Privacy Policy

Effective date: 13/06/2026

This Privacy Policy aims to inform users of the Site about:

How their personal data is collected. Personal data means any information that can identify a user, such as their name, age, postal or email address, location, or IP address;
The rights they hold regarding their data;
Who is responsible for collecting and processing their personal data;
Who receives their personal data.

This policy supplements the Legal Notice and the Terms of Service.

Article 1 – Scope

This Privacy Policy applies to the website investycoon.com and the Investycoon mobile application.

Article 2 – Legal bases and purposes of processing

In accordance with EU Regulation 2016/679 (GDPR), all processing of personal data requires an explicit legal basis. The following bases apply to each processing activity carried out by Quadrilex:

Performance of a contract (GDPR art. 6.1.b) — creating and managing your Account, identifying you on the Platform, accessing the Services. Applies to: email address, username.
Consent (GDPR art. 6.1.a) — sending newsletters and email notifications. You may withdraw your consent at any time by unsubscribing via the link in any email or by contacting Quadrilex directly.
Legitimate interest (GDPR art. 6.1.f) — Platform security, fraud and abuse prevention, technical debugging, and processing of enquiries submitted via the contact form. Applies to: IP address, device identifier, contact form data (name, email, subject, message), and behavioural data collected by Google reCAPTCHA.

Article 3 – Personal data collected and processed

Article 3.1 – Data inventory

The personal data collected in the course of our activity is as follows:

Email address — collected at registration or via the contact form;
Username — collected at registration, may include your real name;
Name — collected via the contact form;
Enquiry content (subject and message) — collected via the contact form;
Date of birth — collected at registration to verify the minimum age requirement (13 years) and to control access to servers restricted to adults (18 and over);
IP address — collected automatically on each connection and upon submission of the contact form (by Google reCAPTCHA);
Behavioural data (mouse movements, typing cadence, browser fingerprint) — collected by Google reCAPTCHA v3 when the contact form is used, for the purpose of bot detection;
Device identifier (Device ID) — collected on Android devices only, to deliver push notifications.

Article 3.2 – Retention periods

Data is retained by Quadrilex under reasonable security conditions for the following periods:

Email address and username: retained for the duration of Account activity, then deleted within 2 years of Account closure or inactivity;
Contact form data (name, email, subject, message): retained for as long as necessary to handle the enquiry and any subsequent correspondence, then deleted within 3 years of the last interaction, in line with the standard civil limitation period under French law;
IP address: retained for 12 months for security purposes, in line with standard data protection authority guidelines;
Device identifier: retained for the duration of use of the mobile application.

Quadrilex may retain certain data beyond these periods in order to fulfil its legal or regulatory obligations.

Upon deletion of your Account, all your personal data will be deleted within 30 days, except for data whose retention is required by law.

Article 3.3 – Data hosting

The website investycoon.com and associated services are hosted by:

Hostinger International Limited
61 Lordou Vironos str.
6023 Larnaca
Cyprus (European Union)

Data is therefore hosted within the European Union.

Article 4 – Data recipients

Quadrilex does not sell or rent your personal data to third parties. However, in the course of operating the Platform, your data may be shared with the following recipients:

Other Platform users — your username is visible to all Members and anonymous visitors, including through Company pages and the property map. We strongly advise against choosing a username that contains sensitive personal information.
Hosting provider (Hostinger) — for the provision of hosting services. Hostinger acts as a data processor under the GDPR and is bound by confidentiality obligations.
Internal email infrastructure — newsletters and email notifications are sent via Quadrilex's own infrastructure (Postfix server) and managed through the InvestycoonSky platform. Your data is not shared with any third-party email provider.
Stripe (payment processor) — for Private Server subscription payments, your payment data is processed by Stripe Inc. (United States). Quadrilex does not store any banking data. This transfer outside the European Union is governed by the Standard Contractual Clauses adopted by the European Commission (Stripe DPA).
Google Firebase — if you use the Android application, your device identifier is transmitted to Firebase (Google LLC, United States) to deliver push notifications. This transfer outside the European Union is governed by the Standard Contractual Clauses adopted by the European Commission.
Google reCAPTCHA — the contact form is protected by Google reCAPTCHA v3 (Google LLC, United States). This service collects behavioural data (mouse movements, typing cadence, browser fingerprint) and the IP address to detect automated submissions (bots). This processing is based on Quadrilex's legitimate interest in securing its services. The transfer outside the European Union is governed by the Standard Contractual Clauses adopted by the European Commission. For more information: Google Privacy Policy and Terms of Service.
Competent authorities — Quadrilex may be required to share your data with judicial, administrative, or regulatory authorities upon legal request or in the event of a breach detected on the Platform.
In the event of a transfer of Quadrilex — in the context of a merger, acquisition, or full or partial transfer of Quadrilex's assets, your data may be transferred to the acquiring entity, which will be bound by this policy.

Article 5 – Minors

The Platform is accessible to users aged 13 and over. Quadrilex does not knowingly collect personal data from children under the age of 13.

Under GDPR Article 8, the age at which a minor may consent independently to data processing is set by each EU member state between 13 and 16. French law sets this threshold at 15. Users aged 13 to 14 must therefore obtain prior consent from a parent or legal guardian before creating an Account. By registering, users under 15 certify that such consent has been obtained. In the absence of a technical verification mechanism, Quadrilex relies on this declaration and on the responsibility of the legal representative.

If Quadrilex becomes aware that a user is under the age of 13, their Account and all associated personal data will be deleted without delay. Legal representatives may report such cases to: contact@quadrilex.com.

Some servers on the Platform are restricted to adult users (18 and over). Access to these servers requires a date of birth declaration at Account creation.

Article 6 – Data controller and privacy contact

Article 6.1 – Data controller

Personal data is collected by Quadrilex, a company in the process of registration, managed by Mr. Alan Bretelle.

Contact: contact@quadrilex.com

Article 6.2 – Privacy contact

Quadrilex has designated a privacy contact as the primary point of contact for any question relating to the processing of your personal data:

Alan Bretelle — alan.bretelle@quadrilex.com

If you believe, after contacting us, that your rights have not been respected, you may lodge a complaint with the competent supervisory authority. For users based in France, this is the CNIL. Users in other EU/EEA countries may contact their local data protection authority. UK users may contact the ICO.

Article 7 – Your rights

Any user whose personal data is processed may exercise the following rights under EU Regulation 2016/679 (GDPR):

Right of access, rectification, and erasure (GDPR art. 15, 16 and 17);
Right to data portability (GDPR art. 20);
Right to restriction of processing (GDPR art. 18) and right to object (GDPR art. 21);
Right not to be subject to a decision based solely on automated processing;
Right to define instructions for the use of data after death;
Right to lodge a complaint with a supervisory authority (GDPR art. 77).

To exercise your rights, please send an email to the privacy contact (see Article 6.2). To process your request, you may be asked to provide your name, email address, and Account identifier.

Visit cnil.fr or your local data protection authority's website for more information on your rights.

Article 8 – Changes to this Privacy Policy

Quadrilex reserves the right to update this Policy at any time to ensure its compliance with applicable law.

Any material changes will be notified to users by email or via a notification on the Platform, prior to taking effect. Users will be given a reasonable period to review the changes.

Changes do not apply retroactively to processing previously carried out under the version of the Policy accepted by the user.

This policy, first published on 17/09/2023, was last updated on 14/06/2026.