Privacy policy

In two sentences

Meublé keeps what it needs to keep your accounts, on a server in Germany, and nothing else. No advertising trackers, no selling of data, no profiling; you can export everything and delete everything yourself.

What we collect

• Account: name, e-mail address, password (stored hashed with bcrypt), two-factor authentication secret (encrypted), recovery codes (hashed), login dates.
• File: the landlord’s tax identity (name, address, SIREN/SIRET, SIE business tax office), properties, loans, tax regime, household settings for the simulator (tax shares, tax bracket).
• Accounts: entries, fixed assets, and the documents you upload (invoices, statements, platform exports, tax notices), with their content as read by the application.
• Technical: server logs (IP address, pages requested, timestamp), kept for 30 days for security.

Why, and on what legal basis

To provide the service you asked for (contract): keeping your accounts, producing your closing documents, sending you the e-mails you need (address verification, forgotten password, due dates). For the security of the service (legitimate interest): technical logs, account protection. For our legal obligations: subscription invoices kept for ten years.

Where, and with whom

• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: hosting of the website, the application, the database and the documents, on servers in Falkenstein (Germany). Data in the European Union.
• Brevo (Sendinblue SAS, Paris): sending transactional e-mails. Receives only your address and the content of the message.
• Payment provider (Stripe, for subscriptions): receives your card details, which we never see, and your e-mail address for the invoice.

No data is sent to a third-party artificial intelligence service. Documents are read on our servers.

How long

For as long as your account exists. When you delete your account, files, entries and documents are erased immediately, and backups within 30 days. Subscription invoices are kept for ten years (accounting obligation). Technical logs, 30 days.

Your rights

Access, correction, erasure, portability, restriction and objection, under the conditions of the GDPR. The simplest way: the My account page lets you change your details, export your FEC and delete your account. For anything else, write to contact@majally.com; we reply within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr).

Cookies

Only cookies needed for the service or set at your request, all exempt from consent: meuble_session (session, 30 days), meuble_2fa (two-factor authentication in progress, 10 minutes), meuble_lang (the language you chose with the FR/EN switch, one year), and in the application two display preferences (meuble_nav, meuble_hint). No audience measurement or advertising cookies.

Security

Encrypted connections (HTTPS), hashed passwords, two-factor secrets encrypted at rest, database access limited to the application, encrypted backups. If a data breach affects you, we will tell you within 72 hours.