Working version

Privacy policy

This page is drafted for product publication, but must be reviewed and validated by legal counsel before final publication.

Data collected

MYSOLEAS may collect account, identification, contact, login, service usage, payment where necessary, notification, OAuth2 application, scope, technical log and support request data.

Purposes

This data is used to create and secure accounts, provide SoleasPay, MyShup, Immoleas, MyBoost, Identity Cloud and Notifier, process requests, prevent abuse, improve services and comply with applicable obligations.

OAuth2 applications and API

Identity Cloud stores the technical information required to manage OAuth2 clients: name, redirect URIs, scopes, environment, status, activity dates and sensitive actions. Secrets must not be exposed and are displayed only at the intended moment.

Notifications and payments

Transactional messages, campaigns, delivery statuses and payment data are processed according to the service used, internal security rules and applicable legal obligations.

Retention and deletion

Data is retained for as long as necessary for the stated purposes, legal obligations, security and dispute resolution. Users may request deletion or restriction according to applicable rules.

User rights

Depending on your jurisdiction, you may request access, correction, objection, portability or deletion of your data by contacting the MYSOLEAS team.

Security

MYSOLEAS applies technical and organizational security measures: access control, logging, secret separation, HTTPS readiness, scopes, validation and limited exposure of sensitive data.

Cookies

The browser may store the following items when you visit mysoleas.com. They are used for website operation, security and your preferences. No password, JWT token or OAuth2 secret is stored in the browser by mysoleas.com.

• Symfony session cookie: technical session identifier used to keep you signed in, protect CSRF forms, manage temporary messages and secure the 2FA journey.
• mysoleas_locale cookie: language preference used only if you accept preferences or explicitly choose a language from the switcher.
• mysoleas_cookie_consent cookie: stores your consent choice for 180 days.
• No analytics, advertising or third-party tracking cookie is currently enabled. Any future measurement tool must be documented and configured according to applicable rules.

Contact

For any question: legal@mysoleas.com or support@mysoleas.com.