CGVU

Version: v1.0

Effective Date: June 1, 2026

Applicable Law: French Law

Publisher: DEESCO SAS
Simplified Joint Stock Company with a capital of €100,000
19 rue de Miromesnil, 75008 Paris, France RCS Paris
contact@deesco.com — support@deesco.com — dpo@deesco.com

Hosting: OVH cloud — France | Payment: Stripe

Summary

Article 1 — Presentation and scope of application
Article 2 — Definitions
Article 3 — Platform access — Account creation
Article 4 — Description of services and features
Article 5 — Economic model — Subscriptions and billing
Article 6 — Right of withdrawal — Digital content
Article 7 — eDPE by DEESCO® — Informative value and limitation of liability
Article 8 — Digital housing safe
Article 9 — OCR and automated data extraction
Article 10 — Energy consumption tracking — ENEDIS and GRDF APIs
Article 11 — Work, subsidies, and financing simulation
Article 12 — Smart Energy
Article 13 — Eco-gestures and automated recommendations
Article 14 — Smart onboarding and housing management
Article 15 — Processing of personal data — GDPR
Article 16 — Partners and data transmission
Article 17 — Anonymized data and algorithmic improvement
Article 18 — Intellectual property
Article 19 — Responsibilities and limitations
Article 20 — Availability — Maintenance — Interruptions
Article 21 — User account security
Article 22 — Suspension and termination
Article 23 — Modification of the GTCU
Article 24 — Miscellaneous provisions
Article 25 — Applicable law — Mediation — Competent jurisdiction

Article 1 — Presentation and scope of application

1.1 Purpose

These General Terms and Conditions of Sale and Use (hereinafter "GTCU") govern all contractual relations between DEESCO SAS (hereinafter "DEESCO" or "the Company") and any natural person of legal age accessing the Deesco Pass® digital platform and its associated services (hereinafter "the User").

They constitute the complete and exclusive contractual framework applicable to the use of the Deesco Pass® platform, accessible at https://deescopass.deesco.com/fr, and to any digital service provided by DEESCO in this context. The User is invited to consult the Legal Notices and the Privacy Policy permanently accessible on the platform.

1.2 Acceptance

Accessing the Deesco Pass® platform, creating a user account, browsing the platform, or subscribing to a paid subscription entails full, complete, and unreserved acceptance of these GTCU.

The User acknowledges having read these GTCU before any use of the service. In case of refusal, the User must refrain from creating an account or using the platform.

1.3 Scope of application

These GTCU apply to all features of the Deesco Pass® platform, whether accessible under the free account or paid subscription offers. They apply exclusively to relations between DEESCO and end-consumer Users residing in metropolitan France.

The professional solution of the DEESCO group intended for partners and professionals is subject to distinct contractual conditions and is not governed by these GTCU.

1.4 Hierarchy of contractual documents

In the event of a contradiction between these GTCU, the Privacy Policy, or any other document published on the platform, these GTCU shall prevail regarding the provisions relating to the use of the Services. The provisions relating to the protection of personal data remain governed primarily by the Privacy Policy.

Article 2 — Definitions

The following terms, when capitalized in these GTCU, have the meaning assigned to them below:

