New — your tenants can now reach you by email, WhatsApp, or SMS. Everything lands in one place.Learn more →
Colively
FRENNL
Security & data

Your tenants write to you in confidence. Here is exactly what we do with their messages.

Not a compliance page written for lawyers: who reads what, where it is stored, and what will never leave Europe.

Scope

What Colively reads. And what it doesn't.

Colively does not plug into your agency's mailbox or phone. Your organisation gets a dedicated email address and phone number (email, WhatsApp, SMS), and we only read what arrives there: the tenant's message, their photos, the contractor's quotes and invoices.

Your other emails, your contracts, your accounting, your exchanges with landlords: we simply have no access to them.

Artificial intelligence

European AI, end to end.

Your tenants' messages — email, WhatsApp, or SMS — are read by Mistral, an open source AI model, running on Scaleway, a French cloud provider, in a Paris datacenter.

In practice

No data leaves the European Union.

AI processing happens in France, not on an American cloud. The application and your case files are also hosted at Scaleway.

Your messages never train a model.

Scaleway contractually commits to never collecting, reading, or reusing the content processed by its APIs. And we don't use them to train anything either.

An open model, not a black box.

Mistral is an open source model: how it works is publicly documented, and we don't depend on the shifting terms of a tech giant.

Human validation

AI proposes. You decide.

AI reads, structures, and prepares the case. It never contacts a contractor, never approves a quote, never commits your agency without a manager having clicked.
No automated decision produces legal effects for your tenants (Article 22 GDPR). And every case keeps a full audit trail: who approved what, when, based on which message.
Hosting

Hosting and sub-processors.

Application and data hosted at Scaleway, in the European Union.
All our sub-processors are established in the EU or provide adequate safeguards under GDPR. No transfer outside the EU/EEA without appropriate safeguards.
Our visit statistics use Plausible, self-hosted in Europe, cookieless. No browsing data goes to any third party.
Data encrypted in transit.
GDPR

Your obligations as a manager, covered.

You are the data controller for your tenants' data. Colively acts as a processor, and we equip you to keep it simple:

DPA (data processing agreement, Art. 28 GDPR) ready to sign on request.
A ready-to-copy description for your record of processing activities.
A standard information paragraph to include in your communications to tenants.
Controlled retention: case data is kept for the duration of the contract, then 5 years (legal obligations), and deleted on request at termination.
Tenant rights: access, rectification, erasure, portability, objection. One request to privacy@colively.app, answered within 30 days.

Supervisory authority: Data Protection Authority (APD), Belgium.

Our commitments

Three simple promises.

Your data does not leave the European Union.

AI processing included.

Your messages will never train an AI model.

Not ours, not a third party's.

No action towards a tenant or a contractor without human validation.

Frequently asked questions about security and data

No. Your organisation has a dedicated email address and phone number (WhatsApp and SMS included) and we only process the messages that arrive there (or that you forward to us). Your agency mailbox and phone stay yours.
Ready to stop chasing contractors?

Try it on your own requests. Free, no credit card.

Forward a real tenant message — email, WhatsApp, or SMS — and watch what it becomes. Your first cases are on us — judge the result before you pay.

Start for free →See how it works