Last updated: October 4, 2026
[…].
1. Who is responsible for your data?
Locagex is published by Vincy Dev Corp SA, whose details appear in the legal notice. Locagex's role depends on the data concerned:
| Data | Data controller | Role of Locagex |
|---|---|---|
| Your account, your subscription, your payments to Locagex, security, the public Listings area | Locagex | Data controller |
| Data that a landlord, agency or management company records about its tenants, applicants, client owners and technicians | The landlord, agency or management company | Processor: Locagex processes this data only to provide the service, on the organisation's instructions |
If you are a tenant and wish to exercise your rights over data held by your landlord, contact them first; we will forward any request we receive to the organisation concerned and help it respond.
This policy applies to the website, the Listings area and the mobile apps. It has been drawn up in light of the General Data Protection Regulation (GDPR) for people located in the European Union, and of the personal data protection laws of Côte d'Ivoire, Benin, Senegal, Cameroon and the Democratic Republic of the Congo.
2. Data we collect
Depending on your profile (landlord, agency, staff member, tenant, applicant, technician, visitor), we may process:
- Account data: last name, first name, email, phone, password (stored hashed, never in plain text), role, organisation; if you log in with Google or Facebook, the account identifier and verified email address provided by that provider.
- Organisation data: name, legal form, country of operation, tax settings, logo, the legal representative's signature uploaded for documents.
- Management data: properties, units, rooms, fittings, photos and videos, leases, stays, amounts and due dates, invoices, receipts, inspection reports, breakdown reports, jobs, technicians' quotes and invoices, accounting entries, management statements.
- Tenant and applicant data entered by the landlord or submitted by the applicant: identity, contact details, supporting documents for an application, payment history, messages, satisfaction reviews.
- The landlord's payment details: operator, holder and Mobile Money or bank account number provided to receive rent; the number is stored encrypted and only a masked version is shown in the app.
- Subscription data: plan, invoices, status and reference of payments sent by our payment providers (we do not receive your full bank card number), referral or promo code used.
- Messages and notifications: content of internal messaging, device identifier for push notifications.
- Technical data: connection logs, IP address, device and browser type, log of sensitive actions, for security and traceability purposes.
We do not ask for any so-called sensitive data (health, religion, opinions, origin). Do not enter it in free-text fields or supporting documents, unless legally required.
3. Purposes & legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, verifying your email, logging you in (including via Google or Facebook) | Performance of the contract |
| Providing the management service: properties, listings, viewings, applications, leases, rent, receipts, inspection reports, breakdowns, accounting, messaging | Performance of the contract |
| Invoicing and managing your subscription, your options and referrals | Performance of the contract / legal obligation (accounting and tax) |
| Sending you service-related emails and notifications (due dates, reminders, follow-ups, alerts) | Performance of the contract |
| Securing access, preventing fraud and abuse, logging sensitive actions | Legitimate interest |
| Assisting users and resolving incidents | Performance of the contract / legitimate interest |
| Improving the service using aggregated, anonymised statistics | Legitimate interest |
| Measuring the effectiveness of our advertising campaigns (Meta pixel and Conversions API) | Consent |
| Sending you non-essential marketing communications | Consent (withdrawable at any time) |
| Responding to requests from authorities and keeping evidence | Legal obligation |
No decision producing legal effects concerning you is taken solely on the basis of automated processing: accepting an application, for example, is always the landlord's decision.
4. Listings, viewings & applications
A published listing is visible to any visitor to the Listings area. It contains the property information chosen by the landlord; do not include your tenants' personal data (faces, names, documents visible in photos).
When you request a viewing or submit an application, your contact details, message and supporting documents are sent only to the landlord or agency that published the listing. Supporting documents are only accessible through authenticated links.
5. Data recipients
Your data is only accessible to people in your organisation with the necessary rights, and to other users only to the extent useful to the relationship (for example, the tenant sees their lease and receipts, the technician sees the job assigned to them). A tenant linked to several landlords has their data segregated by organisation: a landlord never has access to information held by another.
We use service providers, who act only on our instructions and for the purposes of the service:
| Provider | Service |
|---|---|
| Hostinger | Sending emails |
| Google (Firebase Cloud Messaging) | Push notifications on mobile |
| Google, Meta (Facebook) | Logging in with a Google or Facebook account, at your initiative |
| FedaPay, PawaPay and, where applicable, Stripe | Payment of the subscription and options |
| Meta (Facebook) | Measuring advertising campaigns, with your consent |
We may also disclose data to authorities, only where required by law, and to a buyer in the event of a sale of the business, who then remains bound by this policy. We do not sell or rent your data.