Term	Definition
DEESCO / the Company	DEESCO SAS, a Simplified Joint Stock Company with a capital of €100,000, registered with the Paris RCS, whose registered office is located at 19 rue de Miromesnil, 75008 Paris, France.
Deesco Pass®	The SaaS digital housing energy management platform published by DEESCO, accessible at https://deescopass.deesco.com/fr.
User	Any natural person of legal age who accesses the Deesco Pass® platform, creates an account, and uses all or part of the services, whether free of charge or for a fee.
Account	The personal space created by the User allowing access to Deesco Pass® services, protected by login credentials.
Housing	The residential real estate property, identified by a unique address, linked to a Deesco Pass® Account during onboarding.
eDPE® / eDPE by DEESCO®	The proprietary informative energy estimation tool of Deesco Pass®, the value of which is exclusively indicative and non-regulatory.
Digital safe	The secure documentary storage space offered in Deesco Pass® for centralizing documents relating to the Housing.
OCR	The optical character recognition technology used by DEESCO for automated data extraction from imported documents.
ENEDIS / GRDF API	The programming interfaces allowing, with the express consent of the User, the retrieval of electricity and gas consumption data from network managers.
Partners	Third-party companies selected by DEESCO likely to intervene in the context of commercial connections with the User, under the conditions defined in Article 16.
Personal data	Any information relating to an identified or identifiable natural person within the meaning of Regulation (EU) 2016/679 (GDPR).
Official DPE	The Energy Performance Certificate established by a certified diagnostician, the only document having regulatory value within the meaning of the Construction and Housing Code.
Services	All the features and content made available to the User within the framework of Deesco Pass®, according to the subscribed offer.
Free offer	Access to a limited scope of Deesco Pass® features, without a paid subscription, for an unlimited period.
Paid subscription	The monthly or annual offer subscribed by the User providing access to all Deesco Pass® features.

Article 3 — Platform access — Account creation

3.1 Access conditions

The use of Deesco Pass® is reserved for natural persons of legal age (eighteen years and older) possessing the full legal capacity to accept these GTCU. Any registration by a minor is strictly prohibited.

The User must have Internet access, compatible equipment, and an up-to-date browser. DEESCO does not guarantee the platform's compatibility with all technical environments.

3.2 Account creation

Creating an account requires providing a valid email address and setting a password. The User guarantees the accuracy and regular updating of the information provided. In the event of incorrect or fraudulent information, DEESCO reserves the right to suspend or delete the account without notice.

Each account is strictly personal and individual. Any sharing of credentials or creating an account on behalf of a third party without authorization is prohibited.

As of the effective date of these GTCU, an account is associated with a single housing unit, identified by a unique postal address during onboarding. Multi-housing management falls under future features that will be subject to specific conditions.

3.3 Security of credentials

The User is solely responsible for the confidentiality and security of their login credentials. Any use of the service carried out from their account is presumed to be attributable to them. It is their responsibility to notify DEESCO without delay via support@deesco.com in the event of suspected unauthorized access.

3.4 User Obligations

The User undertakes to use Deesco Pass® in accordance with these GTCU, applicable regulations, and good morals. The following are notably prohibited: any attempt at unauthorized access to third-party data, any circumvention of security measures, any use for commercial purposes without the express authorization of DEESCO, and any transmission of deliberately erroneous information likely to alter the quality of the services.

Article 4 — Description of services and features

4.1 General presentation

Deesco Pass® is an intelligent digital platform dedicated to the energy performance of housing. It aggregates, in a single and personalized space, the energy data of the User's housing to offer them estimates, recommendations, simulations, and documentary management tools.

4.2 Functional scope

The available features vary depending on the subscribed offer. DEESCO reserves the right to evolve, modify, limit, or add features, provided the User is informed under the conditions set out in Article 23. As of the effective date herein, the services notably include:

Intelligent onboarding and housing profile personalization;
eDPE by DEESCO® energy estimation;
Multi-energy consumption tracking;
Connection to ENEDIS and GRDF APIs, subject to User consent;
Housing safe with documentary storage, organization, and export;
OCR and automated data extraction from imported documents;
Simulation of energy renovation work, financial aid, and financing;
Smart Energy module (solar, charging station, electric vehicle, solar panels);
Eco-gestures and personalized recommendations;
Intelligent alerts and email notifications, subject to the notification preferences defined by the User.

Additional features (multi-housing, multi-user spaces, mobile push notifications) are currently under development and will be the subject of specific communication when made available.

4.3 Indicative nature of outputs

IMPORTANT WARNING: All estimates, simulations, scores, projections, savings, and recommendations generated by the Deesco Pass® platform are exclusively informative and indicative. They do not in any way constitute contractual commitments, or opposable financial, tax, banking, technical, or regulatory advice. The User is solely responsible for the decisions they make based on the information provided by the platform.

