Privacy Policy
Last updated 2 August 2026 · Clef en Main
Clef en Main holds the data needed to manage a tenancy: your application file, your lease documents, and your rent history. Tenancy data is kept as long as French law requires, and is not sold or shared with advertisers.
1. Who this covers
This policy covers clefenmain.com and the resident portal behind sign-in. It applies to visitors, applicants, tenants and property owners. Clef en Main is the controller of the personal data described here, and processes it under the EU GDPR and French data protection law.
2. What is collected
Account data. Your email address and the authentication records created when you sign in. Passwords are handled by the sign-in provider and are never stored by Clef en Main.
Application data. When you apply for a room or apartment: identity, contact details, and the supporting documents French law permits a landlord to ask for, such as proof of income. Nothing beyond what the law allows is requested.
Tenancy data. For tenants: the lease, inventory documents, rent and charge history, receipts, and requests you raise. For owners: property details, mandates, and statements relating to their property.
No data is collected about your browsing beyond what is technically needed to serve the pages.
3. What is not collected
Clef en Main does not sell personal data, does not share it with advertisers, and does not use it for profiling beyond assessing a tenancy application. The public pages load no advertising or tracking scripts.
4. Legal bases
Application data is processed to take steps before entering a lease. Tenancy data is processed to perform the lease and the management mandate, and to meet legal obligations. Account data is processed to provide the portal you asked for.
5. Retention
Application files of unsuccessful applicants are deleted within the period recommended by the CNIL after the vacancy is filled. Tenancy records are kept for the duration of the tenancy and then for the limitation periods set by French law, after which they are deleted. Accounting records are kept as long as tax law requires.
6. Processors and sharing
A sign-in provider handles authentication and a transactional email provider delivers account email; infrastructure providers host the service. Each processes data only on instruction. Tenancy data is shared between the parties to the tenancy — a landlord sees the tenancy records of their own property — and with authorities where the law requires it, and otherwise with no one.
7. Your rights
Under the GDPR you can ask for access to your data, for correction, for erasure where the law no longer requires retention, for restriction, for a portable copy, and you can object to processing based on legitimate interests. Requests are answered within one month.
You can complain to the CNIL, the French supervisory authority, at any time.
8. Contact
Privacy questions and data requests go via the support page at /support.