Privacy policy
Last updated: 31 October 2026.
This policy says what DIGIMO SAS (“Digimo”, “we”) does with personal data, under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. It is written for three readers: the person visiting the site, the user of the application inside an estate agency, and the person — seller, buyer, syndic, notaire — whose documents a dossier holds.
1. Two roles, depending on the data
Digimo is a service for real-estate professionals: an agency opens one dossier per property for sale, uploads the sale’s documents, lets Digimo read them, and gets checks and reports out of it. We do not play the same role for every piece of data.
Digimo is the controller for the data about its own relationship with you: visitors of the site, demo requests, user accounts, billing, support and the usage measurement of the application.
Digimo is a processor, within the meaning of article 28 GDPR, for everything a dossier contains: the uploaded documents, the facts read from them, the parties to the sale, their contact details. The controller of that processing is the agency that opened the dossier. It decides what it uploads, who has access and how long it keeps it; Digimo processes that data on its instructions, as written in the terms, and never for its own purposes. If you are a seller, a buyer or another party to a sale and want to exercise your rights on that data, your contact is the agency; we help it answer you.
2. The data processed
On the site
The site collects nothing: it has no form, no account, no audience measurement, and sets no cookie (see the cookies page). A demo is booked on the online calendar of our provider SmartAgenda, which applies its own policy; the contact email address opens your mail client.
In the application, for accounts and the agency
- User account: email address, name, phone number if given, profile picture if you add one (reachable by anyone who knows its address), password (hashed, never readable by us), sign-in dates.
- Team: the agency you belong to, your role (owner, administrator, agent, reader), who invited you and when.
- Agency identity: name, address, email, professional card number and logo, as the agency enters them to appear on its reports.
- Billing: the plan chosen, the dossier credits granted and consumed, and the history of those movements.
- Usage of the application: the screens opened and the actions taken, tied to your email, your team and your role; never the content of a dossier (see section 8).
- Support and technical logs: the errors the application met, the calls to Digimo’s services, and the exchanges with the application’s assistant, kept in your account so you can find them again.
In a dossier, on behalf of the agency
- The documents of the sale, uploaded by the agency or, through a drop-off link, by the seller, the syndic or another party: title deed, diagnostics, general-meeting minutes, co-ownership regulations, the parties’ identity papers, and any other document the agency finds useful.
- The facts read from those documents: areas, dates, amounts, and also the parties’ identity (name, first name, date and place of birth, occupation, marital status, address) when a deed or an identity paper carries them.
- The parties to the sale and their contact details: seller, buyer, syndic, notaire, diagnostician, with the name, email, phone and address the agency enters or Digimo reads.
- Corrections made by hand to a fact that was read: who changed it, when, and the previous value.
- The reports written from the dossier.
- Reading traces: what allows the origin of every fact to be explained, kept with the dossier.
For an upload through a link (a syndic sending documents without an account), Digimo keeps neither the uploader’s name nor their email: only the files and the time of the upload are recorded. The IP address is used to limit the number of uploads and is not kept.
3. Why, and on what basis
| Processing | Purpose | Legal basis (art. 6 GDPR) |
|---|---|---|
| Account, team, agency identity | Provide the service, access and roles | Performance of the contract (6.1.b) |
| Billing and credits | Invoice, keep the books | Performance of the contract; legal obligation (6.1.c) |
| Reading documents, facts, parties, reports | The service itself: read, check, write, on behalf of the agency | The agency’s instructions (processing, art. 28); for the agency, the performance of its engagement |
| Technical and reading logs | Explain where each fact comes from, fix errors, keep the service secure | Legitimate interest (6.1.f): the reliability and traceability of the service |
| Usage of the application | Understand what is used and what fails, to improve the service | Legitimate interest (6.1.f), with the minimisation measures of section 8 |
| Sign-in and security emails | Sign you in, confirm an email or password change | Performance of the contract |
| Support | Answer you | Performance of the contract; legitimate interest |
Digimo sends no marketing email and neither sells nor rents any data.
4. Who processes the data, and where
Digimo uses providers (sub-processors for dossier data). Each accesses only what its task requires, under contract, and all data is hosted and processed in the European Union. Several of these providers are US companies operating European regions; a support access from outside the Union, should one occur, is governed by the European Commission’s standard contractual clauses, or by the EU–US Data Privacy Framework for those certified under it.
| Provider | What it does | Where |
|---|---|---|
| Railway Corp. (United States) | Hosts the application, its API and this site | EU West, Amsterdam (Netherlands) |
| Supabase Inc. | Database, accounts and authentication, file storage | AWS eu-west-3, Paris (France) |
| LlamaIndex Inc. (United States) | Reading of the uploaded documents | The provider’s European Union region, the only one Digimo accepts |
| Microsoft Ireland Operations Ltd | The analysis models: facts, attention points, reports, assistant | Microsoft’s European Union Data Zone; content is not used to train the models |
| PostHog Inc. (United States) | Usage measurement of the application | PostHog Cloud EU (Germany) |
| Pydantic Services Inc. (United States) | Technical logs | European Union |
| OVH SAS (France) | Sending of sign-in and security emails (noreply@digimo.fr) |
France |
| MyNotary (France) | Receives a dossier’s facts only when the agency chooses to send them to its MyNotary workspace (section 6) | France |
Reports are converted to PDF by Digimo itself, in the same region as the application.
