Roles and responsibilities
For business data processed in the CRM — client, prospect, property, listing, deal and file data — the Heumix customer, agency or professional, is the controller. Heumix acts as processor, under the customer’s documented instructions and the applicable contractual framework.
Heumix acts as controller for its own processing: user accounts, contractual relationship, security, support, billing and technical operation of the service.
Data that may be processed
Depending on the customer configuration and use, Heumix may process data relating to contacts, prospects, buyers, properties, deals, listings, viewings, conversations, emails, calendars, documents, migrated data and derived data needed to operate the CRM.
Connected services
Gmail, Outlook and Calendar connections are activated voluntarily by the customer. Their availability depends on the configuration and permissions granted. Their exact scope is confirmed during go-live.
Artificial intelligence functions
Some functions may use OpenAI for extraction, classification, summaries or recommendations. Heumix identifies what comes from a source, what has been inferred and what still needs confirmation. The professional verifies information before any binding decision.
AI-generated content remains an aid: it does not replace the professional’s judgement, validation or decision. Search quality always depends on the sources that are available and how current they are.
Documents and migration
Migration keeps control records so the customer can verify what was imported and what still needs review. These records do not legally certify the accuracy of data supplied by the customer.
A document being present in Heumix, its text being extracted or its retention in a file does not prove its originality, integrity or legal validity.
Infrastructure and transfers
Primary infrastructure in Europe. Heumix’s main application data is hosted in the European Union. Some technical providers may nevertheless process data outside the European Economic Area under applicable safeguards and transfer mechanisms.
Rights and contact
A person whose data appears in an agency CRM should generally exercise their rights with that agency, the controller. For processing for which Heumix is controller, write to [email protected] or call +33 6 70 65 82 77.
You may also lodge a complaint with the French data protection authority, the CNIL, through cnil.fr.