Keysy collects information you provide directly: account data (name, email, hashed password), organization details, property and lease information, tenant records and data about third parties you transact with. We also collect minimal technical data automatically (IP address, browser type, pages visited) to secure the service and improve performance.
We use your data to: (a) provide, maintain and improve Keysy features, (b) process payments and subscriptions, (c) communicate with you about the service (transactional emails, alerts), (d) respond to your support requests, (e) comply with our legal and accounting obligations. We never sell your data to third parties.
We apply appropriate technical and organizational measures to protect your data: encryption in transit (TLS) and at rest, strict multi-tenant isolation per organization, regular backups, restricted access limited to authorized staff, and audit logs. Data is hosted within the European Union.
Your data is retained while your account is active. When an account is closed, data is deleted or anonymized within 30 days, except for data required to meet our legal and accounting obligations (invoices, supporting documents, security logs), which may be kept for up to 10 years under applicable law.
Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data: right of access, right to rectification, right to erasure ('right to be forgotten'), right to restriction of processing, right to data portability, right to object, and the right to issue post-mortem instructions. You can exercise these rights directly from your account settings or by contacting us at the address below. We will respond within one month at most.
Keysy is a data controller under the GDPR (EU Regulation 2016/679) for its own users' data, and a data processor for the data you manage via the platform (tenant information, leases, etc.). The legal bases for our processing are the performance of the contract, legitimate interest, consent (where required) and our legal obligations. No data is transferred outside the European Union without appropriate safeguards. If you have concerns, you can file a complaint with your local data protection authority (for French users: the CNIL at www.cnil.fr).
For any question about this Privacy Policy, to exercise your rights, or to report an incident, contact our Data Protection Officer (DPO) at privacy@keysy.co. You can also reach us through the regular support channels from the app.