The public data consulted
To enrich a dossier, Digimo queries public data (addresses, cadastre, planning, co-ownerships, risks, energy, land values) with the property’s address and nothing else. No personal data is sent to those services.
5. Transfers outside the European Union
By design, Digimo transfers no data outside the European Union. Two exceptions, which depend on you:
- The Claude and ChatGPT connectors. If a user chooses to query their dossiers from Claude (Anthropic) or ChatGPT (OpenAI), what the assistant reads in the dossiers is sent to Anthropic or OpenAI, under their own terms, possibly outside the European Union. That choice is made per user, read-only, with their own rights; the application says so when it is enabled. It is for the agency to decide whether its members may do it.
- Support access by a provider established outside the Union, governed as described in section 4.
6. Who the data is shared with
- The members of your agency, by role: a reader consults, an agent edits, an administrator also manages members. One agency’s dossiers are never visible to another: the separation is made in the database itself.
- The parties to a sale, through drop-off links: a link shows its recipient what is asked of them, nothing else, and expires after 30 days.
- MyNotary, if the agency links its team to its MyNotary organisation and triggers a push: Digimo then writes into the MyNotary file the parties’ identity and contact details, and the documents the push includes. Nothing leaves without that action; Digimo never sends a message to anyone through MyNotary.
- The providers of section 4.
- Authorities, where the law requires it.
7. For how long
| Data | Duration |
|---|---|
| User account | As long as the account exists; deleted on request (section 9) within 30 days |
| Dossiers, documents, facts read, reports, reading logs | As long as the agency keeps them: a finished dossier stays readable, it is the record of the sale. Deleted at the agency’s request within 30 days, files included. At the end of the contract, kept for at most 12 months to allow a return, then deleted, unless asked earlier |
| Drop-off links | 30 days from sending, or until revoked |
| Working copies at the reading provider | Deleted by the provider in the days following the read |
| Content sent to the analysis models | Not kept for training; a retention of at most 30 days may apply for abuse detection, within the European data zone |
| Technical logs | 30 days |
| Usage measurement | As long as the account exists; deleted with it |
| Billing | 10 years (accounting obligation) |
| Edit log of Digimo’s catalogue | Kept for the life of the service, with its author’s email at the time of the change: it says where each rule comes from |
8. Usage measurement: what we do not do
To know what is used and what fails, the application sends PostHog, in Europe, the screens opened and the actions taken, tied to your account. We have configured that tool so that it never sees a dossier: no automatic capture of clicked text, no session recording, no page content; error messages are redacted before sending; nothing is measured on the drop-off page used by outside parties; and no cookie or local storage is set for this measurement. The details are on the cookies page.
9. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection provided by articles 15 to 22 GDPR, and the right to set directives on what happens to your data after your death.
- For your account and your agency: write to julien.morand@digimo.fr, or by post to DIGIMO SAS, Immeuble Le Saint Seb 2, 17 rue Marie Curie, 44230 Saint-Sébastien-sur-Loire, France. You can also, in the application, edit your profile, your email and your password, and export your agency’s data. We answer within a month.
- For a dossier that concerns you (you are a seller, a buyer, a syndic, or named in a document): contact the agency that holds the dossier, the controller of that data; if you write to us, we pass it on and help it answer.
You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
10. How the data is protected
- Each agency’s dossiers are walled off in the database itself, on every query, not only in the interface.
- Documents do not leave the European Union: the application accepts only its providers’ European region.
- Connections are encrypted; sessions are short (8 hours at most) and renewed; email and password changes are confirmed.
- Drop-off links are limited to 30 days and in number of uploads, and cannot be guessed.
- Every correction of a fact keeps its author, its date and the previous value.
- Converting reports to PDF happens in an isolated environment.
- Digimo’s administrators have personal accounts; every change they make to the catalogue of checks is logged with its author.
11. What the artificial intelligence does, and what it does not decide
Digimo reads documents with analysis models to extract facts, verify them, flag attention points and write reports. Every fact points to the page it came from, to be checked. This processing leads to no decision producing legal effects on a person: it prepares the work of the estate agent and of the notaire, who decide. Your clients’ documents are not used to train models, neither ours nor our providers’.
12. Changes
This policy evolves with the service. The date at the top says when it changed; a substantial change is announced by email to each agency’s owner.