top of page

PRIVACY POLICY

​​

Effective date: 20/05/2026

​

DOMOD SAS is committed to protecting the privacy of its users. This Privacy Policy describes how we collect, use, store and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended.

​

​

1. Data controller

 

Company name: DOMOD SAS
Registered office: 60 rue François 1er, 75008 Paris, France
Registration: RCS Paris – SIREN 101 465 441
Contact: info@domod.build
Website: https://www.domod.build/

​

In the absence of a designated Data Protection Officer (DPO), any questions relating to your personal data may be directed to: info@domod.build

​

​

2. Data we collect

 

We collect the following categories of data:

​

2.1 Identification and contact data

​

  • First and last name

  • Professional or personal email address

  • Company name (where applicable)

  • Phone number (if provided)

 

2.2 Account and usage data

 

  • Login credentials (email, encrypted password)

  • Account settings and preferences

  • Project and worksite data (entered by the user in the platform)

  • Platform usage history and activity logs

  • Internal platform communications

 

2.3 Billing and payment data

 

  • Billing details (name, billing address)

  • Payment data processed by our provider Stripe Payments Europe, Ltd. — DOMOD SAS does not store card data; this is processed directly by Stripe in accordance with PCI-DSS standards.

 

2.4 Technical data

 

  • IP address

  • Browser type and version

  • Operating system

  • Pages visited, browsing duration, click data

  • Cookies and similar technologies (see section 9)

 

2.5 Communication data

 

  • Content of exchanges with our support team (email, contact form)

  • Survey and questionnaire responses

​​

​

3. Purposes and legal bases for processing

 

Purpose - Legal basis (Art. 6 GDPR)

 

  • Account creation and management - Performance of contract (Art. 6.1.b)

  • Provision of DOMOD services (SaaS platform) - Performance of contract (Art. 6.1.b)

  • Billing and payment processing - Performance of contract (Art. 6.1.b)

  • Legal obligations (accounting, tax, AML) - Legal obligation (Art. 6.1.c)

  • Service improvement and development - Legitimate interests (Art. 6.1.f)

  • Marketing communications (with consent) - Consent (Art. 6.1.a)

  • Security and fraud prevention - Legitimate interests (Art. 6.1.f)

  • Customer support - Performance of contract / Legitimate interests

  • Aggregated and anonymised usage statistics - Legitimate interests (Art. 6.1.f)

​​​

​​

4. Recipients of data

 

Your personal data may be shared with:

​

4.1 Technical sub-processors

 

  • Stripe Payments Europe, Ltd (online payments) — 1 Grand Canal Street Lower, Dublin 2, Ireland — Stripe Privacy Policy

  • Hetzner Online GmbH (server infrastructure and data storage) — Industriestr. 25, 91710 Gunzenhausen, Germany — Hetzner Privacy Policy

 

4.2 Authorities and administrations Where required by law or court order, DOMOD SAS may be required to disclose your data to competent authorities (tax authorities, judicial authorities, supervisory authorities, etc.).


4.3 Transfers outside the EU/EEA Some of our sub-processors may process your data outside the European Union or European Economic Area. In such cases, DOMOD SAS ensures that appropriate safeguards are in place (European Commission Standard Contractual Clauses, adequacy decisions). Stripe Payments Europe, Ltd. is certified under the EU-US Data Privacy Framework. Hetzner Online GmbH is a German company and processes data exclusively within the EU, therefore no transfer outside the EU/EEA applies.

​

​

5. Data retention

 

Data category - Retention period

​

  • Active account data - Duration of the contractual relationship

  • Deleted account data - 3 years after account closure

  • Billing data and accounting records - 10 years (statutory obligation)

  • Connection logs and technical data - 12 months

  • Support and communication data - 3 years after last interaction

  • Marketing data (with consent) - Until consent withdrawn, max. 3 years without reactivation

​

​

6. Your rights

 

Under the GDPR, you have the following rights:

​

  • Right of access (Art. 15): obtain confirmation that your data is being processed and receive a copy

  • Right to rectification (Art. 16): have inaccurate or incomplete data corrected

  • Right to erasure (Art. 17): request deletion of your data ("right to be forgotten"), subject to statutory retention obligations

  • Right to restriction of processing (Art. 18): request temporary suspension of processing of your data

  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format

  • Right to object (Art. 21): object to processing based on our legitimate interests or to direct marketing

  • Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

  • Right to define posthumous instructions regarding the fate of your personal data after your death

​

To exercise your rights, please send your request to: info@domod.build

 

We will respond within one (1) month of receiving your request (extendable to three (3) months for complex or numerous requests, with prior notification).

 

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):​ www.cnil.fr – 3 Place de Fontenoy, 75007 Paris, France. You may also lodge a complaint with the supervisory authority in your country of residence.

​

​​

7. Data security

​

DOMOD SAS implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration or destruction, including:

 

  • Encryption of data in transit (TLS/HTTPS)

  • Encryption of data at rest

  • Access management and secure authentication

  • Regular backups

  • Security incident management procedures

 

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, DOMOD SAS will notify the CNIL within 72 hours and inform you without undue delay.

​​

​​

8. Minors

​​

The DOMOD platform is intended for professional users. We do not knowingly collect personal data from individuals under the age of 16. If you become aware that a minor has provided us with personal data, please contact us at info@domod.build.

​​

​​

9. Cookies and tracking technologies

​​

9.1 Strictly necessary cookies (no consent required)
Essential for the operation of the website and platform: session management, authentication, security.

​

9.2 Analytics/statistics cookies (consent required)
Help us understand how users interact with the site in order to improve the experience.

 

9.3 Marketing cookies (consent required)
Used to display relevant advertisements and track campaigns. DOMOD SAS will only place marketing cookies after obtaining your explicit consent.

​

You can manage your cookie preferences via the [cookie management banner] on our site, or through your browser settings.

​​​

​​

10. Changes to this policy

​​

DOMOD SAS reserves the right to modify this Privacy Policy at any time. In the event of material changes, you will be informed by email or by notification on the platform. The current version is permanently accessible at https://www.domod.build/privacy-policy.

​

​

11. Contact

​​

For any questions regarding this policy or the exercise of your rights:
Company name: DOMOD SAS
Registered office: 60 rue François 1er, 75008 Paris, France

bottom of page