Article 5 — Economic model — Subscriptions and billing

5.1 Pricing structure

Deesco Pass® is offered under a freemium model comprising three access levels:

Offer	Pricing	Subscription Periodicity	Included Features
Discovery	Free of charge (€0)	Unlimited (Free)	Estimated energy label (eDPE*); Single-energy consumption tracking; Eco-gestures; Housing safe (500 MB).
Essential	Current rate available on the deesco.com website.	Monthly or Annual	All the Discovery Pack plus: Real-time multi-energy consumption tracking; Intelligent alerts; Estimation of work costs and financial aid; Customizable work plan; Housing safe (1 GB).
Expert	Current rate available on the deesco.com website.	Monthly or Annual	All the Essential Pack plus: Electric mobility simulation (vehicle + charging station); Solar self-consumption simulation; Housing energy management; Smart energy management of the housing; Housing safe (5 GB).

The features are presented for indicative purposes and may evolve. The applicable rates are those in effect on the date of subscription, as displayed on the www.deesco.com website. They are expressed in euros including all taxes (TTC). DEESCO reserves the right to modify its rates, provided the User is informed under the conditions set out in Article 23.

5.2 Billing and payment

Payment for paid subscriptions is processed via the secure Stripe payment solution. DEESCO does not store any of the User's banking data, as transaction management is entirely handled by Stripe in accordance with PCI-DSS standards.

For the monthly subscription, billing is automatically renewed each month on the subscription anniversary date. For the annual subscription, full payment is made upon subscription. In the event of payment failure, DEESCO reserves the right to suspend access to paid features until regularization.

5.3 Renewal and termination of subscriptions

Monthly and annual subscriptions are concluded for an initial duration of one month or one year respectively, and are then tacitly renewed for identical periods, unless expressly terminated by the User.

Termination can be carried out at any time from the User's account management space. It takes effect at the end of the current subscription period. No pro-rata temporis refund will be granted for the remaining period, whether for a monthly or annual subscription.

The User retains access to paid features until the end of the already paid subscription period. At the end of this period, the account automatically switches to the free offer, without data deletion.

Article 6 — Right of withdrawal — Digital content

6.1 Nature of the service and immediate execution

Deesco Pass® is a digital content service provided on an intangible medium and executed immediately after subscription, within the meaning of Article L. 221-28, 13° of the Consumer Code. Access to the features of the subscribed offer is activated upon payment confirmation.

6.2 Express waiver of the right of withdrawal

In accordance with Article L. 221-28 of the Consumer Code, the User is expressly informed that, for any paid subscription to Deesco Pass®, they waive their fourteen (14) day right of withdrawal by accepting, upon subscription, the immediate execution of the digital service before the expiration of this period.

This waiver is collected via a distinct, mandatory, and non-pre-checked checkbox presented to the User during each subscription or renewal of a paid subscription. This box expressly states:

"I acknowledge that Deesco Pass® is a digital content service whose execution begins immediately after my subscription. I expressly waive my 14-day right of withdrawal in accordance with Article L. 221-28 of the Consumer Code."

Failure to validate this box blocks the finalization of the subscription. This mechanism guarantees the compliance of the subscription process with DGCCRF requirements and consumer law.

6.3 No refunds

No refund will be granted after the service's execution, including in the event of early termination by the User, subject to the mandatory legal rights of the consumer User in the event of a proven breach by DEESCO of its essential obligations.

Article 7 — eDPE by DEESCO® — Informative value and limitation of liability

7.1 Nature and purpose of the eDPE by DEESCO®

The eDPE by DEESCO® is a proprietary energy performance estimation tool for housing, integrated into the Deesco Pass® platform. It produces an estimate calculated from data declared by the User during onboarding and data retrieved automatically (notably via the ADEME API and, where applicable, ENEDIS and GRDF APIs subject to applicable consents).

The calculation of the eDPE is based on proprietary algorithms developed and operated by DEESCO, as well as on statistical hypotheses and energy estimation models.

