Privacy Policy

Last updated: April 2026

1. Data controller

Mierent is a SaaS platform for rental property management. It enables landlords and real estate agencies to generate, track and send monthly rent reports to property owners.

For any questions regarding this policy: contact@mierent.com.

Under the GDPR, Mierent acts in two capacities:

Data controller for data of users who register directly (agency account, billing).
Data processor for data processed by agency clients on behalf of their landlords and tenants. In this case, the agency is the data controller; any GDPR request relating to this data must be addressed directly to them.

2. Data collected

2.1 Agency account data

First name, last name, email address, encrypted password
Agency name, postal address, phone number, logo
Billing data (managed by Stripe)

2.2 Agent data (agency users)

First name, last name, professional email address, phone number
Role within the agency (administrator / standard)

2.3 Navigation data

IP address, user-agent (server logs, retained 6 months)
Encrypted session token (functional cookie, contains no personal data in plain text)

2.4 Data processed on behalf of agencies (sub-processing)

Landlords, tenants, properties, leases, accounting operations, PDF statements. This data belongs to the agency client.

3. Purposes and legal bases

Purpose	Legal basis
Service provision (account, authentication)	Contract performance
Billing and subscription management	Contract performance / legal obligation
Sending transactional emails (statements, notifications)	Contract performance
Security and fraud prevention (Turnstile)	Legitimate interest
Service improvement (analytics, if enabled)	Consent

4. Retention periods

Inactive accounts: 3 years after last activity, then deleted
Accounting data and statements: 10 years (French fiscal obligation)
Server access logs: 6 months
Payment data (Stripe): 5 years (legal obligation)
Session tokens: duration of session, deleted on logout

5. Sub-processors and transfers

Provider	Role	Location	DPA
Stripe	Online payments, billing	United States (EU standard clauses)	stripe.com/privacy
Oracle Cloud Infrastructure (OCI)	Application hosting (servers, database)	Japan (EU adequacy decision)	oracle.com/legal/privacy
Cloudflare R2	File storage (PDF statements, logos)	United States (EU-US Data Privacy Framework / EU standard clauses)	cloudflare.com GDPR
Oracle Cloud Infrastructure (OCI)	Transactional email delivery	Japan (EU adequacy decision)	oracle.com/legal/privacy
Cloudflare Turnstile	Anti-bot protection (registration)	United States (EU-US Data Privacy Framework / EU standard clauses)	cloudflare.com GDPR

6. Cookies

Cookie	Category	Purpose	Duration
Session token (mierent_*)	Necessary	Authentication — opaque encrypted token, no personal data in plain text	Session duration
GDPR consent	Necessary	Storing consent preferences	12 months
Google Analytics (_ga, _gid)	Analytics	Anonymised audience measurement (if enabled)	13 months / 24h

You can manage your cookie preferences at any time via the consent banner at the bottom of the page.

7. Your rights

Under the GDPR, you have the following rights:

Right of access — obtain a copy of your data
Right of rectification — correct inaccurate data
Right to erasure — request deletion of your data
Right to data portability — receive your data in a structured format
Right to object — object to certain processing
Right to restriction — temporarily restrict processing

To exercise these rights: contact@mierent.com

If you are an agent of an agency client, address your request directly to your agency (data controller for your professional data).

You may also lodge a complaint with your local data protection authority.

8. Contact

Email: contact@mierent.com