Where is my data stored?
On secure servers hosted in Europe, encrypted and GDPR-compliant.Does Prolocol read my emails or messages?For agencies
No. To detect a match, Prolocol only compares your email address and phone number. No content is ever read or retained.Who can see my documents?
Only agencies and individuals subscribed to Prolocol, and the people you show your QR code to, can see your documents. In "on request" mode, they stay hidden until you share them.What happens when I delete my account?
Everything disappears: profile, score, documents. Deletion is final and immediate, in one click.Why would I trust Prolocol with my payslip and my ID?
Because that is exactly where they are best protected. Today you send those same documents as PDFs to ten agencies, and they then sit in inboxes you don't control, with no end date. At Prolocol there is only one copy, encrypted, in a private space hosted in Europe. You decide who sees it, every access is limited to 30 days, and your dashboard shows you who opened what. Prolocol is a Luxembourg company (RCS B311968), supervised by the CNPD.What if Prolocol gets hacked?
We built Prolocol so that an attack finds as little as possible. Your documents are encrypted at rest and during every transfer, kept in a private space that is never public, and only open through signed links that expire. Each account only sees its own data, and repeated attempts are slowed down automatically. We don't keep your files forever either: they are deleted after 12 months without activity. And if an incident ever did affect your data, the law requires us to report it to the CNPD and to tell you directly: that is what we would do.An AI reads my documents: what does it do with them?
It reads, it doesn't learn. The AI only extracts the figures that matter (net salary, contract type, ID validity), then the score is calculated by a simple formula, the same for everyone. The analysis runs through our AI provider, Anthropic, under a GDPR-compliant data processing agreement, and its commercial terms rule out your documents being used to train its models. Nobody at Prolocol leafs through your dossier out of curiosity.Can an agency keep my documents forever?
Each agency or landlord only has access to your documents for 30 days from their first viewing, then access closes by itself. Every document a third party opens or downloads carries a watermark with their name and the date, so a copy in circulation would stay recognisable and traceable. That is far more control than an e-mail, which never goes away.What stops someone from taking a screenshot?
Nothing can, and we would rather tell you so frankly. A phone or computer can always photograph its own screen, with the buttons or otherwise, and no website in the world can detect or block it. What matters is what the screenshot contains. When an agency or landlord opens your documents (ID, payslips, contract), their name, the date and the words "Téléchargement sécurisé via Prolocol" are already printed into the document itself before it appears: a screenshot taken with the phone's buttons therefore always contains them. It stays tied to the person who took it, and your dashboard shows you who opened your documents. The Rental Passport too: when an agency or landlord opens it, their name, the date and the time are printed on the Passport like a viewing visa, right above the machine-readable lines, and an anonymous QR scan leaves "QR code" and the time on it.What does an agency see when it opens my Rental Passport?
Your Passport, with a viewing visa printed into the page: the name of the agency or private landlord who opens it (or "QR code" if someone scanned it without an account), the date and the time. The visa is part of the document: it also shows on a screenshot, a printout or a PDF. Only you see your Passport without it. The supporting documents a third party opens also carry a watermark with their name and the date, and every opening is listed in your dashboard ("Activity & Applications"). The visa cannot stop a copy, but it always shows where it came from. This is what it looks like:
How does Prolocol stand up to cyberattacks?
In layers, so that no single flaw is ever enough. Everything travels over HTTPS (TLS) with a policy that forbids falling back to HTTP. Your documents are encrypted at rest by our data host (AES-256), kept in a private space that is never public, and open only through cryptographically signed links that expire. Uploaded files are checked by their real content, and a PDF hiding a script is refused. Secret keys never leave our servers, sensitive routes limit the number of attempts, our software dependencies are checked continuously (no known vulnerability today) and we run regular security reviews. No system is invulnerable and we will never claim ours is: that is exactly why we stack protections instead of betting on one.What if someone tried to reach another person's dossier?
It fails, because the rule does not depend on what the screen shows. Every request is checked on the server, then a second time in the database itself: a signed-in account can only read its own rows, even if it edits the address in its browser or replays a request. Share links are signed and can be neither guessed nor altered (changing a single character invalidates them), each third-party access is limited to 30 days and recorded in a log you can read. We test these cases with real accounts, including attempts from one account to another, and repeated attempts are slowed down automatically.Can the score discriminate against me?
No, it is quite the opposite. The score only looks at rent-related figures: your income, your loans and alimony, the target rent and any probation period. Your age, nationality, origin, gender or religion never come into it. Where a paper dossier leaves room for impressions, Prolocol puts a transparent formula, the same for everyone, and even shows you how to reach the next level.Do you sell my data or use it for advertising?
Never. Your data is not sold, rented or handed over, and is never used for advertising. Our model is deliberately simple: agencies and landlords pay for access, tenants pay nothing. You are not the product, you are the person we protect.What if I change my mind?
You stay in control at every moment. You can switch your documents to "on request", pause your profile or delete your account in one click: profile, score and documents disappear. And if you stop using your account for a year, we delete it automatically, after warning you 30 days before.