Last updated: 2026-10-06
The controller of the personal data processed by this API is Sébastien Doom (France), reachable at doom.sebastien.pro+opendata-apis@gmail.com.
This data comes only from public sources, re-used under their open licence:
About you as a subscriber, the API receives from RapidAPI with each call an identifier and your plan, used to authenticate the call and apply your plan. On your first call under each paid plan, that identifier, the plan and the date are recorded and sent to the controller through Discord as a notification of a new subscriber; this record is kept while the API is offered, or erased on request.
If you write to the controller for support, by email or through RapidAPI's messaging, the controller processes your address, the content of your message and the replies sent to you, to answer you and to improve the service. In the controller's support tool, a request still open is kept until it is closed, then for 12 months, then anonymised. Copies of the emails remain in the controller's own mailbox, and of RapidAPI messages in RapidAPI's messaging, until the controller deletes them; the controller deletes support threads older than 12 months once a year. The processors below handle the text only to produce a reply or an analysis, and keep it for the period set by their own terms.
For each call, the API also records its name, the route called, the class of the HTTP status (2xx, 4xx, 5xx), your plan and your RapidAPI user identifier, in Cloudflare Workers Analytics Engine, to measure usage and spot problems. Cloudflare keeps this data for three months (checked in its documentation on 2026-10-04).
The data is processed to provide this service: Due diligence on French companies (KYB) and checks of French dwellings' rental compliance from their energy performance certificate (DPE). The legal basis is the legitimate interest (Article 6(1)(f) GDPR) of subscribers and of the controller in accessing information that the law makes public, notably to meet legal obligations of verification. Only the data needed for this purpose is served.
Support messages are processed to answer your request, which is part of providing the service to you (Article 6(1)(b) GDPR), or otherwise on the controller's legitimate interest in answering the people who write to it (Article 6(1)(f)). Usage statistics rest on the controller's legitimate interest in operating and improving its APIs (Article 6(1)(f)).
Subscribers of the API receive the data they request. These service providers process it on the controller's behalf:
No decision producing legal effects about you is made automatically by this API.
Some of them are established outside the European Union; transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
You have the right to access, rectify and erase your data, to restrict its processing and to object to it, by writing to doom.sebastien.pro+opendata-apis@gmail.com. You will get an answer within one month. As the data mirrors public registers, a correction is best made at the source (the register that published it); the API reflects it once its copy expires.
You may also lodge a complaint with a supervisory authority, such as the CNIL in France (cnil.fr).
Privacy notice · Terms of use · doom.sebastien.pro+opendata-apis@gmail.com