Privacy Policy

Data controller

iRL-tech
SAS with share capital of €1,000 — R.C.S. Thonon-les-Bains 101 552 628
Registered office: 100 Route de la Place, 74160 Archamps, France
Represented by Antoine Proux, President
Email: contact@myrori.fr

Scope

This policy covers the myrori.fr website, the app.myrori.fr web application, and the Myrori — Agent immobilier mobile app (iOS and Android).

Who the service is for

Myrori is a service reserved for real-estate professionals of legal age. The service is not intended for minors, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please write to contact@myrori.fr so that we can delete it.

Data we collect

On this website (landing page)

• Email — If you join the waitlist. Used only to notify you of the launch.

In the web application

• LinkedIn data — Profile information (name, photo, headline, member identifier) and statistics for your own posts, obtained through the LinkedIn APIs and with your consent. Used to personalize your workspace and to publish on your behalf after your approval. See the LinkedIn integration section below.
• Interview answers — Your answers to the AI interview, transcribed from your voice where applicable. Used to generate your voice profile and strategy.
• Generated content — Posts, notes, proposals, story bank. Stored for your exclusive use.
• Usage data — Interactions with the app (edits, publications, conversations with the orb). Used to improve AI personalization.
• Billing data — If you subscribe to a paid plan: email, plan, status. Payment card information is never collected by Myrori; it is handled exclusively by Stripe.

In the mobile application

• Voice notes and transcriptions — Your voice captured through the microphone, transcribed to text. Audio is processed in real time and is not retained after transcription, unless you choose to save it.
• Property photos — Taken in the app via the camera or chosen from your photo library. Stored to attach them to your property records.
• Photo metadata (EXIF) — Geolocation and capture date, if you enable the location permission. Used only to attach the photo to the correct property.
• Contacts, calendar, property records — Entered manually by you. Stored locally on the device and synced with your Myrori account.
• Advertising identifier — Not collected. Myrori uses no advertising trackers.

LinkedIn integration

Myrori interfaces with LinkedIn only after you connect your account through LinkedIn OAuth and grant your explicit consent. You remain in control at all times.

Data obtained through the LinkedIn APIs

• Profile information — Name, photo, headline, member identifier, used to personalize your Myrori workspace.
• Statistics for your own posts — Aggregate metrics (impressions, members reached, reactions, comments, reshares) for the posts you have published through Myrori, so we can show you what resonates in your neighborhood. These statistics relate exclusively to your own posts.

What Myrori does

• Publishes on your behalf to your own LinkedIn profile, only after you manually approve each post. No automatic or scheduled publishing without your explicit confirmation, post by post.
• Shows you the statistics for your own posts, for your personal use.

What Myrori does not do

• No advertising or sales-prospecting use of LinkedIn data.
• No selling, renting, or sharing of this data with third parties.
• No training of artificial-intelligence models on this data.
• No mass extraction (scraping) and no automated interactions (no automated likes, comments, or invitations).
• No management of third-party accounts or company pages: you act solely on your own profile and your own content.

Compliance, revocation, and deletion

• The integration complies with the LinkedIn API Terms of Use, the additional terms of the LinkedIn Marketing API Program, and the applicable API restrictions.
• You can revoke LinkedIn access at any time, from your LinkedIn settings or your Myrori account. Revocation immediately stops all access.
• Data obtained through the LinkedIn APIs is securely deleted when you delete your account, upon your request, or if LinkedIn requires it, as promptly as possible.
• Data exchanged with LinkedIn is exchanged with LinkedIn Ireland Unlimited Company / Microsoft, under LinkedIn's own data-protection commitments.

Mobile permissions

• Microphone — To record your voice notes and enrich your voice profile.
• Camera — To photograph properties and capture documents (mandate, sale agreement).
• Photos — To choose existing images to attach to a property.
• Location — Optional. Used only to geotag photos taken in the field. No background tracking.
• Notifications — To remind you of calendar appointments and important actions. Can be disabled in system settings.

Purposes of processing

• Provide and improve the Myrori services (web and mobile)
• Personalize content generation (voice profile, story bank, archetype)
• Let you manage your activity as an agent (calendar, contacts, properties, notes)
• Manage your subscription and billing
• Communicate about the launch and updates

Legal basis

Processing is based on your consent (voluntary sign-up, enabling mobile permissions) and the performance of the contract (provision of the Myrori service after subscription).

Hosting & subprocessors

• Supabase (EU, Ireland) — Database, authentication, storage of photos and files
• Vercel (US) — Hosting of the myrori.fr landing page
• Fly.io (EU, Paris) — Hosting of the app.myrori.fr web application and the voice proxy
• Anthropic (US) — AI processing (Claude models). Your data is not used to train the models. API logs may be retained by Anthropic for up to 30 days for abuse-prevention purposes.
• Deepgram (US) — Real-time speech-to-text transcription. Audio is not retained after transcription.
• ElevenLabs (US) — Text-to-speech synthesis using generic voices. No cloning of your voice is performed.
• Stripe (EU, Ireland) — Payment and subscription management
• Apple and Google (US) — Distribution of the mobile app via the App Store and Google Play

Transfers outside the European Union

Some subprocessors (Anthropic, Deepgram, ElevenLabs, Vercel, Apple, Google) process data in the United States. These transfers are governed by the European Commission's standard contractual clauses and the Data Privacy Framework where applicable. No data is sold to third parties.

Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of communications with TLS 1.2+ across all exchanges (website, web app, mobile app, API)
• Encryption at rest of databases and file storage at Supabase
• Authentication delegated to LinkedIn OAuth — Myrori stores no passwords
• Access to production data restricted to authorized personnel and logged
• Regular, encrypted backups of the database
• Continuous monitoring of dependencies and vulnerabilities

In the event of a data breach likely to create a risk to your rights and freedoms, we will notify you and inform the CNIL within 72 hours, in accordance with the GDPR.

Retention periods

• Waitlist email: until launch, then deleted unless you create an account
• Account data: as long as your account is active
• Generated content, contacts, properties, notes: deleted when you delete your account
• Raw transcribed audio: not retained (streaming transcription, audio is discarded immediately)
• Photos: kept as long as the associated property exists, or until manually deleted
• Billing data: 10 years (legal accounting obligation)
• Technical logs: 12 months maximum

Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, restriction, and objection to the processing of your data. You may also set directives regarding the fate of your data after your death.

To exercise your rights: contact@myrori.fr

If you disagree, you may lodge a complaint with the French data protection authority, the CNIL (cnil.fr).