7.2 Exclusively informative value

The eDPE by DEESCO® DOES NOT constitute an official Energy Performance Certificate (DPE) within the meaning of the Construction and Housing Code. It has no regulatory value, no opposable value, and cannot be used in the context of a real estate sale, a rental, an administrative procedure, a legal obligation, or any other legal act requiring a DPE certified by an approved diagnostician.

The eDPE by DEESCO® is exclusively intended to inform the User about the estimated energy performance of their housing for indicative purposes, as part of a personal approach to energy monitoring and optimization.

7.3 Reliability and limits

The quality and accuracy of the eDPE by DEESCO® result are directly conditioned by the accuracy, completeness, and updating of the information provided by the User. DEESCO cannot guarantee the absolute accuracy of the result obtained and declines all responsibility in the event of an erroneous estimate resulting from inaccurate, incomplete, or obsolete declarative information.

The eDPE may also rely on third-party data (ADEME, ENEDIS, GRDF) over which DEESCO has no control regarding completeness, updates, or accuracy. Any unavailability or error from these third-party sources may affect the produced result.

Any significant modification to the housing (work, change of equipment, modification of energy systems) is likely to render the estimate obsolete. It is the User's responsibility to update their data in the application to maintain the relevance of the estimate.

7.4 Exclusion of liability

DEESCO expressly excludes any liability for decisions made by the User on the basis of the eDPE by DEESCO®, whether they are purchase, sale, work, financing decisions, or any other act. The User is invited to consult a certified diagnostician for any official DPE needs.

Article 8 — Digital housing safe

8.1 Description of the service

The digital housing safe is a secure documentary storage space integrated into Deesco Pass®. It allows the User to centralize, organize, consult, and export documents relating to their housing: official DPEs, energy bills, maintenance contracts, work documents, warranties, and any document deemed useful by the User.

8.2 Available features

The User can perform the following operations in the digital safe:

Import documents by uploading them from their terminal;
Organize and classify documents by category;
Consult stored documents from the platform;
Export and download documents;
Delete stored documents;
Share documents via email (external link).

8.3 User's responsibility

The User is solely responsible for the legality, lawfulness, and relevance of the documents they import into the digital safe. They guarantee that they have all the necessary rights over the imported documents. DEESCO does not carry out any verification of the content of stored documents and declines all responsibility for their content.

8.4 Storage limits and availability

The available storage volume may be limited according to the subscribed offer. DEESCO does not guarantee the permanent availability of the storage service and cannot be held responsible in the event of data loss resulting from an event beyond its control (cyberattack, technical failure, force majeure). The User is invited to keep a local copy of their important documents.

8.5 Retention and Deletion of Documents and Data

Documents imported and stored by the User in the digital safe are kept for the entire duration of the Account's activity.

Deletion initiated by the User (Active Account): The User can, at any time, proceed with the individual deletion of a stored document. This deletion immediately renders the document inaccessible to the User. The document will be permanently purged from our backup systems within a reasonable time, subject to the technical necessities of replication and our internal system security policies.
Deletion following Account Closure: in the event of Account deletion, the data associated with the Digital Safe remains kept for a maximum period of thirty (30) days to allow the exercise of the User's rights and the management of technical closure operations. After this period, the data is irreversibly anonymized, subject to applicable legal obligations.
Legal Retention Obligations (Transparency Reminder): In accordance with our commitment to transparency and as a company subject to French law (Commercial Code, General Tax Code), we inform the User that the permanent deletion of certain documents and data is subject to the legal and regulatory retention obligations applicable to DEESCO in its capacity as a data controller. These obligations notably require retaining data for specific legal durations for probationary or compliance purposes, such as billing data (generally 10 years from the close of the financial year) or elements necessary for managing disputes or regulatory audits. Only documents or data necessary for these mandatory obligations are kept beyond the account's duration, and solely for the legally required duration.
Anonymized Retention for Statistical Purposes: We specify that the deletion of documents and the closure of the Account do not affect the retention of usage data and aggregated metrics that would have been previously irreversibly anonymized and aggregated for statistical purposes, algorithmic improvement, and research and development, in accordance with the provisions of Article 17 of these GTCU. This anonymized data no longer constitutes Personal Data within the meaning of the GDPR.

