Privacy policy
Updated on 6 November 2026
This translation is provided for information only: in case of any discrepancy, the French version prevails.
Leasy is a long-term rental platform: find a home, apply, sign the lease, pay the rent, manage the tenancy. This page explains, in plain words, which data we use, why, for how long, with whom, and how to exercise your rights.
Who is responsible for your data
Qore Games, the simplified joint-stock company that publishes Leasy, registered office: 9 rue des Colonnes, 75002 Paris, RCS Paris 949 296 313. For any question about your data: chat@leasy.co.
The lease is made between the landlord and the tenant: for lease data, the landlord (or their agency) is also responsible for what they do with it. Leasy prepares the documents and keeps them for both parties.
The data we use
- Your account: email address, first and last name, photo, phone and address if you give them, language. You sign in with a code sent by email, or with Google or Apple.
- Your Passport, if you're looking for a home: employment, employer, income, guarantor, and only the documents the law allows (French decree no. 2015-1437). It is only shown to the landlords of the listings you apply to.
- Your listings and homes, if you rent out: address, features, energy rating, photos, rent, viewing slots.
- The tenancy: applications, viewings, lease, inventory and its photos, rent receipts, payments and payouts, deposit, notices and letters sent through the app, consents (ticked boxes, with their date).
- To receive money in Leasy, your payout account: identity, date of birth, address, IBAN and a photo of an ID document, verified once. We only keep a masked version of the IBAN.
- For landlords paid by Leasy: date of birth, tax number and amounts received, which the law requires us to report (DAC7).
- For agencies: company details, professional licence, guarantee, team.
- Messages exchanged in the app, reviews left after a tenancy, reports.
- Your notification preferences and, if you allow it on your phone, its notification token.
- Your location, only if you allow it, to show homes nearby: it is not stored.
- Technical data: IP address and sign-in logs, for security.
- Usage statistics: on the website, an anonymous audience measurement (pages viewed, referrer, device, country), never linked to your account; in your account, counts of some actions (for example a message sent or a payment confirmed), without their content.
Why, and on what legal basis
| What we do | Legal basis (GDPR, Art. 6) |
|---|---|
| Provide the service: account, search, applications, messaging, viewings, lease, inventory, payments, tenancy management | Our contract with you (terms and conditions) |
| Keep the accounts, report landlords' income (DAC7), keep leases and rent receipts | Our legal obligations |
| Keep proof that you accepted the terms: version, date, IP address, browser or app, language | Our legitimate interest in being able to prove the contract |
| Prove your electronic signatures: typed name, account, IP address, device, times, confirmation code, document fingerprint | The contract between us, and the parties' legitimate interest in being able to prove their documents |
| Protect users: scam alerts in messaging, review of reported listings and reviews, account security | Our legitimate interest in keeping the platform safe |
| Measure website audience and service usage, to improve it (statistics, errors encountered) | Our legitimate interest in improving the service; you can refuse the audience measurement from the cookie policy |
| Notify you by email (payments, lease, applications, messages) | The contract; activity and message emails can be turned off in your settings |
| Notify you on your phone | Your consent, given on the phone and withdrawable at any time |
We don't sell your data, don't do targeted advertising, and never rate tenants: no decision about you is made by automated processing.
How long we keep it
| Data | Period |
|---|---|
| Your account and profile | As long as the account exists |
| Proof that you accepted the terms | As long as the account exists, or as long as tenancy records must be kept |
| Your Passport and its documents | As long as the account exists; you can remove a document at any time |
| An unsuccessful application | 3 months after the decision (CNIL guidance) |
| Leases and their documents (inventory, guarantee, notices, amendments, signature evidence) | 5 years after the lease ends |
| Rent receipts, rent notices, deposit statements and service charge adjustments | 5 years after the lease ends |
| Accounting records (payments, payouts, Leasy fees) | 10 years after the end of the financial year |
| Reported tax information (DAC7) | 10 years after the reported year |
| Sign-in logs | 30 days at most |
| Audience and usage statistics | 25 months at most |
You can delete your account at any time from your profile, on the website or in the app. Your personal data is then erased; only the documents the law requires us to keep remain, without your profile, for the periods above.
Who can see it
- Other users, only what is useful: a listing and its reviews (with the author's first name) are public; your Passport is only shown to the landlord of a listing you apply to; the lease and its documents, to the parties to the lease; messages, to the people in the conversation.
- Our technical providers, who only act on our instructions and are bound by confidentiality: hosting of the website and data (database in the European Union, Paris region), sending emails and notifications, maps and address search, help chat, audience measurement (in the European Union). Leasy itself provides the electronic signature of leases and letters: only the signed document's fingerprint, with no personal data, goes to a time-stamping authority.
- Our payment provider, an institution authorised in the European Union: it processes payments and payouts and checks the identity of payout accounts, also under its own responsibility, for its legal obligations.
- Google or Apple, if you sign in with their account: they send us your name and email address.
- Authorities, only when the law requires it: the tax authorities for reporting landlords' income (DAC7), a court or the police on a formal request.
The list of our providers is available on request at chat@leasy.co.
Data sent outside the European Union
Some of our providers are based in the United States or process data there (for example to deliver the website, send emails and notifications, or for signing in with Google or Apple). These transfers are covered by the European Commission's adequacy decision of 10 July 2023 (EU–US Data Privacy Framework) or by the Commission's standard contractual clauses.
Cookies
The website only uses the cookies it needs to work (your sign-in session, your language, the workspace you're in) and one for an anonymous audience measurement, exempt from consent, which you can refuse in one click. No advertising cookies: nothing to accept. The details are in our cookie policy.
Your rights
- Access your data, correct it, receive a copy in a readable format (portability): "Download my data" in your profile prepares a file, and we also email you its link.
- Erase it: delete your account from your profile, or write to us.
- Object to processing based on our legitimate interest, or ask for it to be restricted.
- Withdraw your consent to phone notifications (phone settings) and turn off non-essential emails (Leasy settings).
- Give instructions on what happens to your data after your death.
- To exercise these rights: chat@leasy.co. We reply within one month. If you're not satisfied with our reply, you can complain to the CNIL, the French data protection authority (cnil.fr/fr/plaintes), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Security
Connections are encrypted (HTTPS). Documents, leases and inventory photos are kept in private storage, opened only through temporary links. Access to data is limited to what each person needs, and checked on every request.
Minors and changes
Leasy is for adults only. We update this page when the app changes; the date at the top of the page applies, and we'll let you know about any important change.