Privacy policy

The data controller is Plotix, headquartered in France. Contact for any privacy matter: privacy@plotix.fr.

We do not currently have a designated Data Protection Officer (DPO) — not required under Article 37 RGPD for our size and processing activities. The privacy mailbox above reaches the founder directly.

We process only the personal data strictly necessary to deliver the service:

• Account data — email, name, hashed password (via Clerk), organisation name. Legal basis: contract performance (Art. 6(1)(b) RGPD).
• Waitlist / beta signups — email and stated role. Legal basis: consent (Art. 6(1)(a) RGPD), revocable at any time.
• Billing data — name, billing address, VAT number. Stored only inside Stripe (PCI-DSS Level 1 certified); we keep a customer ID reference and subscription status. Legal basis: contract performance + legal obligation (Art. 6(1)(b), (c)).
• Usage data — anonymised page views and zone-detail queries via Plausible Analytics (cookieless, no cross-site tracking). Legal basis: legitimate interest (Art. 6(1)(f)), service improvement.
• Error telemetry — IP-truncated stack traces via Sentry, retained 30 days. Legal basis: legitimate interest, service reliability.

We do not collect cookies for advertising, build behavioural profiles, sell data to third parties, or process special categories (Art. 9 RGPD).

The maps, zone scores and analytical signals you see in Plotix are computed from open public datasets under Licence Ouverte 2.0 (DVF, SITADEL, INSEE, Géorisques, IGN, ADEME, Cadastre, BAN, data.gouv.fr). These datasets are pseudonymised at source by the publishing authorities — no individual buyer or seller names are imported or stored in our database. DVF records are reduced to transaction price, date, parcel surface and mutation type before persistence.

We do not currently use DGFIP Fichiers Fonciers (which contain named owners). Any future integration of that dataset will be preceded by a Data Protection Impact Assessment (DPIA, Art. 35 RGPD) and explicit consent collection.

All personal data is hosted in the European Union:

• Application database — self-hosted PostgreSQL on Hetzner GmbH (Falkenstein / Nuremberg, Germany). Daily encrypted backups to Cloudflare R2 (EU region).
• Web frontend — Vercel (Paris, France region).
• Authentication — Clerk Inc. (EU data residency option enabled).
• Billing — Stripe Payments Europe Ltd (Dublin, Ireland).
• Transactional email — Resend Inc. (EU region).
• Error telemetry — Sentry (EU region).
• Analytics — Plausible Analytics OÜ (Tallinn, Estonia).

No personal data is transferred outside the European Economic Area. All sub-processors are bound by Standard Contractual Clauses (SCCs) where applicable.

• Account data — for the duration of the contract + 3 years after termination (commercial limitation).
• Billing records — 10 years (French Code de commerce L. 123-22).
• Beta signup emails — until you unsubscribe or 24 months of inactivity, whichever first.
• Usage telemetry — aggregated indefinitely, raw events 30 days.
• Error logs — 30 days.

You have, at any time, the right to:

• Access the personal data we hold about you (Art. 15).
• Request rectification of inaccurate data (Art. 16).
• Request erasure of your data (Art. 17) — full account deletion endpoint available from your settings panel; takes effect within 30 days.
• Restrict processing (Art. 18).
• Receive your data in a portable format (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3)).

To exercise any of these rights, email privacy@plotix.fr with sufficient information to identify your account. We respond within one month (Art. 12(3) RGPD).

If you believe your rights have been infringed, you may lodge a complaint with the French data-protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr/fr/plaintes.

Plotix uses only essential cookies (session, CSRF, auth) and cookieless analytics via Plausible. No third-party advertising trackers. A consent banner appears on first visit; you may revisit your choice from the footer link Cookies preferences.

Material changes to this policy are notified by email to active users at least 30 days before taking effect. Minor edits (typos, clarifications) appear here directly with the updated date above.