Last updated: 13/10/2026 — version 2.

This is a translation. In the event of any discrepancy, the French version prevails.

1. What this document explains

This policy describes how ImmoSaaS, publisher of the ImmoSaaS platform, processes personal data, in accordance with Ivorian Law No. 2013-450 of 19 June 2013 on the protection of personal data (loi n° 2013-450 du 19 juin 2013 relative à la protection des données à caractère personnel).

It distinguishes between two situations that must not be confused:

• data that we process on our own behalf: that of site visitors and of users who open a management account (agencies and individuals);
• data that we process on behalf of a user: that of their tenants, of the owners whose properties they manage and of their contractors.

2. Who decides what

For the data of its clients, the agency (or the individual manager) decides: what information it records about a tenant, why, and for how long. It is the data controller. We process this data on its behalf, in accordance with its instructions, without making any use of it for ourselves.

In practice: if you are a tenant, owner or contractor and wish to view, correct or have your information deleted, your point of contact is the agency that manages your file. We help it respond to you; we do not decide in its place.

3. Data we process on our own behalf

Site visitors

To measure traffic on the public site and the showcase pages, we record: the page viewed, the date, the country of connection, the originating page or campaign (for example an advertisement) and the links clicked.

• No cookie is placed for this measurement.
• Your IP address is not stored. At the time of the visit, it is used to determine your country using a geolocation database installed on our servers (DB-IP), and is then replaced by an encrypted identifier, valid for a single day, which cannot be used to identify you.
• The country detected is also used to pre-fill the country in the registration form; you can change it.
• Search engine crawlers are not counted.

Legal basis: our interest in knowing the site’s audience, without identifying individuals.

Users (agencies and individuals)

Name or business name, contact details (telephone, email), country, identity and role of team members, history of top-ups and payments, log of logins and sensitive operations.

This data is used to provide the Service, support, billing and platform security. Legal basis: performance of the contract between us.

Support requests, complaints and help assistant

The content of messages sent, attachments and, where applicable, screenshots provided voluntarily. A screenshot is never taken without action by the user.

When the automated help assistant is enabled, the questions put to it are transmitted to an artificial intelligence provider to produce the answer. The assistant neither consults nor transmits account data (properties, tenants, amounts). We ask you not to write your clients’ personal data in it. Conversations are kept to improve help content and frequently asked questions.

If a site visitor asks to be called back from the help bubble, they provide us with their name and number, with their consent, so that they can be contacted about the Service, and for nothing else.

Phone notifications

If you enable notifications, your browser sends us a technical delivery address specific to your device. It is used solely to notify you of activity on your account. You can withdraw it at any time from your browser settings.

4. Data processed on behalf of users

Depending on what the user records: identity and contact details of tenants, owners and contractors, information relating to leases, rents, payments, expenses, payments to owners and works, as well as uploaded documents and photos.

We access it only to provide the Service, respond to a support request from the user or remedy a technical incident. Every access of this kind is logged.

5. What we do not do

• We do not sell any data.
• We do not rent or transfer any file to third parties for commercial purposes.
• We do not use an agency’s data to solicit its clients.
• We do not cross-reference data from several accounts to build individual profiles.
• We do not engage in targeted advertising or the resale of audiences.

6. Aggregated statistics

We may produce aggregated and anonymised usage statistics, with no possibility of re-identification. Each user may refuse to contribute to them at any time from their settings, without any effect on their access to the Service.

7. Recipients

The data is accessible to:

• persons authorised by the user concerned, according to the rights the user has assigned to them;
• our staff, to the extent required by their duties;
• our technical providers, bound by confidentiality obligations and acting only on our behalf: hosting, sending of emails, SMS and notifications, online payment of top-ups, artificial intelligence assistant.

Online rent payments are processed by the provider that the agency itself has chosen, into its own account: that provider receives the information needed for the payment.

Data may be disclosed to an authority that requests it in the manner provided for by law.

8. Hosting and transfers

The data is hosted by Contabo GmbH, —.

Where data is hosted or processed outside Côte d’Ivoire (hosting, sending of messages, artificial intelligence assistant), the transfer is made to providers offering an adequate level of protection and under the conditions laid down by Law No. 2013-450. Users are informed of any substantial change in the hosting location.

9. Retention period

Data	Period
Account and associated data	For the lifetime of the account, then 90 days in read-only mode
Accounting records and supporting documents	In accordance with the applicable legal obligations
Login log	12 months
Support requests and conversations with the assistant	3 years
Site visit statistics (without IP address)	25 months
Visitor callback request	12 months if not followed up

Retention periods for the data of tenants and owners are set by the agency, which is responsible for them.

10. Security

We implement appropriate measures: encrypted exchanges, strict separation of data between accounts, passwords stored as irreversible hashes, encryption of sensitive credentials (payment keys, API keys), role-based rights, a log of sensitive operations and regular backups.

No system eliminates all risk. A shared or overly simple password remains the most common weakness, and it is beyond our control. In the event of a data breach likely to affect you, we inform the persons and the authority concerned under the conditions laid down by law.

11. Your rights

You have the right to information, access, rectification, erasure and objection regarding your data, under the conditions of Law No. 2013-450.

Whom to contact:

• Tenant, owner or contractor: the agency that manages your file. It is the agency that decides about your data.
• User of the Service or site visitor: us, at contact@immosaas.agency.

We respond within thirty (30) days. If you consider that your rights have not been respected, you may refer the matter to the Autorité de Régulation des Télécommunications/TIC de Côte d’Ivoire (ARTCI) (Telecommunications/ICT Regulatory Authority of Côte d’Ivoire), the authority responsible for the protection of personal data.

12. Cookies

See the cookie policy.

13. Changes

This policy may be amended. Each version is numbered and dated, and previous versions remain available for consultation. Users are notified of any substantial change.

14. Contact us

ImmoSaaS — Marcory Résidentiel, Immeuble NSIA, 2ᵉ étage, Abidjan, Côte d’Ivoire — contact@immosaas.agency