI photo audit are temporarily processed for analysis and are not permanently stored.
Data marked with an asterisk (*) during registration is mandatory. Refusal to provide this data makes account creation impossible. Other data is optional and its non-provision does not affect access to services.
3. Purposes of processing
Personal data is processed for the following purposes:
- Creation and management of the User account (legal basis: contract performance, Art. 6(1)(b) GDPR).
- Provision of AI Tools and analyses (legal basis: contract performance, Art. 6(1)(b) GDPR).
- Lead matching service between individuals and professionals (legal basis: consent, Art. 6(1)(a) GDPR).
- Service and AI model improvement (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
- Sending service-related communications (legal basis: legitimate interest, Art. 6(1)(f) GDPR). The User may unsubscribe at any time.
- Compliance with legal and regulatory obligations (legal basis: legal obligation, Art. 6(1)(c) GDPR).
4. Data retention period
Personal data is retained for the duration necessary for the purposes for which it was collected, under the following conditions:
- Account data: retained until account deletion, then deleted within 30 days, unless subject to a legal retention obligation.
- Analysis history: retained for 24 months from the last analysis.
- Connection data: retained for 12 months in accordance with French Law No. 2006-64 of January 4, 2006.
- Billing data: retained for 10 years in accordance with Articles L. 123-22 and L. 123-23 of the French Commercial Code.
- Photos uploaded for audit: deleted immediately after analysis processing, with no permanent retention.
5. Data recipients
Personal data is intended for PropertIA's internal services (technical department, customer service, management). They may be transmitted to the following categories of recipients:
- Platform hosting provider (Vercel Inc.) for technical data storage and processing, located in the United States, under standard contractual clauses compliant with Article 46 of the GDPR.
- Database provider (Supabase) for structured data storage, located in the European Union (region aws-1-eu-central-1).
- Real estate professionals as part of the lead matching service, only with the User's express consent.
- Competent authorities, upon legal or judicial request, in accordance with Article 6(1)(c) of the GDPR.
6. Data transfers outside the EU
Some data may be transferred to countries outside the European Union, notably to the United States for hosting purposes (Vercel Inc.). These transfers are governed by:
- The European Commission's adequacy decision (EU-U.S. Data Privacy Framework).
- Standard contractual clauses approved by the European Commission pursuant to Article 46(2)(c) of the GDPR.
- Appropriate technical and organizational measures to ensure the security of transferred data.
7. Data security
PropertIA implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access, in accordance with Article 32 of the GDPR. These measures include:
- Encryption of data in transit (HTTPS/TLS) and at rest (AES-256 encryption).
- Secure authentication with password hashing (bcrypt).
- Strict data access control with authentication and logging.
- Continuous system monitoring and regular security testing.
8. User rights
In accordance with the GDPR and the Data Protection Act, each User has the following rights regarding their personal data:
- Right of access (Art. 15 GDPR): obtain confirmation of the processing of your data and a copy thereof.
- Right to rectification (Art. 16 GDPR): request the correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): request the deletion of your data under the conditions provided by regulations.
- Right to restriction of processing (Art. 18 GDPR): request the suspension of processing of your data.
- Right to data portability (Art. 20 GDPR): receive your data in a structured and commonly used format.
- Right to object (Art. 21 GDPR): object to the processing of your data for reasons relating to your particular situation.
- Right to withdraw consent (Art. 7(3) GDPR): withdraw your consent at any time, without compromising the lawfulness of processing carried out before withdrawal.
To exercise these rights, you may send your request to: contact@propertia-app.com. You may be asked to verify your identity. A response will be provided within a maximum of one month, extendable by two months for complex requests.
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if you consider that the processing of your data does not comply with regulations: https://www.cnil.fr
9. Cookies and trackers
The Platform uses cookies strictly necessary for the service's operation (authentication session, language preferences). These cookies do not require consent in accordance with Article 82 of French Law No. 78-17 of January 6, 1978.
If audience measurement or advertising cookies were to be deployed, a consent banner would be displayed in accordance with CNIL Recommendation No. 2020-07 of December 17, 2020. The User could then accept or refuse these cookies via their browser settings.
10. Minors' data
The Platform is not intended for persons under 16 years of age, in accordance with Article 8 of the GDPR. PropertIA does not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@propertia-app.com so we can take the necessary measures.
11. Policy modification
PropertIA reserves the right to modify this Privacy Policy at any time. Any substantial modification will be notified to Users by email or via a notice on the Platform. The "Last updated" date at the top of this document will be revised accordingly. Continued use of the Platform after notification of modification constitutes acceptance of the updated policy.
12. Contact
For any questions regarding this Privacy Policy or to exercise your rights, you may contact: