Privacy policy

This policy describes how Adm-immo (“we”) collects and processes the personal data of users of the A.D.M application (“the Service”), in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

1. Data controller

Adm-immo, Société par actions simplifiée (à associé unique), registered with the trade register under no. 107 463 846, whose registered office is at 1101 Chemin de Saint-Julien, 06410 Biot, France.
Contact for any data-related question: contact@adm-immo.ai.

2. Data collected

• Account: email address and password (encrypted), managed through our authentication provider.
• Deal data that you enter or import: property address, price, area, strategy, and any listing text provided.
• Attachments (documents, images) you attach to an analysis. They are not retained by the Service: they are only sent to the AI model for the time needed to generate the report, then discarded.
• Analysis reports generated and the price history of listings you re-import.
• Technical data: IP address and frequency counters, used only for abuse prevention (rate limiting), with a short lifetime.
• Payment: your bank card is entered on Stripe’s payment page, never on ours. We keep the customer identifier assigned by Stripe, the plan chosen and the status of the subscription; for a single report, the buyer’s email address and the payment reference.
• Deal Lab (« Tu l’achètes combien ? » case studies): your answer — price, decision (buy, negotiate, pass) and, only if you choose to give it, your declared role. No name, email or phone number. The answer is linked to a pseudonymous participant key derived one-way from the anonymous measurement identifier (section 7), and to a per-case network hash (never the IP address itself) used only to prevent abuse. If you are signed in, it is also linked to your account (internal link, never displayed). Answers are never published individually: only aggregate statistics (median, quartiles) are shown, above a minimum number of answers. A person who answers through your share link sees your price and decision, after giving their own, without any identity data.

3. Purposes and legal bases

• Provide the Service (account creation, generation and storage of your analyses) — performance of the contract.
• Security, abuse prevention and cost control (rate limiting, quotas) — legitimate interest.
• Deal Lab: aggregate statistics on case-study answers and prevention of abusive answers — legitimate interest.
• Payment for subscriptions and single reports, including the confirmation email for a single purchase carrying the link to the report — performance of the contract.
• Prospecting real-estate professionals (see section 10) — legitimate interest.
• Compliance with our legal obligations — legal obligation.

4. Recipients and processors

To operate, the Service transmits certain data to technical providers (processors within the meaning of the GDPR):

Transfers outside the European Union. Some processing (Anthropic, Jina AI, Stripe, Resend, and Vercel, a company established in the United States) involves a transfer of data to countries outside the EU. These transfers are governed by the appropriate safeguards provided by the GDPR: the European Commission’s standard contractual clauses and, for Stripe, Resend and Vercel, participation in the EU–U.S. Data Privacy Framework. By importing a listing via link, you consent to its URL being sent to the remote reading service Jina AI; otherwise, you can paste the listing text manually to avoid this transfer.

We do not sell or rent your data to third parties for commercial or advertising purposes.

5. Retention periods

• Account: kept while it is active. Deleted when the account is closed or on request.
• Analyses: kept for 3 years at most from their creation, then deleted — and in any event deleted when your account is closed or on request. We deliberately chose a short period: since every analysis can be exported as a PDF at any time, you keep the files you wish to archive yourself, with no time limit. The Service is not meant to be a long-term archive.
• Price history: kept while the account is active, deleted with the account.
• Attachments: not retained (processed in memory only).
• Anti-abuse counters (IP): short lifetime (from a few minutes to 36 hours), purged automatically.
• Deal Lab: answers (case, price, decision, date, declared role) are kept as statistical study data; the network hash is erased after 90 days; the pseudonymous key and any link to an account are severed after 25 months (or as soon as the account is deleted): the answer is then no longer linked to anyone.
• Enrichment cache: non-personal public data, refreshed periodically.

6. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to contact@adm-immo.ai. You may also lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr).

7. Cookies

The Service only places cookies issued by us (first-party), which no third party reads. No advertising cookies, no third-party tracking cookies.