Article 9 — OCR and automated data extraction

9.1 Operation

Any document imported into the digital safe or uploaded to Deesco Pass® for analysis purposes may be subjected to automated processing by optical character recognition (OCR). This technology allows DEESCO to automatically extract relevant data contained in the documents (energy data, consumption, technical characteristics of the housing, billing information, DPE data, etc.).

9.2 Legal basis and purposes

This processing is based on the execution of the user contract (Article 6(1)(b) GDPR). Its purposes are:

The automatic pre-filling of platform forms and fields;
Feeding estimation and simulation tools (eDPE, consumption tracking, work simulation);
Improving the user experience by reducing manual entries;
Producing personalized recommendations and intelligent alerts;
Enriching the housing's energy profile;
Detailed analysis of extracted data (notably validity dates, contract or maintenance expiration dates) for the generation and sending of personalized reminders and alert notifications to the User.

Given the nature of the Deesco Pass® service, which intrinsically relies on document analysis to provide the personalized estimates, simulations, and recommendations listed in this Article, activating OCR is considered strictly necessary for the execution of the user contract (Article 6(1)(b) of the GDPR). Therefore, no distinct specific consent is required for this feature. The User is fully and clearly informed of this mechanism during the onboarding process and by accepting these General Terms and Conditions of Sale and Use, guaranteeing total transparency on the processing.

9.3 Limits of OCR technology

Automatic data extraction by OCR is liable to produce errors, particularly in the case of poor quality, poorly scanned documents, or in a non-standard format. The extracted data is presented for indicative purposes and must be verified by the User. DEESCO declines all responsibility in the event of an extraction error leading to an inaccurate recommendation or estimate. The User remains responsible for verifying the automatically extracted information before any use of Services relying on this data.

9.4 Non-transmission of raw documents

Documents imported by the User are never transmitted in their entirety to third parties or partners. Only useful and contextualized extracted data may be transmitted under the conditions defined in Article 16.

Article 10 — Energy consumption tracking — ENEDIS and GRDF APIs

10.1 Service presentation

Deesco Pass® allows the User to track their energy consumption in a centralized manner. Multi-energy tracking covers electricity (Linky meter), gas (Gazpar meter), and any other energy vector entered manually or via invoice imports.

10.2 Connection to ENEDIS and GRDF APIs

The automated retrieval of electricity and gas consumption data is carried out, respectively, via the Enedis API (data from the Linky meter) and the GRDF API (data from the Gazpar meter). These connections require express consent from the User, materialized by a specific authorization granted via the official authorization interfaces of Enedis and GRDF.

The User can revoke these authorizations at any time, directly from their management space on the platform. Revocation leads to the cessation of automatic data synchronization without affecting historically collected data.

10.3 Manual entry and invoice import

In the absence of a connection to the network managers' APIs, the User can manually enter their consumption or import their energy bills, whose data is extracted by OCR in accordance with Article 9.

10.4 Indicative nature of data

Consumption data displayed on Deesco Pass® is provided for indicative and personal tracking purposes. It may present delays or inaccuracies linked to API synchronization times, technical unavailability of network managers, or transmission errors. DEESCO cannot be held responsible for inaccuracies resulting from data provided by Enedis, GRDF, or any other third-party provider.

10.5 Qualification of consumption data

The collected energy consumption data is considered economically sensitive data, capable of revealing lifestyle habits, heritage characteristics, and equipment levels. It does not constitute sensitive data within the meaning of Article 9 of the GDPR but is subject to reinforced protection complying with the principles of minimization and purpose limitation.

Article 11 — Work, financial aid, and financing simulation

11.1 Module description

Deesco Pass® integrates a simulation module allowing the User to obtain indicative estimates relating to the energy renovation work of their housing. This module produces estimates of work costs, potentially accessible financial aid (MaPrimeRénov', CEE, local aid, etc.), and financing solutions.

