Privacy Notice
Last updated 2 August 2026 · Clef en Main
A short statement of what personal data Clef en Main holds about applicants, tenants and owners, why, for how long, and the rights you have over it. The full privacy policy carries the detail.
1. Who is responsible
Clef en Main is the controller of the personal data described here. It operates clefenmain.com and the resident portal for tenants and property owners in Paris. Questions and requests go via the support page at /support.
2. Data categories
Account data: your email address and sign-in records. Application data: identity, contact details and the supporting documents French law permits for a tenancy application. Tenancy data: lease documents, rent and charge history, receipts, and requests. Owner data: property details, mandates and statements.
3. Purposes
Application data is used to assess a tenancy application. Tenancy and owner data are used to perform the lease and the management mandate — collecting rent, issuing receipts, handling requests — and to meet legal obligations. Nothing is sold or shared with advertisers, and no profiling is done beyond assessing an application.
4. Retention
Files of unsuccessful applicants are deleted within the period recommended by the CNIL after the vacancy is filled. Tenancy records are kept for the tenancy plus the limitation periods French law sets, then deleted. Accounting records are kept as long as tax law requires.
5. Your rights
Under the EU GDPR you can ask for access to the personal data held about you, for correction of anything inaccurate, for erasure where retention is no longer required, for restriction of processing, for a portable copy, and you can object to processing based on legitimate interests.
Requests are answered within one month. You can complain to the CNIL, the French supervisory authority, at any time.
6. Sharing and processors
Tenancy data is shared between the parties to the tenancy — a landlord sees the records of their own property — and with authorities where the law requires it, and otherwise with no one. A sign-in provider, a transactional email provider and hosting providers act as processors, each only on instruction.
7. Contact
To exercise any of these rights, or to ask what data is held about you, use the support page at /support. Identity is confirmed only to the extent needed to be sure the request comes from the person concerned. The full privacy policy on this site carries the complete description of the processing.