Privacy
Privacy policy
Last updated: 25 August 2026
What data we process, why, for how long, and what you can require of us.
This page contains information to be completed before publication. It appears in brackets.
Two roles, not to be confused
For YOUR account data (staff identity, billing, sign-in log), Hussteer is the data controller. For the data you enter into the service (your clients, your properties, your mandates), Hussteer is a processor: you remain the controller, and we process it on your behalf and on your instructions.
Data processed
- Account and agency
- Name, email, role, agency, preferences.
- Usage
- Sign-in log, sensitive actions, use of artificial-intelligence features.
- Billing
- Subscription, payments, invoices.
- Business content
- Properties, contacts, mandates, documents, appointments — entered by you.
Purposes
Running the service, maintaining your account, ensuring security, billing, and answering your requests. No data is ever resold or used for advertising.
Retention periods
- Account
- For the duration of the subscription, then deleted on closure.
- Invoices
- Ten years, accounting obligation.
- Security logs
- [TO BE COMPLETED]
- Business content
- Until you delete it, or until the account is closed.
Processors
- Application hosting
- Vercel.
- Database and files
- Supabase (European Union).
- Email delivery
- Resend.
- Payments
- Stripe.
- Artificial-intelligence models
- Anthropic and Google, through the Vercel AI Gateway.
Detailed list with hosting countries and transfer safeguards: [TO BE COMPLETED]
Artificial intelligence
Content sent to the models is used only to produce the requested answer. It is not used to train models.
Your rights
Access, rectification, erasure, portability, restriction and objection. To exercise any of these rights, write to fabrice@hussteer.com: we will reply and carry out the export or deletion requested. You may refer the matter to the CNIL in the event of a lasting disagreement.
Security
Data partitioned by agency at storage level, encryption in transit and at rest, named accounts, two-factor authentication available, daily backups.