Privacy Policy

1. Controller

Synergieloc — sole proprietorship

Registered with the Strasbourg Trade and Companies Register (RCS) under no. 101 728 194 — SIRET 101 728 194 00016

Registered office: 4 rue Alfred Kastler, 67100 Strasbourg, France

Contact: contact@synergieloc.fr

Customer service and after-sales: +33 7 69 76 99 34

The publisher's identity is also described in the legal notice (French).

2. Scope

This policy applies:

• to the public website https://synergieloc.fr (home page, trial, guides, forms);
• to the Synergieloc software (property management, co-ownership management, CAD, partner area);
• to other services of the same controller when they link to this page, including checkwebs.fr and languals.fr;
• to the use of the TikTok APIs from the internal publishing area (professional account @synergieloc).

3. Data collected

Depending on use, we may process:

• Contact and trial: last name, first name, e-mail, phone, company, message, technical form data (anti-spam);
• Customer account: credentials, contact details, property portfolio and management data you enter (leases, tenants, landlords, accounting);
• Payment: online payment is processed by Stripe; we do not keep card numbers;
• Technical logs: IP address, timestamp, pages viewed, log of connections to the customer area;
• Cookies: only technical session cookies and aggregated, anonymous audience counters — no advertising cookies, no profiling.

We do not sell data. We do not build a marketing file from TikTok visitors to the public website.

4. Purposes and legal bases

• answering a request (form, e-mail) — legitimate interest / pre-contractual measures;
• providing the subscribed service (trial, subscription) — performance of the contract;
• security, access traceability, abuse prevention — legitimate interest and legal obligations;
• accounting and tax obligations — legal obligation;
• publishing content on the publisher's professional accounts (TikTok and, where applicable, other networks) — the publisher's legitimate interest, excluding data of software customers.

5. TikTok

Synergieloc operates a professional account @synergieloc and a TikTok developer app to publish content presenting its tools (Synergieloc, checkwebs.fr, Languals).

Visitors to synergieloc.fr do not need to connect a TikTok account to use the website or the software. We do not use Login Kit to authenticate tenants, landlords or agencies.

When the publisher posts through the TikTok API (Content Posting / app credentials), TikTok Pte. Ltd. processes that account's data under its own policy: TikTok privacy policy (EEA).

We do not collect internet users' TikTok browsing history. No customer content (leases, rent receipts, tenant identities) is published on TikTok.

6. Recipients and processors

Internal access is strictly limited to the people in charge of the service.

Technical processors:

• hosting: Hostinger International Ltd., servers in the European Union (Vilnius, Lithuania) — see the legal notice;
• payment: Stripe (relevant offers);
• TikTok, only for publishing on the publisher's own account;
• language model: DeepSeek (China), only for the CAD edit copilot and suggestion called through the keyed API or the /mcp server — see § 8.

A software customer's data is isolated in a database that is not shared with any other customer's data.

7. Retention periods

• contact messages / unconverted leads: 3 years after the last exchange;
• unsuccessful trial account: 12 months after expiry;
• inactive tenants / landlords: 5 years after the end of the lease or mandate;
• accounting entries and documents: 10 years (legal obligations);
• technical logs: 1 year;
• checkwebs.fr audit reports: 90 days, deletable by the user.

8. API and MCP servers (AI agents)

This covers the /api/v1 API and the /mcp and /mcp/cao MCP servers, used by AI agents (ChatGPT, Claude, Cursor, Grok…).

• Building scenes sent (walls, openings, rooms, furniture) are used only to compute the requested answer and are not kept, with two exceptions: the 4K walkthrough studio (scene and camera path, automatically deleted after 7 days) and the families you save in the library;
• produced files (DXF, IFC, drawing sheets) are never written to disk: a large file is served from the server's memory through a link valid for 30 minutes;
• without an account (/mcp/cao), we count calls per day and per tool, without recording anything about the caller;
• free API key: caller name, optional e-mail, IP address at creation (abuse prevention) and usage, kept as long as the key exists;
• feedback sent to the team is kept to improve the service;
• technical logs (IP address, date, requested address): 14 days for the web server, 7 days for the system journal, about one month for the application log;
• recipients: our host, Hostinger International Ltd (Vilnius, Lithuania) and, for the CAD edit copilot and suggestion called through the keyed API or the /mcp server only, the DeepSeek language model (China, outside the European Union), which receives the written request and a summary of the scene to turn it into operations — do not include personal data in it. Through /mcp/cao (ChatGPT, Claude, Grok), nothing is sent to a third party: the assistant itself translates the request. We do not sell any data and do not use it for advertising or to train models;
• to exercise your rights: contact@synergieloc.fr.

9. Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, objection and portability. To exercise it, write to contact@synergieloc.fr.

You can lodge a complaint with the CNIL, the French supervisory authority (cnil.fr).

Security measures: HTTPS/TLS, hashed passwords, two-factor authentication, a dedicated WireGuard VPN tunnel for the customer area, AES-256-GCM encrypted backups — details on Security & GDPR (French).

10. Minors

The services are intended for professionals and adults managing rental property or a website. They are not intended for children under 16.