Skip to main content

Privacy Policy

Last updated: October 13, 2026

1. Introduction

This Privacy Policy describes how Fourmi Un SAS, a French simplified joint-stock company (société par actions simplifiée), collects, uses, stores and protects your personal data when you use the Hello Chantier platform, available at hellochantier.com. It applies to homeowners, construction professionals and website visitors, as well as to businesses whose listing appears in the directory based on public data. We are committed to respecting our users' privacy and to handling their data with the utmost care.

2. Data Controller

The data controller for your personal data is Fourmi Un SAS. For any questions regarding the protection of your data or to exercise your rights, you may contact us at the following address: communication@hellochantier.com. As the data controller, Fourmi Un SAS determines the purposes and means of processing your personal data, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

3. Data Collected

When you use the Hello Chantier platform, we collect the following categories of personal data: identification data (last name, first name, email address, phone number) when you create an account or submit a work request; professional data (company name, SIRET number, qualifications, service area) for construction professionals; data relating to your projects (description of the work, photos, documents, quotes, invoices, progress reports, messages) that you share on the platform; professionals' private site notes; voice recordings and their transcripts when you use voice notes (see section 7); connection and browsing data (IP address, browser type, pages viewed, timestamps) collected automatically when you use the service; payment data for subscribed professionals (processed by our provider Stripe, without us having access to your full banking details); and, for the directory, public data from INSEE's SIRENE register (see section 8).

4. Processing Purposes

Your personal data is processed for the following purposes: creating and managing your user account; connecting homeowners with construction professionals; managing quotes, invoices and site follow-up; verifying your phone number; sending notifications about your account activity (emails, text messages, in-app notifications); providing artificial intelligence assistance when you use the relevant features (see section 6); transcribing voice notes; building and publishing the directory of construction professionals; managing professionals' paid subscriptions; sending marketing communications if you have consented to them; audience measurement, including masked recording of your navigation on the project request form and the directory search, if you have consented to it; detecting and fixing technical errors; preventing fraud and securing the platform; and complying with our legal and regulatory obligations.

5. Legal Basis for Processing

The processing of your personal data is based on the following legal bases, in accordance with Article 6 of the GDPR: the performance of the contract between us when you use our services (account creation, project management, connecting parties, professional subscriptions, notifications, and the artificial intelligence and transcription features you use); your consent, for audience measurement, non-essential cookies and marketing communications; our legitimate interest, for publishing the directory from public SIRENE data, processing third-party data contained in documents imported by a professional, improving our services, monitoring technical errors, preventing fraud and securing the platform; and compliance with our legal obligations, in particular regarding invoicing, taxation and data retention. You may withdraw your consent at any time and object to processing based on our legitimate interest, as described in section 13.

6. Artificial Intelligence Features

Some Hello Chantier features rely on the Claude artificial intelligence models provided by Anthropic PBC, a company based in the United States. The necessary data is sent to Anthropic solely to produce the requested response. Under the commercial terms that apply to its API, Anthropic does not use data sent through it to train its models. Audio files are never sent to Anthropic: only text transcripts may be.

The features concerned and the data sent are as follows. Work request analysis: when a request is sent to professionals, its description and the main trade indicated are analysed to identify the trades required and to qualify the request (indicative budget, complexity, urgency). Progress report analysis: when you submit a report, its photos and their captions, the written note, the voice note transcript and the list of the project's work packages, tasks and rooms are analysed, without the names of the people assigned to the tasks. Task suggestions (professionals): the project description, the lines and amounts of the relevant quotes, the planned dates, the existing schedule, the brief typed by the professional and, unless they turn this option off, their private site notes, including the transcripts of their voice notes. Draft quotes (professionals): the site description or the professional's brief, their private site notes, their quote history, their templates and the data extracted from their documents; client information is reduced to a display name and the site's city. Document extraction (professionals): the quotes and invoices the professional imports (PDF files or images), which may contain data about their clients, to feed their own draft quotes. Company presentation (professional sign-up): the company name, trading name, trades, head-office city, service départements, founding year and specialties described by the professional.

Nothing applies without your approval: task suggestions, draft quotes, company presentations and proposals from progress reports are shown to you for review and only change your project, your quotes or your listing once you approve them. A proposal from a progress report cannot validate a task on behalf of the people concerned. Only the work request analysis is used without a review step: it serves solely to route the request to professionals in the relevant trades and, if it fails, the platform falls back to keyword matching.

Apart from the work request analysis, these features only run when you use them. For professionals, access depends on their subscription plan. Legal basis: performance of the contract for the features you use and for connecting parties; our legitimate interest in providing the service requested by the professional for their clients' data contained in the documents they import. Transfers to the United States are safeguarded as described in section 10.

7. Voice Notes and Transcription

You can record voice notes in two places: in a site progress report and, for professionals, in their private site notes. Only what you choose to record is kept. Audio files are stored with our provider Scaleway, in France (Paris region).

