Privacy Policy
Version in force as of 8 July 2026. This policy describes the processing of personal data carried out on the website myhomeprice.fr, in accordance with Regulation (EU) 2016/679 (the "GDPR") and Law No. 78-17 of 6 January 1978, as amended ("Informatique et Libertés" – Data Protection Act).
1. Data Controller
ATELIER IMAGINATION REALISATION, a French simplified joint-stock company (société par actions simplifiée, SAS) with share capital of €500, registered with the Versailles Trade and Companies Register (R.C.S. Versailles) under number 130 273 956, whose registered office is located at 6B rue Coste, 78000 Versailles, France (hereinafter "we" or "us"). Contact for any question relating to personal data: contact@myhomeprice.fr.
2. Data Processed, Purposes and Legal Bases
| Data | Purpose | Legal basis |
|---|---|---|
| Email, password (hashed) | Account creation and management, authentication | Performance of the contract (art. 6.1.b GDPR) |
| Estimation parameters (price, postcode, property type, with optional address and floor area) and history | Provision of the service, consultation of history | Performance of the contract (art. 6.1.b GDPR) |
| Billing data (name, billing address, transaction history) | Payment, invoicing, accounting | Performance of the contract and legal obligation (art. 6.1.b and 6.1.c GDPR) |
| Email (newsletter) | Sending information about the property market | Consent, collected via double opt-in and withdrawable at any time (Art. 6.1.a GDPR) |
| Uploaded diagnostic file (PDF) and the results of its analysis | Analysis incorporated into the Investment Report; aggregated and anonymised statistics (categories of anomalies, costs, DPE rating, sector) to improve the service | Performance of the contract (art. 6.1.b GDPR); legitimate interest for anonymised statistics (art. 6.1.f GDPR) |
| Pseudonymised usage events (page viewed, tool used, timestamp). The session identifier and IP address are only recorded in hashed and salted form, never in clear text. Fully anonymous tool usage statistics (tool, postcode, property type, order of magnitude by range) — with no identifying key linking back to a person or a session | Internal audience measurement, analysis of user journeys and service improvement | Legitimate interest (art. 6.1.f GDPR) — no tracker is placed on your device and no third-party audience measurement is used |
| Technical logs (IP address, timestamp) | Security, prevention of abuse and fraud | Legitimate interest (Art. 6.1.f GDPR) |
Bank card data is collected and processed exclusively by our payment service provider Stripe; we never have access to it.
3. Retention Periods
- Account data and estimation history: for the entire lifetime of the account, then deletion within 30 days following the request to delete the account;
- Accounting records and invoices: ten (10) years from the close of the financial year, in accordance with article L123-22 du Code de commerce (French Commercial Code);
- Newsletter email: until consent is withdrawn (unsubscribe link or simple request);
- Pseudonymised usage events: twenty-five (25) months maximum, in accordance with the duration recommended by the CNIL (French Data Protection Authority) with regard to audience measurement;
- Technical logs: twelve (12) months maximum.
4. Recipients and Processors
The data is accessible only to authorised staff of the data controller and to our data processors, strictly to the extent necessary for the performance of their duties:
- Supabase, Inc. — database hosting and authentication;
- Stripe Payments Europe, Ltd. — payment processing and invoicing;
- Brevo (Sendinblue SAS, France) — sending of transactional emails and newsletter;
- Vercel Inc. — application hosting.
No data is sold or rented to third parties. No decision producing legal effects is made on the basis of processing which is exclusively automated within the meaning of article 22 of the RGPD (GDPR – General Data Protection Regulation).
5. Transfers Outside the European Union
Some of our subprocessors (Vercel, Supabase, Stripe) may process data from countries located outside the European Union, in particular the United States. These transfers are governed by appropriate safeguards within the meaning of articles 44 et seq. of the GDPR (General Data Protection Regulation): an adequacy decision (EU-U.S. Data Privacy Framework) and/or the European Commission's standard contractual clauses, depending on the provider.
6. Security
We implement appropriate technical and organisational measures, including: encryption of data exchanges (TLS), password hashing, segregation of data access through authorisation rules at database level, logging, and the principle of data minimisation. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with article 34 of the RGPD (General Data Protection Regulation).
7. Cookies
The website only uses cookies that are strictly necessary for the service to function, which are exempt from consent requirements in accordance with article 82 of the loi Informatique et Libertés (French Data Protection Act) and the CNIL guidelines:
- Authentication session cookie (Supabase) — keeps the user logged in; duration: session/renewal;
- Language preference cookie — remembers the chosen language; duration: 1 year.
No advertising cookies, third-party audience measurement cookies or tracking cookies are placed. This is why no consent banner is displayed.
8. Your Rights
In accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights with regard to your data: access, rectification, erasure, restriction of processing, portability, objection (in particular to direct marketing), withdrawal of consent at any time, as well as the right to define guidelines concerning the fate of your data after your death.
These rights may be exercised by email to contact@myhomeprice.fr. We respond within a period of one (1) month, extendable by two (2) months in the event of a complex request. Proof of identity may be requested in the event of reasonable doubt. You also have the right to lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).
9. Amendments
This policy may be updated to reflect developments in the service or in applicable regulations. In the event of a substantial change, users with an account will be informed by email or by a notice displayed on the website. The version date appears at the top of this document.