• Strictly necessary cookies: the sb-…-auth-token cookies keep your session and authentication, until you sign out (400 days at most). They do not require consent.
• Internal audience measurement: adm_aid, an anonymous identifier (13 months); adm_sid, a visit identifier (30 minutes of inactivity); adm_utm, the channel through which you arrived (source, campaign, landing page, referring site, 90 days). They tell us which steps of the Service are used and which channel brings our users. They are read only by our servers, do not follow your browsing on other sites and are shared with no advertiser. This measurement falls under the consent exemption provided by the CNIL for audience-measurement trackers with a limited purpose; if you create an account, the arrival channel is attached to it for the lifetime of the account.
• Business introducers: when you arrive through a partner’s link, adm_ref stores their code and adm_ref_at the date of that first arrival (180 days), so the introduction can be credited to them; the code is copied to your account when you sign up or pay.
• Recommendation: when you arrive through the personal link of a user who recommends A.D.M to you, adm_parrain stores their code (90 days); it is read only when you sign up, to credit the recommendation.

Traffic statistics (page views) are produced without cookies by Vercel Web Analytics: visitors are recognised by a hash of the request, discarded after 24 hours, and the address of pages containing a private access link is masked before sending. Usage events of the Service may be sent to our product-analytics processor (PostHog, hosted in the European Union) from our servers only — your browser loads no PostHog script —, under the anonymous identifier above or your account identifier.

8. Security

Access is protected by authentication, per-user isolation is enforced at database level (Row Level Security), and exchanges are encrypted in transit (HTTPS). Security is a best-efforts (means) obligation: as no system is infallible, we cannot guarantee absolute security, and you remain responsible for protecting your credentials. In the event of a data breach likely to result in a risk to your rights and freedoms, we will inform you and carry out the notifications required under Articles 33 and 34 of the GDPR.

9. Third-party data you entrust to us

When you enter or import information relating to third parties (for example the name of a seller or agent, or contact details appearing in a listing), you act as a data controller for that data. You warrant that you have a lawful basis to process it and entrust it to us, and you undertake to comply with the GDPR obligations towards those individuals (including informing them where applicable). You indemnify and hold harmless Adm-immo against any third-party claim relating to the data you transmit to us.

10. Business prospecting

We contact real-estate professionals (property dealers, agencies) who do not use the Service, to introduce A.D.M to them. As their data is not collected from them, this section informs them under Article 14 of the GDPR.

• Data: the information the public directory publishes about the company (company name, SIREN number, legal form, business activity, registered office address, date of creation, headcount, turnover) and about its officers (surname, first names, position, month and year of birth and, where published, nationality); professional email address, telephone number of the establishment, website and, where applicable, LinkedIn profile address; a relevance score computed by us (fit between the activity and our service); history of exchanges (sends, opens, clicks, replies, objection).
• Source: public sources — the French administration’s public company directory (company identity and declared officers), the company’s website and the establishment’s Google listing (professional telephone). The professional email address is found and verified by Dropcontact or, failing that, by Hunter.
• Purpose and legal basis: introducing you, by professional email, by telephone or by LinkedIn message, to a service related to your professional activity — legitimate interest (Article 6(1)(f) GDPR).
• Recipients: Dropcontact (finding and verifying email addresses), Hunter (finding and verifying addresses, as a fallback), Smartlead (sending emails, tracking opens, clicks and replies) and Notion (our internal contact-tracking tool). Smartlead (Australia), Notion and Hunter (United States) are companies established outside the EU; transfers to them are covered by the European Commission’s standard contractual clauses (Hunter’s servers are located in Belgium).
• Retention: a contact’s data is deleted after 3 years without interaction. If you object to prospecting, your email address (or LinkedIn profile) is kept on an exclusion list, for the sole purpose of never contacting you again.
• Objection: at any time, by replying “STOP” to our messages or by writing to contact@adm-immo.ai; it is applied as soon as it is received. The other rights described in section 6 also apply.

11. Changes to this policy

We may amend this policy to reflect legal, technical or organisational changes. The applicable version is the one published on this page; the last-updated date appears at the top of the document. In the event of a material change, we will inform you by an appropriate means.