11.2 Exclusively indicative nature

The simulations generated by this module are exclusively indicative. They rely on declarative data, statistical hypotheses, and evolving reference frameworks (official aid scales, average work costs). They under no circumstances constitute:

A financing or credit offer within the meaning of the Consumer Code;
A promise to grant public or private financial aid;
A work quote committing a craftsman or service provider;
Opposable tax, banking, or financial advice;
A certified evaluation of the housing's patrimonial value.

The User is invited to consult a qualified professional (FAIRE advisor, financial agent, certified RGE craftsman) for any concrete work project. The conditions for obtaining aid are likely to evolve and are the exclusive responsibility of competent public bodies.

11.3 Partner connections

Simulations may give rise to proposals for connection with partners selected by DEESCO (craftsmen, financing organizations, energy renovation advisors). These connections are carried out under the conditions defined in Article 16 and can under no circumstances engage DEESCO's liability concerning the services, quotes, or contracts subsequently concluded between the User and the Partners.

Article 12 — Smart Energy

12.1 Module description

The Smart Energy module of Deesco Pass® allows the User to access simulations and estimates relating to photovoltaic solar energy production and electric mobility solutions (electric vehicle and charging station). Features relating to energy self-consumption are upcoming features.

12.2 Indicative nature

All simulations produced by the Smart Energy module (sizing of photovoltaic panels, solar production estimation, self-consumption calculation, charging station installation cost estimation, etc.) are exclusively indicative. They rely on declarative parameters, statistical meteorological data, and technical hypotheses that can significantly differ from the reality of each installation.

DEESCO excludes any liability for investment, equipment purchase, or work decisions made on the basis of these simulations. The User is invited to request a certified installer for any concrete project.

Article 13 — Eco-gestures and automated recommendations

13.1 Nature of the service

Deesco Pass® provides the User with recommendations regarding eco-gestures, energy consumption optimization, and good practices for housing maintenance. These recommendations are automatically generated by DEESCO's algorithmic engines based on the housing profile, declared consumption habits, and collected data. They are generic in nature and based on established performance frameworks.

13.2 Exclusion of any binding value and Limits of Estimated Savings

The recommendations and eco-gestures offered by the platform are purely informative in nature. It is expressly stated that the savings presented are orders of magnitude derived from ADEME data. They represent a maximum savings potential observed under optimal conditions and do not constitute a contractual guarantee. Percentages cannot be cumulated.

They do not constitute:

Financial, tax, or investment advice;
Technical recommendations engaging DEESCO's liability;
Automated decisions producing legal effects within the meaning of Article 22 of the GDPR.

DEESCO excludes any liability in the event of a decision made by the User based on these recommendations.

13.3 Dependence on User data

The relevance of the recommendations depends directly on the quality and updating of the data entered in Deesco Pass® concerning the housing. Erroneous or obsolete data can lead to inappropriate recommendations. The User is solely responsible for the accuracy of the entered information.

Article 14 — Smart onboarding and housing management

14.1 Initial collection during onboarding

During the creation and initial configuration of their account, the User is guided by a smart onboarding process designed to personalize the Deesco Pass® experience according to the characteristics of their housing. Onboarding notably collects:

The type and occupancy status of the housing (owner-occupier, tenant, landlord);
The technical characteristics of the housing (surface area, year of construction, construction type);
Energy systems and equipment in place (heating, insulation, hot water production);
The energy sources used;
The User's energy uses and objectives.

This information directly conditions the quality and relevance of the estimates (eDPE), simulations, and recommendations produced by the platform.

14.2 Uniqueness of housing per account

A Deesco Pass® account is associated with a single housing unit, identified by a unique postal address. Managing multiple housing units via the same account is a future functional evolution that will be subject to specific conditions.

14.3 Obligation to update

The User is responsible for regularly updating the information relating to their housing. Any substantial modification (carrying out work, changing equipment, modifying energy systems) is likely to render certain estimates and simulations obsolete. It is the User's responsibility to make the necessary updates. DEESCO declines all responsibility for estimates produced based on un-updated information.

