Privacy Policy

Kappn SAS — Last updated: April 16, 2026

Article 1 — Introduction

This Privacy Policy is intended to inform users of the kappn.ai website (hereinafter the “Site”) and the Kappn platform (hereinafter the “Platform”) about how their personal data is collected, processed, and protected by Kappn SAS, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and French Law No. 78-17 of January 6, 1978 as amended (“Informatique et Libertés”).

Article 2 — Data Controller

Company name Kappn SAS
Registered office 60 rue François 1er, 75008 Paris
RCS Paris 944 788 231
Legal representative Thomas Casaromani, Président
Personal data contact [email protected]

Article 3 — Data Collected

Kappn collects and processes the following categories of personal data:

3.1. Identification and contact data

Last name, first name, professional email address, phone number, real estate agency name, professional address, job title.

3.2. Connection and usage data

IP address, browser type, operating system, pages visited, connection dates and times, session ID, activity logs on the Platform.

3.3. Real estate property data

Property address, property photos uploaded by the User, property description, price (if provided).

3.4. Buyer profile data

When the User provides a buyer profile for video personalization: buyer’s first name, household composition (children, pets), workplace address, interests, lifestyle preferences. 3.5. Billing data Billing information (company name, address, SIRET/SIREN number, VAT), payment method (processed exclusively by Stripe; Kappn does not store any credit card numbers).
Important note: Data related to buyer profiles is used exclusively for generating personalized videos and associated narration. It is not sold or used for advertising profiling.

Article 4 — Purposes and Legal Bases

Purpose Legal basis Retention period
User account management Contract performance (Art. 6.1.b GDPR) Duration of contract + 3 years
Provision of video generation service Contract performance (Art. 6.1.b GDPR) Duration of contract + 1 year
Video personalization (buyer profile) Contract performance (Art. 6.1.b GDPR) 30 days after video generation unless explicitly retained by the User
Billing and accounting Legal obligation (Art. 6.1.c GDPR) 10 years
Commercial prospecting Legitimate interest (Art. 6.1.f GDPR) or consent 3 years after last contact
Service improvement and analytics Legitimate interest (Art. 6.1.f GDPR) 25 months (anonymized data)
Customer support Contract performance (Art. 6.1.b GDPR) Duration of contract + 2 years
Cookie management Consent (Art. 6.1.a GDPR) 13 months maximum
Legal compliance and disputes Legal obligation / legitimate interest Applicable limitation period

Article 5 — Data Recipients

Personal data may be shared with the following categories of recipients strictly to the extent necessary:

5.1. Technical processors

Processor Purpose Location
Amazon Web Services (AWS) Hosting, storage of data and videos European Union (Paris / Ireland)
Stripe Payments Europe Ltd Payment processing European Union (Dublin, Ireland)
Brevo (ex-Sendinblue) Transactional and marketing emails European Union (Paris, France)
Crisp IM SARL Live chat and customer support European Union (Nantes, France)
Google LLC (Google Analytics 4) Audience measurement and navigation analysis United States (EU-US Data Privacy Framework)
Axeptio Cookie consent management European Union (Nantes, France)

5.2. Artificial intelligence technology providers

Kappn uses third-party AI services to generate videos and voice narration. These providers process data exclusively on behalf of Kappn under Data Processing Agreements (DPA) including appropriate safeguards in accordance with Articles 28 and 46 of the GDPR. No personal data is used to train their models.

5.3. Other recipients

Kappn may disclose personal data to judicial or administrative authorities where required by law.

Article 6 — Data Transfers outside the European Union

Some processors may process personal data outside the European Union. In such cases, Kappn ensures appropriate safeguards in accordance with Chapter V of the GDPR:
  • Adequacy decision by the European Commission (e.g., EU-US Data Privacy Framework)
  • Standard Contractual Clauses (SCC)
  • Transfer Impact Assessment where necessary
The updated list of processors and safeguards is available upon request at [email protected].

Article 7 — Cookies and Similar Technologies

7.1. Types of cookies used

Type Purpose Consent Duration
Strictly necessary cookies Site operation, security, session Exempt from consent Session
Analytics cookies Navigation statistics (Google Analytics 4) Consent required 14 months
Chat cookies (Crisp) Real-time customer support Consent required 6 months
Marketing cookies (Brevo) Email campaign tracking Consent required 13 months

7.2. Cookie management

During your first visit, a consent banner (Axeptio) allows you to accept or refuse non-essential cookies. You can modify your preferences at any time by clicking on the “Manage my cookies” link available at the bottom of each page of the Site.

Article 8 — Data Security

Kappn implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including:
  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
  • Strong authentication and role-based access management
  • Regular encrypted backups
  • Continuous infrastructure monitoring and access logging
  • Staff awareness of security best practices
  • Security incident management policy with notification to the CNIL within 72 hours in case of a data breach (Art. 33 GDPR)

Article 9 — Data Subject Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:
Right Description Legal basis
Access Obtain confirmation that your data is being processed and receive a copy of it Art. 15 GDPR
Rectification Have inaccurate or incomplete data corrected Art. 16 GDPR
Erasure Request deletion of your data (“right to be forgotten”) Art. 17 GDPR
Restriction Request temporary suspension of processing Art. 18 GDPR
Portability Receive your data in a structured, machine-readable format Art. 20 GDPR
Objection Object to processing based on legitimate interest or marketing Art. 21 GDPR
Withdrawal of consent Withdraw your consent at any time (without affecting the lawfulness of prior processing) Art. 7.3 GDPR
Post-mortem directives Define instructions regarding your data after your death French Data Protection Act
To exercise these rights, contact us at: [email protected]. We will respond within a maximum of one (1) month, extendable by two (2) months in case of complex requests.
Complaint to the CNIL: If you believe that your data is not processed in compliance with regulations, you may file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

Article 10 — Data Retention

Personal data is retained only for the time strictly necessary for the purposes for which it was collected (see Article 4). Once these periods expire, the data is deleted or irreversibly anonymized. Data relating to buyer profiles (first name, household composition, professional address) is automatically deleted thirty (30) days after video generation, unless the User explicitly requests longer retention.

Article 11 — Minors

The Kappn Platform is intended for professional use (B2B). It is not intended for individuals under the age of 16. Kappn does not knowingly collect personal data from minors.

Article 12 — Policy Changes

Kappn reserves the right to modify this Privacy Policy at any time. In the event of a substantial change, registered Users will be informed by email at least fifteen (15) days before the new version comes into effect. Continued use of the Service after this date constitutes acceptance of the updated version.

Article 13 — Contact

For any questions regarding this policy or your personal data: Kappn SAS — Personal Data 60 rue François 1er, 75008 Paris Email: [email protected]
Kappn SAS — RCS Paris 944 788 231 — 60 rue François 1er, 75008 Paris Document updated on April 16, 2026