Privacy Policy

1. Introduction

Welcome to clefgestion ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform.

As a property management SaaS platform operating in France, we process sensitive data including tenant information, property details, and financial records. We are fully compliant with the General Data Protection Regulation (GDPR) and French data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number
• Password (encrypted)
• Billing address
• Payment information (processed securely by our payment provider)

3.2 Property Data

To provide our property management services, we collect:

• Property addresses and descriptions
• Property ownership documentation
• Energy performance certificates (DPE)
• Insurance certificates
• Maintenance records and receipts
• Property photographs

3.3 Tenant Information

With your consent as the property owner, we process:

• Tenant names and contact information
• Lease agreements
• Rental payment history
• Communication records

3.4 Financial Data

For tax simulation and reporting purposes, we collect:

• Rental income records
• Property-related expenses
• Bank account information for payments
• Tax regime preferences (LMNP, Réel, etc.)
• Depreciation schedules

3.5 Usage Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Time and date of access
• Referring website addresses

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Service Provision (Legal Basis: Contract Performance)

• Managing your property portfolio
• Generating rent receipts (Quittance de Loyer)
• Tracking maintenance and expenses
• Storing compliance documentation
• Processing payments and subscriptions

4.2 Tax Simulation (Legal Basis: Contract Performance)

• Calculating tax obligations under French LMNP and Réel regimes
• Generating tax reports and documentation
• Providing depreciation schedules

4.3 Platform Improvement (Legal Basis: Legitimate Interest)

• Analyzing usage patterns to improve our services
• Developing new features
• Troubleshooting technical issues
• Ensuring platform security

4.4 Communication (Legal Basis: Consent or Legitimate Interest)

• Sending service updates and notifications
• Responding to support requests
• Sharing important legal or tax information
• Marketing communications (with your consent)

4.5 Legal Compliance (Legal Basis: Legal Obligation)

• Complying with French accounting and tax regulations
• Responding to legal requests
• Preventing fraud and abuse

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Service Providers

• Hosting providers: To store data securely
• Payment processors: To handle subscription payments
• Email services: To send notifications and receipts
• Analytics providers: To understand platform usage

All service providers are bound by data processing agreements and GDPR compliance requirements.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Account data: Until you close your account, plus 30 days
• Financial records: 10 years (as required by French accounting law)
• Tax documentation: 6 years (as required by French tax law)
• Lease agreements: 5 years after lease termination
• Usage logs: 12 months

After these periods, data is securely deleted or anonymized.

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

To exercise any of these rights, contact us at contact@clefgestion.com. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

8. Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

While we take every precaution, no method of transmission over the internet is 100% secure. Please use strong passwords and protect your account credentials.

9. International Data Transfers

Your data is primarily stored on servers located within the European Union. If we transfer data outside the EU, we ensure adequate protection through Standard Contractual Clauses or other GDPR-compliant mechanisms.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: