Privacy Policy

1 Data Controller

The data controller for personal data collected through the Maymo application is:

Maymo Real Estate Solutions
Contact: contact@maymo.fr

2 Data Collected

When using the Maymo application, we may collect the following categories of data:

• Identity data — name, surname, email address
• Professional data — agency name, role, agency code
• Real estate data — property listings, photos, documents, mandates
• Client data — client profiles, search criteria, matching history, notes
• Technical data — connection logs, session identifiers

3 Purpose of Processing

Your data is processed for the following purposes:

• User account management and secure authentication
• Management of your agency's real estate catalog
• Automatic matching between properties and prospective buyers
• Document generation — flyers, mandates, and offers
• AI-assisted property description and photo staging
• Internal communication within your agency (feed, notifications)

4 Legal Basis

The processing of your data is based on:

• Performance of contract — data necessary to provide the Maymo service
• Your consent — obtained during registration through acceptance of this policy
• Legitimate interest — service improvement, analytics, and security

5 Use of Artificial Intelligence

Maymo uses AI services (language models and image generation) to create property descriptions and virtual staging from user-provided data. The information sent to these services is strictly limited to property characteristics (surface area, rooms, location, condition) and property photos.

No personally identifiable data is transmitted. Data is not retained by AI service providers beyond immediate processing.

6 Data Retention

Your personal data is retained for the duration of your active account. Upon account deletion, all associated data is permanently erased within 30 days, except where retention is required by law (accounting, taxation).

7 Data Recipients

Your data is accessible only to:

• Members of your agency, subject to role-based privacy rules (an agent's clients are visible only to that agent and the agency administrator)
• The Maymo technical team, strictly for maintenance and support

We do not sell, rent, or share your data with third parties for commercial purposes.

8 Data Transfers

Data is hosted on secure servers. Where subcontractors located outside the European Union are used (particularly for AI services), appropriate safeguards are in place in accordance with Articles 46 et seq. of the GDPR, including standard contractual clauses.

9 Your Rights (GDPR)

Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:

• Access — obtain a copy of all your personal data
• Rectification — correct inaccurate or incomplete information
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit the processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to the processing of your data at any time

To exercise any of these rights, contact us at contact@maymo.fr.

10 Data Security

We implement robust technical and organizational measures to protect your data:

• Password encryption using industry-standard bcrypt hashing
• JWT token-based authentication with secure expiry
• Role-based access control (RBAC) enforcing strict data isolation
• All communications encrypted via HTTPS/TLS

11 Complaints

If you believe the processing of your data does not comply with applicable regulations, you have the right to file a complaint with the relevant supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés):

www.cnil.fr

12 Policy Updates

This privacy policy may be updated at any time to reflect changes in our practices or legal requirements. Any significant change will be communicated to users through the application. The revision date is always indicated at the top of this page.