Transcription is performed by Scaleway's artificial intelligence service (Scaleway Generative APIs), to which the audio file is sent. For professionals' site notes, transcription is reserved for the Pro IA plan: without it, the voice note is kept without being transcribed. For progress reports, the voice note is transcribed when the report is analysed. The transcript is saved with the note or report it belongs to.

Audio files are not deleted after transcription. A progress report's voice note is kept with the report, among the project files, and remains accessible to the project's participants, like the photos. Voice notes in site notes are private: they are visible only to the professional's company, never to their client, and are kept until the professional deletes the voice note or the note that contains it. When the professional's account deletion takes effect, their site notes are deleted, together with their audio files. A progress report's voice note, however, stays attached to the project like the other project files, including after its author's account is deleted.

8. Directory and Public SIRENE Data

The Hello Chantier directory shows listings of construction businesses, including businesses that are not registered on the platform. These unclaimed listings are built from public data in the SIRENE register, published as open data by INSEE: business name, SIREN and SIRET numbers, establishment address, main activity, legal form, headcount bracket and creation date. For a sole proprietorship, this data includes the entrepreneur's last and first names and is therefore personal data. Businesses that INSEE marks as partially disclosed (diffusion partielle) are excluded from the import.

This processing is based on our legitimate interest in offering homeowners a directory of construction professionals built from data that has been made public.

If you are concerned, you can claim your business's listing from the listing itself ("Is this your business? Claim this listing") in order to complete and manage it. You can also object to its publication and request its removal by writing to communication@hellochantier.com, stating the SIRET number concerned. You also have the other rights described in section 13.

9. Data Sharing

Your personal data may be shared with the following recipients: other users of the platform, as part of connecting parties and site follow-up (for example, a professional accesses a homeowner's project information and vice versa); our technical subprocessors, who help operate the platform and are listed in section 10; and the competent authorities, when required by law. We never sell your personal data to third parties. Our subprocessors process your data only on our instructions. Our search engine (Meilisearch) runs on our own infrastructure, without any third-party provider.

The platform and its database are hosted in the European Union. Some subprocessors (Anthropic, Resend, Twilio and, in part, Stripe) may process data in the United States: these transfers are covered by the safeguards stated for each of them in section 10.

10. Subprocessors

The list below shows the providers that process personal data on our behalf. For each one, it states the purpose, the data concerned, where it is processed, the safeguard covering any transfer outside the European Union, the legal basis and the retention period where known.

  • OVH SAS — hosting provider

    Purpose
    Hosting of the application servers and the database.
    Data concerned
    All platform data.
    Processing location
    European Union.
    Transfer safeguard
    No transfer outside the European Union.
    Legal basis
    Performance of the contract.
    Retention
    According to the periods stated in section 11.
  • Scaleway SAS

    Purpose
    File storage (photos, documents, voice notes) and voice note transcription (Scaleway Generative APIs).
    Data concerned
    Files you upload or record; audio files sent for transcription.
    Processing location
    France (storage in the Paris region).
    Transfer safeguard
    No transfer outside the European Union.
    Legal basis
    Performance of the contract.
    Retention
    Files: for as long as they are kept on the platform (section 11). Transcription: Scaleway applies a zero data retention policy to the content it receives; only a request that caused an abnormal error or abuse may be kept for up to 2 weeks for investigation, and anonymised usage data (timestamps, volumes) for at most 6 months.
  • Anthropic PBC

    Purpose
    Artificial intelligence features (section 6).
    Data concerned
    Depending on the feature: project descriptions, photos, notes, transcripts, quote items, documents imported by professionals.
    Processing location
    United States.
    Transfer safeguard
    European Commission standard contractual clauses.
    Legal basis
    Performance of the contract; legitimate interest for third-party data contained in imported documents.
    Retention
    Inputs and outputs deleted by Anthropic within 30 days; up to 2 years if content is flagged as violating its usage policy. Not used to train its models.
  • Resend, Inc.

    Purpose
    Sending emails (notifications, account, quotes) and managing newsletter sign-ups.
    Data concerned
    Email address, name, email content, delivery information.
    Processing location
    United States.
    Transfer safeguard
    European Commission standard contractual clauses.
    Legal basis
    Performance of the contract; consent for the newsletter.
    Retention
    Email content and delivery history: 30 days. Newsletter subscription: until you unsubscribe.
  • Twilio Inc.

