Privacy & cookie policy

This policy explains what personal data Claritat collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and French data protection law.

1. Who is responsible for your data

The data controller is Claritat, 22 rue du Vieux Pont, 74200 Thonon-les-Bains, France (SIRET 518 634 100 00037). Contact: claritatfrance@gmail.com. Website: claritat.com.

2. What we collect

• Your email address.
• The property address you check, and its map coordinates.
• Your consent choices and the date you gave them.
• The report we generate for that address, and the type of property you selected.
• For paid orders: your name, preferred language, your questions about the property and the package chosen.
• For the Copro check: the copropriété documents you upload. These may contain personal data of other owners (for example names or unpaid charges). We use them only to prepare your analysis and delete them automatically 30 days after upload.
• Basic technical logs needed to run and secure the service (for example, error logs).

Payments are handled by Stripe. Claritat does not store card details. We don't create a user account for you.

3. Why we use it and our legal basis

• To create and email your report — based on your consent and to provide the service you asked for (Art. 6(1)(a) and (b) GDPR).
• Follow-up emails about your property (for example, offering a specialist review) — only if you ticked the optional box. You can withdraw this consent at any time (Art. 6(1)(a) GDPR).
• Preventing abuse and keeping the service secure — our legitimate interest (Art. 6(1)(f) GDPR).

We never sell your data and never use it for advertising.

4. Who we share it with

• Lovable, our website hosting provider, and Supabase, which stores requests, reports, order data and uploaded documents on our behalf.
• Stripe, which processes payments through Stripe Checkout.
• Our AI provider, which receives the public planning and risk data for the address (not your email) to write the report.
• Resend, our email delivery provider, which sends reports and order confirmations to your inbox.
• French public data services (Base Adresse Nationale, Géoportail de l'Urbanisme, IGN API Carto, Géorisques), which receive the address or its coordinates — never your email.

Some providers may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

Copro documents are deleted automatically after 30 days. Reports and order data are kept as long as needed to deliver the service and to meet legal obligations such as accounting. If you agreed to follow-up emails, we keep your email for that purpose until you withdraw consent or for 3 years after our last contact, whichever comes first.

6. Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time. Email us at claritatfrance@gmail.com. You can also complain to the French data protection authority, the CNIL (cnil.fr), or the authority in your own country.

8. Changes

If we change this policy in a meaningful way, we'll update the date above and, where required, ask for your consent again.