6. Transfers outside your country
Our providers may process data in a country other than yours, in particular in the European Union, the United Kingdom, the United States or another African country. We govern these transfers with the safeguards provided by applicable law: adequacy decision, standard contractual clauses, or authorisation from or declaration to the data protection authority where the law of your country requires it.
7. Locagex support access
To assist you, ensure security and fight fraud, authorised Locagex staff may view account and organisation data, as far as necessary. They may also display your account as you see it and, with double confirmation, carry out an action in it to resolve an incident. These staff are bound by confidentiality, authenticate with two-factor authentication, and every access and action is recorded in an audit log.
8. Rent & payments
Locagex does not collect your rent and does not stand between tenant and landlord: the money is paid directly to the payment method provided by the landlord or their manager, and the payment is reported in the tool. We therefore do not hold any rent balance on your behalf.
For the Locagex subscription, your payment details are entered directly with our payment providers, who process them under their own privacy policies; we only receive the payment status and reference.
9. Audience measurement & advertising
On the public website, we may use the Meta pixel and the Meta Conversions API to measure visits and sign-ups resulting from our campaigns. Data sent to Meta (browser identifier, IP address and, for a conversion, hashed email or phone number) is only sent with your consent, which you can withdraw at any time. These tools are not used in the logged-in management areas. Details are in our Cookie policy.
10. Retention period
| Data | Period |
|---|---|
| Account and management data | While the service is used, then 10 years after the end of the last subscription or the last login, before deletion or anonymisation |
| Invoices, accounting entries and payment records | 10 years from the end of the financial year, in line with accounting obligations |
| Unsuccessful applications | 3 months after the decision, unless the applicant agrees to a longer period |
| Viewing requests from unregistered visitors | 1 month after the request |
| Connection and security logs | 12 months |
| Advertising measurement data | 12 months maximum from consent |
Data that an organisation holds about its tenants is kept according to its instructions, in compliance with legal periods; when an account is closed, it is deleted unless there is an obligation to keep it.
11. Security
Exchanges are encrypted (HTTPS), passwords are hashed, access is protected by authentication and by rights specific to each organisation, and sensitive documents (applications, attachments) are served through authenticated endpoints. Administrative access requires two-factor authentication. We apply reasonable technical and organisational measures to protect your data and will inform you, and the competent authority, of any breach posing a risk to your rights, under the conditions provided by law.
12. Your rights
Depending on the law that applies to you, you have the right to access, rectify, erase, object to, restrict and port your data, the right to withdraw your consent at any time and, in France, the right to set instructions for what happens to your data after your death.
To exercise them, write to [email protected]; we may ask you to prove your identity and will reply within one month. You may also lodge a complaint with the data protection authority of your country, in particular the CNIL (France), ARTCI (Côte d'Ivoire), APDP (Benin), CDP (Senegal), or the competent authority in Cameroon and the Democratic Republic of the Congo.
Requesting deletion of your data (including data from Facebook or Google)
If you logged in with Facebook or Google, we only received your account identifier and verified email address from that provider. To request deletion of your data:
- In the mobile app: Settings > Delete my account. On the web, without the app: the Delete my account page, which emails you a confirmation link. The account is deactivated immediately and permanently deleted after 30 days; signing in again during this period cancels the request.
- You can also write to [email protected] from the email address of your Locagex account, with the subject "Delete my data". If you no longer have access to that address, give the name and phone number associated with the account: we may ask you to prove your identity.
- We acknowledge your request and give you a tracking number.
- Within one month, we delete your account, the linked Facebook or Google identifier and your personal data, then confirm the deletion by email.
Kept only for the period required by law (see the Retention period section): invoices, accounting entries and payment records. If you are a tenant, the data your landlord holds about you (lease, receipts, inspection reports) is their responsibility: we forward your request to them. In case of partial refusal, we tell you why.
You can also remove Locagex from your Facebook account (Settings & privacy > Settings > Apps and websites) or Google account (Google Account > Security > Third-party connections): the provider then stops sending us information. This action alone does not delete your Locagex account; to do so, follow the procedure above.
13. Minors
Locagex is intended for adults. We do not knowingly collect data about minors as users; a landlord who records minor occupants does so under their own responsibility and limits it to what is strictly necessary.
14. Changes
We may update this policy, in particular when we add a new feature or a new provider. Any significant change will be notified to you by email or in the app before it takes effect. See also our Terms of use.
15. Contact
For any question about this policy or your data: [email protected].