BienCheck

Privacy policy

Plain-English summary of what we collect, why, how long we keep it, and how you stay in control.

Last updated: 12 June 2026

Data controller

The data controller is: Tholira (EURL), 241 chemin de Maya, 13160 Châteaurenard, France, SIRET 102 607 983 00016, Tarascon trade register 102 607 983. For any question, write to contact@biencheck.com.

Data we collect

We only collect what we need to run the service:

  • Account: email, hashed password, preferred language.
  • Analyses: details you enter about a property (address, price, area, EPC, etc.) to produce the score.
  • Payments: handled by Stripe. We never store your card number on our servers.
  • Technical: server logs (IP, user-agent, route) kept for security and debugging.

Purposes

Your data is used to:

  • Deliver the requested analysis and the Premium report.
  • Manage your account and your analysis history.
  • Collect payment and issue invoices.
  • Improve the service (aggregated, anonymised statistics).
  • Answer your support requests.

Legal basis

Processing is based on contract performance (you ask us for an analysis), our legitimate interest (security, fraud prevention, service improvement) and, where required, your explicit consent (non-essential cookies, marketing communications).

Retention

Account data is kept while the account is active. Analyses are kept for 3 years after your last login, unless you request earlier deletion. Invoices are kept for 10 years for accounting and tax reasons. Technical logs are kept for up to 12 months.

Processors

We rely on solid, GDPR-compliant providers: Supabase (database and authentication, EU hosting), Stripe (payments), OVH (hosting, network, anti-DDoS, EU), Resend or equivalent (transactional emails). No personal data is transferred outside the EU without appropriate contractual safeguards.

Your rights

Under GDPR you have rights of access, rectification, erasure, portability, restriction and objection, plus the right to set post-mortem directives. To exercise a right, write to contact@biencheck.com. You can also file a complaint with the French data-protection authority (CNIL, cnil.fr).

Cookies

We keep cookies to a strict minimum: one session cookie to keep you signed in, plus anonymised audience measurement. No third-party advertising cookies. You can manage your preferences from your browser.

Security

TLS encryption across the whole site, hashed passwords, database access locked down with Row-Level Security, regular audits and a least-privilege policy. Should a breach create a risk to your rights, you will be notified within 72 hours, as required by GDPR.

Updates

This policy can evolve to stay compliant and reflect new uses. Material changes are notified by email or via an in-app banner.