Your data protection

Hosting in France and Europe

The entire Rentimmo application (application servers, database and cache) is hosted in Europe, exclusively with GDPR-compliant subprocessors. No personal data leaves the European Union as part of normal service usage.

Personal data we store

To deliver the rental management service, we process strictly the data required to enter into and execute leases:

• Civil identity (first name, last name, date of birth, nationality)
• Contact details (email, phone, address)
• Supporting documents (ID, proof of residence, tax notice, payslips) used to build tenant/guarantor application files
• Banking details (IBAN) for rent collection and payouts
• Generated documents (leases, inventories, rent receipts, surety bonds)

Where sensitive data is stored

Supporting documents and contractual files are encrypted at rest and stored on object storage servers hosted in Europe (eu-west-3 region, Paris). The PostgreSQL database and Redis cache are also hosted in Europe with encrypted backups.

Subprocessors and trusted partners

Rentimmo relies on European partners, all GDPR compliant, for the following specific operations:

• Mangopay (France) — rent collection and payouts (licensed e-money institution)
• DocuSeal (EU) — electronic signature of leases and surety bonds
• Brevo / Sendinblue (France) — transactional emails
• Heroku — hosting infrastructure (Europe region)

Retention period

Data tied to leases and accounting obligations is retained for the statutory period (10 years from contract end for accounting records). Supporting documents from unsuccessful candidates are automatically deleted within a maximum of 3 months.

Your rights

Under GDPR, you have rights of access, rectification, erasure, restriction, portability and objection regarding your data. You can exercise these rights at any time by contacting us. You also have the right to lodge a complaint with the relevant data protection authority.

Any question about your data?

Our team responds to any request regarding privacy, hosting and the exercise of your rights as soon as possible.