Privacy notice

Last updated 1 September 2026

1. Controller

NORDLINE LABS, SASU, 11 boulevard Suchet, 75016 Paris, France, RCS Paris 109 428 235, publishes the site and the Movi platform. It is the controller of the processing described here. Contact: contact@movi.immo — +33 6 76 09 62 47.

2. Data, purposes and retention

Data	Why	Legal basis	Retention
Email (and name, if you give it) for the waitlist; messages you send us (contact emails, support requests)	To inform you and reply to you	Legitimate interest in answering, or steps taken before a contract	Waitlist email: until you unsubscribe or, failing that, 3 years after the last contact. Messages: 3 years from the last contact
Account (including the email address of your Google account, if you sign in with Google)	To provide the account	Performance of the contract	Deleted within 30 days of a deletion request, subject to legal retention obligations
Order (property concerned, slot, report delivered), payment processed by Stripe (Nordline does not store the full card number), related emails	To perform the order and deliver the report	Performance of the contract; accounting and tax obligations	Orders, invoices and accounting records: 10 years (French Commercial Code art. L.123-22)
Boxes ticked at the order (see below)	To prove your requests	Legal obligation and legitimate interest in keeping proof	As long as needed to prove consent, then deleted
Site traffic statistics (section 4)	To measure the site’s audience	Legitimate interest	See section 4
Messages to the companion (coming soon)	To provide the service; to improve and train our AI models (section 3)	Performance of the contract; training: legitimate interest, with a right to object	Chat history deleted within 30 days of a deletion request
Technical logs	Security, fraud prevention	Legitimate interest or legal obligation	A limited period, proportionate to that use
Visit Partners: identity, contact details, SIRET, insurance certificate, missions, payments	To manage the Partner contract	Performance of the contract; accounting and tax obligations	For the duration of the relationship, then for the time required by accounting and evidence obligations

Ticked boxes. When a Visit slot falls within the 14-day withdrawal period, you tick two boxes before payment (French Consumer Code art. L.221-25 and L.221-28 1°). The same applies if the slot is later moved into that period. We record the order number, the box and its state, the text shown (version and language), the date and time in Coordinated Universal Time (UTC), the account identifier and, only where our security logs already record it, the IP address. No other data is collected for this purpose.

Visit reports. The Partner collects the photos and observations in the report. Nordline processes them to deliver them to you. A report may show a home that belongs to, or is occupied by, someone else. It describes the home, not the people. The owner, agency or occupant may exercise their rights (access, rectification, erasure, objection) at contact@movi.immo.

Account and order data are required: without them, we cannot provide the service. No decision about you is based solely on automated processing.

3. Search companion (coming soon)

The search companion is coming soon. It is an artificial-intelligence system: you will be interacting with an AI, not with a person.

We will process your messages, your criteria, the listings you share and the generated answers to provide the service (performance of the contract). These answers will not be a decision made about you (Terms of Use, section 3).

Model training. By default, your conversations may be used to improve and train our AI models, on the basis of our legitimate interest (GDPR art. 6(1)(f)). Before training, the details that identify you will be removed. Sensitive data (health, etc., GDPR art. 9) will never be used for training. You will be told at your first chat with the companion. You may object at any time, with the toggle in your settings or by writing to contact@movi.immo.

The chat history is deleted within 30 days of a deletion request. Do not put sensitive data in the chat (health, political or religious opinions, etc.), or data about other people that is not needed for your search.

4. Cookies, audience measurement and error tracking

The site uses only cookies that are strictly necessary for it to work (for example, security). Your language choice is stored in your browser (“localStorage”). This storage is strictly necessary for the service you ask for and does not require consent (art. 82 of the French Data Protection Act). We do not use advertising cookies and do not send marketing.

Audience measurement. The site uses Vercel Web Analytics (Vercel Inc., United States) to produce aggregated traffic statistics. According to Vercel, this tool sets no cookie and does not identify you: each visit is linked to a hash calculated from the request, which is discarded after 24 hours. For each page view, the following are recorded: date and time, the page viewed, the referring page, approximate country and city, device type, operating system and browser. Vercel guarantees that these statistics are kept for the reporting period of our plan (1 to 24 months depending on the plan) and may keep them longer. Legal basis: our legitimate interest in measuring the site’s audience. You may object by writing to contact@movi.immo, or from the site footer (“Opt out of analytics”). That footer control stores a cookie for 13 months and stops analytics events.

Error tracking. The site and the app use Sentry (Functional Software, Inc., United States) to detect technical errors and keep the service stable. An error report contains technical information (page, browser, operating system, error message). Sentry is used only for error tracking: no session replay and no cookies. Legal basis: our legitimate interest in running a stable service. You may object by writing to contact@movi.immo.

5. Service providers

Provider	Role
Vercel Inc. (United States)	Hosting of the site (execution region: Paris, cdg1) and audience measurement (Vercel Web Analytics, section 4)
Render Services, Inc. (United States)	The platform’s application server (API), in the Frankfurt region (Germany): account and order data
Supabase (Supabase Pte. Ltd, Singapore)	Authentication and database (account, orders, ticked boxes)
Google (sign-in)	“Continue with Google”: Google verifies your identity and sends us the email of your Google account, which it manages under its own rules
Stripe	Payment. Stripe collects payments for Nordline. It does not handle your rights under this notice
Resend (Plus Five Five, Inc., United States)	Sending emails relating to accounts and orders (email address, message content)
Sentry (Functional Software, Inc., United States)	Error tracking and app stability, with no session replay and no cookies (section 4)
Google (Workspace)	Nordline’s email and internal tools

These providers act on Nordline’s instructions, except Google for your Google account. For Render, Supabase, Stripe and Resend, the data processing agreement (DPA) is part of the provider’s terms. Several providers are established outside the European Union (United States, Singapore). Transfers are covered by the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework, depending on the provider.

6. Your rights

You may ask for access, rectification, erasure, restriction, objection and, where it applies, portability. You may withdraw a consent at any time. You may also set instructions on what happens to your data after your death.

Write to contact@movi.immo. We reply within one month of receiving your request. This period may be extended by two months if the request is complex or if there are many requests; we then tell you so within the first month (GDPR art. 12(3)).

You may lodge a complaint with the supervisory authority of the Member State of your habitual residence, your place of work or the place of the alleged infringement (GDPR art. 77). In France, this is the CNIL: https://www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.