Draft — to be validated by a lawyer before launch. TODO(porteur)

Privacy policy

Version of 29 October 2026

1. Data controller

DELOMID, enterprise number BE 0715.495.655, Rue de la Loi 28, 1000 Brussels, Belgium, is the controller of the personal data processed by ImmeOneApp. For any question or request: support.immo@delomid.com.

2. Data processed

• Account: name, email address, phone (optional), language, password (stored as an irreversible hash), roles.
• Organisation: type (individual or company), name, enterprise number.
• Property management: properties, homes, leases, signatures, rents and payments, inventories, meters, maintenance, damage claims, documents and photos you add.
• Communication: messages, attachments, calls (metadata: participants, time, duration; audio and video are not recorded).
• Technical: connected devices, notification identifier, sign-in and security logs, IP address.

3. Purposes and legal bases

| Purpose | Legal basis | |---|---| | Create and manage your account, provide the service | Performance of the contract | | Secure accounts (sign-in codes, abuse prevention) | Legitimate interest | | Send the service emails and notifications | Performance of the contract | | Invoice the paid plan, keep the accounts | Legal obligation | | Keep signature evidence and the log of sensitive actions | Legitimate interest and legal obligation | | Read an imported lease or invoice automatically, at your request | Performance of the contract; you check every extracted field |

We do not sell your data and do not use it for advertising.

4. Who sees your data

• Other users, only within their role: for example, a tenant sees their home and lease, never the owner's finances; a syndic sees the building space, not private leases.
• The ImmeOneApp team, for support and account approval.
• Our processors, bound by contract: OVH (hosting in the European Union, email), Google Firebase (Android notifications), Apple (iOS notifications), Stripe (payments), OpenAI (automatic reading of documents, only at your request).

When data is transferred outside the European Union, the transfer is covered by the safeguards of the GDPR (standard contractual clauses or adequacy decision).

5. Retention periods

• Account: as long as it is active. When it is deleted, your personal data is erased or anonymised.
• Leases, payments and accounting documents: for the period required by law (up to 10 years after the end of the lease or financial year).
• Tenant follow-up card (dated facts of the rental, contests and answers): during the lease and 1 year after its end, then deleted. Only the owner of the property and the tenant concerned see it; it is never shared with other landlords and is never used for an automatic decision; the tenant can contest each piece of information. TODO(porteur)
• Security logs: 12 months.
• Sign-in codes: a few minutes; they are not kept after use.

6. Your rights

You can at any time access, correct and erase your data, restrict or object to its processing, and ask for a copy in a machine-readable format. Export and account deletion are available in your profile. For any other request, write to support.immo@delomid.com; we answer within one month.

You may also lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).

7. Security

Exchanges are encrypted, passwords are never stored in clear, files are kept in private storage reached through temporary links, and data is backed up regularly.

8. Changes

This policy may change; the current version is always available in the app. Significant changes are announced in advance.