Privacy Policy

This policy describes how NANOCREATIVES processes personal data in connection with the Rentalia service, a web application available at https://app.rentalia-pro.com (the “Service”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and the French Data Protection Act No. 78-17 of 6 January 1978.

It is addressed to the customers and users of the Service, and to persons whose data is entered in the Service by its customers.

The controller is NANOCREATIVES, a French simplified joint-stock company (société par actions simplifiée) with a share capital of EUR 1,000, registered with the Créteil Trade and Companies Register under number 922 674 577, whose registered office is at 1 Cours Sainte-Marthe, Bâtiment B, 94320 Thiais, France (“Nanocreatives”).

For any question about the protection of personal data, you may write to support@rentalia-pro.com.

Nanocreatives acts as controller for data relating to the accounts of its customers and users, subscription billing, the security of the Service and its customer relationships. This policy covers that processing.

Nanocreatives acts as processor, within the meaning of Article 28 GDPR, for data that its customers enter in the Service about third parties, in particular tenants, landlords, guarantors and contractors. In that case, the customer, whether an owner or an agency, is the controller: it determines the purposes of the processing and must inform the data subjects. This processing is governed by the Data Processing Agreement entered into with the customer.

Persons whose data has been entered by a Rentalia customer, for example a tenant, are invited to address their requests first to the landlord or agency concerned. Nanocreatives forwards to the customer concerned any requests on this subject that it receives directly.

As controller, Nanocreatives processes the following categories of data:

Technical traces are collected using a monitoring tool hosted by Nanocreatives. They are used exclusively for the operation, diagnosis and security of the Service and are not used for any advertising purpose.

• identification and contact data: surname, first name, email address and, where applicable, telephone number;
• account and Space data: name and type of Space (private owner or agency), user role, language preference, authentication settings, including two-factor authentication;
• billing data: plan subscribed to, billing frequency, payment and invoice history, payment method used; card details are collected and processed directly by Stripe and are not stored by Nanocreatives;
• technical data: technical operation and security logs and traces, session data;
• communications with support: content of messages sent to support@rentalia-pro.com.

Data is processed for the following purposes, on the legal bases indicated:

Nanocreatives does not use personal data for targeted advertising and does not sell it.

• creation and management of accounts, provision of the Service and of the features subscribed to: performance of the contract;
• subscription management, billing and collection: performance of the contract;
• bookkeeping and retention of supporting documents: compliance with a legal obligation;
• sending of messages relating to the account and the Service, in particular regarding security, billing and changes to the terms: performance of the contract and Nanocreatives’ legitimate interest in informing its customers;
• security of the Service, prevention of fraud and abuse, technical diagnosis: Nanocreatives’ legitimate interest in ensuring the security and proper operation of the Service;
• handling of requests sent to support: performance of the contract or Nanocreatives’ legitimate interest in responding to the requests it receives;
• handling of complaints, requests to exercise rights and disputes: compliance with a legal obligation and Nanocreatives’ legitimate interest in defending its rights.

Data is accessible only to authorised personnel of Nanocreatives, within the limits of their duties. It may be disclosed to authorities where required by law.

Nanocreatives uses the following service providers, which process data on its behalf:

• OVH SAS, 2 rue Kellermann, 59100 Roubaix, France: hosting of the application and databases, in France;
• Cloudflare, Inc., United States: storage of uploaded files and generated documents (R2 service), DNS and network proxy services;
• Resend, United States: sending of transactional emails;
• Stripe Payments Europe, Ltd., Ireland: card payment of subscriptions;
• Meta Platforms (WhatsApp Business) and Twilio: delivery of notifications by WhatsApp and SMS, transmitted through the messaging relay operated by Nanocreatives.

Some service providers are established outside the European Union, in particular in the United States. Data transfers to Cloudflare, Inc. and Resend are governed by the standard contractual clauses adopted by the European Commission.

Any other transfer of data outside the European Union, in particular in connection with the delivery of notifications by WhatsApp or SMS, is governed by one of the safeguards provided for in Chapter V GDPR.

A copy of the applicable safeguards may be obtained on request at support@rentalia-pro.com.

Data is retained for the following periods:

Data processed on behalf of customers is retained in accordance with their instructions, under the conditions set out in the Data Processing Agreement.

• account data: for as long as the account is active;
• billing and accounting data: ten years, pursuant to legal retention obligations;
• after the account is closed: deletion or anonymisation of the data, except for data whose retention is required by law;
• technical traces: for a limited period, as necessary for the diagnosis and security of the Service.

Nanocreatives implements appropriate technical and organisational measures to protect data against unauthorised destruction, loss, alteration, disclosure and access, in particular:

• hosting of the application and databases in France;
• access control based on the roles assigned in each Space, and segregation of data between Spaces;
• mandatory two-factor authentication for administration roles;
• a session cookie that is inaccessible to scripts (httpOnly);
• no storage of card numbers;
• technical monitoring hosted by Nanocreatives.

In accordance with the applicable regulations, you have the following rights over your data:

To exercise these rights, write to support@rentalia-pro.com. Proof of identity may be requested where there is reasonable doubt about your identity. A response is provided within one month, which may be extended under the conditions provided for by the GDPR.

Where your data has been entered by a landlord or an agency using Rentalia, that landlord or agency is the controller: your requests should be addressed to it first, as indicated in Article 3.

You may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr, or with the data protection authority of your country of residence.

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object, in particular to processing based on legitimate interest;
• right to give instructions regarding the handling of your data after your death.

A cookie is a small file placed on your device when you visit a website or use an application. The Service uses only cookies that are strictly necessary for its operation:

The Service does not use any advertising or audience measurement cookies. As strictly necessary cookies are exempt from consent under Article 82 of the French Data Protection Act of 6 January 1978, no consent banner is displayed.

Should Nanocreatives use other cookies or trackers that require consent, your consent would be obtained before they are placed.

You can configure your browser to block or delete cookies. However, blocking the session cookie prevents you from signing in to the Service.

• a session authentication cookie, managed by the Better Auth library and inaccessible to scripts (httpOnly), which keeps you signed in;
• a language preference cookie (NEXT_LOCALE), which stores the display language you have chosen.

This policy may be amended, in particular to take account of changes to the Service or to the regulations. Users are informed of any material change before it takes effect.

Version of 2026-10-30.