14.4 Automatic retrieval of the ADEME DPE

During onboarding, Deesco Pass® may automatically retrieve the official DPE of the housing available in the ADEME database, if this housing has been the subject of a registered regulatory diagnosis. This retrieval is carried out for information and pre-filling purposes. Data derived from the official ADEME DPE are not modified by DEESCO.

Article 15 — Processing of personal data — GDPR

15.1 Data controller

DEESCO SAS, headquartered at 19 rue de Miromesnil, 75008 Paris, France, is the data controller within the meaning of Regulation (EU) 2016/679 on the protection of personal data (GDPR). Any questions regarding the processing of personal data can be addressed to the Data Protection Officer (DPO) at the address: dpo@deesco.com.

The recipients of the data are, within the limits of their respective attributions: the authorized internal teams of DEESCO (notably support, technical, commercial), the technical subcontractors listed in Article 16.5, as well as Commercial Partners, subject to the User's consent under the conditions defined in Article 16.2.

Detailed modalities concerning the collection, use, retention, security, and exercise of users' rights regarding their personal data are described in the DEESCO Privacy Policy, accessible at any time from the platform.

15.2 Collected data and purposes

DEESCO collects and processes the following categories of data as part of providing its services:

Data Category	Purposes	Legal Basis
Identification data (name, email, password)	Account creation and management; authentication	Execution of the contract
Housing data (address, area, type, equipment)	Personalization; eDPE; simulations; recommendations	Execution of the contract
Energy consumption data (Linky, Gazpar, invoices)	Consumption tracking; eDPE; alerts; recommendations	Execution of the contract / Consent (Enedis/GRDF API)
Imported documents (invoices, DPE, proofs)	Digital safe; OCR; extraction; pre-filling	Execution of the contract
Platform usage data (navigation, interactions)	Service improvement; security; statistics	Legitimate interest
Payment data (processed by Stripe)	Billing; subscription management	Execution of the contract
Partner connection data	Targeted commercial connections	Consent / Legitimate interest

15.3 Processing principles

DEESCO applies the principles of Privacy by Design and Privacy by Default in the development of its features. Personal data is collected in an adequate, relevant manner and limited to what is necessary in relation to the purposes for which it is processed (data minimization). It is not kept beyond the duration necessary for these purposes.

15.4 Retention periods

Personal data is retained for the following durations:

Account and housing data: retention for the entire duration of the account's activity. In the event of account deletion, personal data is deleted and anonymized within a maximum period of 30 days, except for legal, accounting, security, or evidentiary obligations.
Energy consumption data: retention for the entire duration of the account's activity. Certain anonymized, aggregated, or non-re-identifiable data may be retained for statistical purposes, Service improvement, research and development, and algorithm optimization.
Imported documents: retention for the entire duration of the account's activity. In the event of account deletion, the documents and associated personal data are deleted or anonymized within a maximum period of 30 days, except for legal, accounting, security, or evidentiary obligations.
Billing data: 10 years (accounting obligation);
Anonymized usage data: unlimited retention in aggregated non-re-identifiable form.

15.5 Rights of individuals

The User has the following rights regarding their personal data, which they can exercise at any time by sending a request to dpo@deesco.com:

Right of access to their data (Art. 15 GDPR);
Right of rectification (Art. 16 GDPR);
Right to erasure (Art. 17 GDPR), subject to legal retention obligations;
Right to restriction of processing (Art. 18 GDPR);
Right to data portability (Art. 20 GDPR);
Right to object to processing based on legitimate interest (Art. 21 GDPR);
Right to withdraw consent at any time without affecting the lawfulness of prior processing.

In the event of an unsatisfactory response, the User has the right to lodge a complaint with the CNIL (www.cnil.fr).

15.6 Hosting and security

Data is hosted in France by OVH cloud. DEESCO implements appropriate technical and organizational measures to guarantee the security, confidentiality, and integrity of the processed personal data, notably: data encryption in transit and at rest, access control, multi-factor authentication, access logging, continuous system monitoring.

Article 16 — Partners and data transmission

16.1 General principles

As part of providing certain features of Deesco Pass® — notably work simulations, connections for financing and energy renovation — DEESCO may offer the User a connection with selected partners.