    Purpose
    Verifying your phone number by text message and sending notification text messages.
    Data concerned
    Phone number, text message content.
    Processing location
    United States.
    Transfer safeguard
    European Commission standard contractual clauses.
    Legal basis
    Performance of the contract.
    Retention
    Text messages: history available for 13 months (400 days) after sending, then kept in Twilio's storage until deleted; we do not currently delete it. Phone number verification: Twilio does not publish a retention period.
  • Stripe

    Purpose
    Payment and management of professionals' subscriptions.
    Data concerned
    Name, email address, billing and payment data. Card details are entered directly with Stripe and are not shared with us.
    Processing location
    European Union (Ireland) and United States.
    Transfer safeguard
    European Commission standard contractual clauses.
    Legal basis
    Performance of the contract; legal obligations.
    Retention
    For the whole subscription, then at least 5 years after the relationship ends: Stripe does not publish a specific period, but it is bound by this legal minimum under EU anti-money-laundering rules (Article L561-12 of the French Monetary and Financial Code). Our subscription invoices are kept for 10 years (Article L123-22 of the French Commercial Code).
  • PostHog — EU hosting

    Purpose
    Audience measurement, in-browser error detection and, on the project request form and the directory search only, masked recording of your navigation; only with your consent.
    Data concerned
    Pages viewed, actions on the site, technical browser information; account identifier if you are signed in, without your email address or name; session recordings in which all displayed text and all input are masked before sending.
    Processing location
    European Union.
    Transfer safeguard
    Data hosted in the European Union.
    Legal basis
    Consent.
    Retention
    Audience measurement events: 1 year. Session recordings: 30 days. No new data is collected after you withdraw your consent.
  • GlitchTip — error monitoring

    Purpose
    Detecting and fixing technical errors in the application.
    Data concerned
    Technical error reports (page concerned, browser, error context). Authentication headers and cookies are removed before sending.
    Processing location
    Dedicated Hello Chantier instance, operated on our behalf.
    Transfer safeguard
    Technical data minimised before sending.
    Legal basis
    Legitimate interest (security and proper functioning of the platform).
    Retention
    Error reports: 30 days.

11. Data Retention

Your personal data is kept for as long as necessary for the purposes for which it was collected: your account data is kept for as long as you are registered; when you request the deletion of your account, it takes effect after a 30-day period during which you can cancel it; transaction data (quotes, invoices) is kept for 10 years in accordance with legal accounting obligations; project files, including the photos and voice notes of progress reports, are kept with the project; voice notes in site notes are kept until the professional deletes them or their account deletion takes effect; transcripts are kept with the note or report they belong to; connection data (logs) is kept for 12 months in accordance with applicable regulations; and the retention periods specific to our subprocessors are stated in section 10 where known. Cookies expire according to the periods set out in our Cookie Policy.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS) and at rest, strict access controls and secure authentication, regular backups, continuous infrastructure monitoring, and periodic security audits. Despite these measures, no data transmission or storage system can be guaranteed to be completely secure. In the event of a data breach likely to pose a risk to your rights and freedoms, we will inform you as soon as possible in accordance with our legal obligations.

13. Your Rights

In accordance with the GDPR and French data protection law, you have the following rights regarding your personal data: the right of access, which allows you to obtain confirmation that your data is being processed and to obtain a copy; the right to rectification, which allows you to request the correction of inaccurate or incomplete data; the right to erasure ("right to be forgotten"), which allows you to request the deletion of your data under certain conditions; the right to restriction of processing, which allows you to request the suspension of the processing of your data; the right to data portability, which allows you to receive your data in a structured and machine-readable format; the right to object, which allows you to object to the processing of your data on legitimate grounds, including the publication of a directory listing built from SIRENE data; and the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent carried out before such withdrawal. You can exercise your right to data portability yourself, directly from your account: go to Settings → Account to download a copy of your personal data in a structured, machine-readable format (JSON). To exercise your other rights, send your request to communication@hellochantier.com. We are committed to responding to your request within one month. In the event of a dispute, you have the option to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.

14. Cookies

The Hello Chantier platform uses cookies and similar technologies. Strictly necessary trackers (authentication session, language preference, record of your consent choices) are essential for the site to work and cannot be disabled. Audience measurement, performed with PostHog and hosted in the European Union, is optional and disabled by default: it is only enabled with your consent. On the project request form (/demande-projet) and the directory search (/annuaire/recherche) only, it includes session recording: a reconstruction of your navigation (pages, clicks, scrolling) in which all displayed text and all input are masked before sending, without recording the content of network requests. No other page, in particular your signed-in area, is recorded. Hello Chantier does not set any advertising cookies. You can change your choices at any time by clicking "Manage cookies" at the bottom of each page. The trackers used are detailed in our Cookie Policy, available from the page footer.

15. Protection of Minors

The Hello Chantier platform is intended for persons aged 18 and over. We do not knowingly collect personal data from minors. If we discover that data from a minor has been inadvertently collected, we will delete it as soon as possible. If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us at communication@hellochantier.com.

16. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time, particularly to comply with changes in applicable regulations or to reflect changes in our practices. In the event of a substantial modification, you will be notified by email or by notification in the application at least 15 days before the new version takes effect. The date of the last update is indicated at the top of this page. Continued use of the platform after the effective date of the new policy constitutes acceptance thereof.

17. Contact Us

For any questions regarding this Privacy Policy, or to exercise your rights over your personal data, you may contact Fourmi Un SAS at the following address: communication@hellochantier.com. We are committed to responding to your requests within a reasonable timeframe. Our team is available Monday through Friday to answer all of your questions regarding the protection of your data on the Hello Chantier platform.