Legal
Privacy policy
Last update: January 1, 2025
1. Data controller
Hello Archi SAS, with registered office at 18 Rue Ernest Guillier, 24000 Périgueux, France, is the controller of your personal data. For any question regarding the protection of your data, you can contact us at: dpo@hello-archi.com
2. Data collected
We collect the following data: identification information (last name, first name, email, phone), project data (description, location, budget), browsing data (cookies, logs), payment data (processed by our PCI-DSS certified providers).
3. Processing purposes
Your data is used to: manage your account and projects, match with architects, process secure payments, send you project-related communications, improve our services and prevent fraud.
4. Legal basis
Processing of your data is based on: contract performance (account, project, payment management), your consent (marketing communications), our legitimate interest (security, service improvement), compliance with legal obligations.
5. Data retention
Your data is kept for the period necessary for the purpose: active account data — duration of contract + 3 years, billing data — 10 years (legal obligation), browsing data — 13 months maximum.
6. Your rights
Under GDPR, you have the following rights: access, rectification, erasure, portability, objection, restriction of processing. To exercise these rights, contact us at dpo@hello-archi.com or by mail to our address. You may also lodge a complaint with the CNIL (www.cnil.fr).
7. Cookies
We use cookies necessary for the site, analytics cookies (with your consent) and preference cookies. You can manage your preferences via the cookie banner displayed on your first visit.
8. Data sharing
Your data is never sold. It may be shared with architects as part of matching, our technical providers (hosting, payment, messaging) under GDPR, and competent authorities in case of legal obligation.
9. Notifications on your device
If you enable notifications from your settings, your browser sends us a technical subscription address and two encryption keys, specific to that device and browser. We store these, the activation date and the device type, solely to send you notifications related to your activity on the platform: message received, project invitation, quote to sign, appointment confirmed or cancelled. These notifications never contain a name, an amount or an excerpt of content. The legal basis is your consent, given by enabling the toggle and then accepting your browser's prompt. You may withdraw it at any time, through the same toggle or your browser settings: the subscription is then deleted. It is also deleted automatically if your browser tells us it is no longer valid. This data is never used for commercial purposes and is not shared with any third party, other than your own browser's delivery service, which is required for routing.