These partners act as independent data controllers for the data they collect during these connections. They have their own privacy policies and are solely responsible for the processing they carry out on the received data.

16.2 Conditions of transmission

Any data transmission to a partner is subject to the prior and express consent of the User, collected via an opt-in mechanism during registration, and can be modified at any time in the "Deesco Pass account settings" section of the User. The User can refuse any connection without it affecting their ability to use other Deesco Pass® features.

Transmitted data is strictly limited to that necessary for the purpose of the connection in question. DEESCO never transmits raw documents stored in the digital safe. Transmissions are limited to useful and contextualized data (housing characteristics, relevant estimates, contact details).

Transmissions are occasional and confined to the connection for which consent was collected. They do not grant partners permanent or recurring access to the User's data.

16.3 Remuneration of DEESCO

DEESCO may receive remuneration from its partners as part of commercial connections made via the platform. This remuneration in no way influences the selection or presentation of the technical or energy recommendations offered to the User, which remain exclusively based on the housing profile.

16.4 Partner selection and quality

DEESCO undertakes to reference only partners presenting sufficient guarantees in terms of personal data protection and commercial seriousness. Nevertheless, DEESCO cannot be held liable for the acts, omissions, or practices of partners in the context of commercial relationships established following a connection.

16.5 Technical subcontractors

DEESCO relies on different categories of technical service providers for hosting, development, maintenance, support, payment, and operation of the Services.

These providers may notably fall into the following categories:

hosting and technical infrastructure providers;
development, maintenance, and support providers;
DEESCO group companies intervening for development, maintenance, support, or technical assistance services;
secure payment providers;
energy data and public service providers;
audience measurement, statistical analysis, and performance providers.

These service providers access personal data only to the extent strictly necessary for the execution of their missions and are subject to contractual obligations of confidentiality, security, and data protection complying with applicable regulations.

Article 17 — Anonymized data and algorithmic improvement

17.1 Retention and exploitation

DEESCO reserves the right to retain and exploit, including after the deletion of the User's account, data resulting from the use of the platform in a strictly anonymized, aggregated, and non-re-identifiable form. This data includes notably usage statistics, aggregated energy metrics, statistical models, and anonymized energy performance analyses.

17.2 Purposes

The exploitation of this anonymized data has the exclusive purposes of:

Improving energy estimation and scoring algorithms;
Developing and optimizing the platform's features;
Producing anonymized sectoral statistics;
Research and development regarding housing energy efficiency.

17.3 Non-re-identification

DEESCO undertakes never to use this anonymized data for re-identification purposes and to maintain robust technical measures guaranteeing the irreversibility of the anonymization. These processing operations do not constitute personal data processing within the meaning of the GDPR.

Article 18 — Intellectual property

18.1 DEESCO's rights

The Deesco Pass® platform, its software components, technical architectures, graphical interfaces, databases, proprietary algorithms, energy calculation engines, scoring systems, statistical models, business logic, workflows, proprietary APIs, editorial content, as well as all elements incorporated therein, constitute works protected by intellectual property law, notably within the meaning of the Intellectual Property Code.

The trademarks DEESCO®, Deesco Pass®, Deesco Very®, eDPE®, and eDPE by DEESCO® are registered and protected trademarks. Any unauthorized reproduction, use, or exploitation is strictly prohibited and liable to prosecution.

18.2 License granted to the User

DEESCO grants the User, for the duration of their subscription or free use, a personal, non-exclusive, non-transferable, non-sublicensable, and revocable license to use the Deesco Pass® platform under the conditions defined in these GTCU. This license is strictly limited to the personal and non-commercial use of the platform.

18.3 User Data

The User retains all rights to the documents and data they import into Deesco Pass®. They grant DEESCO a non-exclusive, worldwide, and free license to use this data to the strict extent necessary to provide contractual services and under the conditions defined in Article 15. This license ends upon account deletion, subject to the exceptions provided in Article 17.

18.4 Prohibitions

The User is expressly prohibited, without prior written authorization from DEESCO:

To copy, reproduce, modify, adapt, or decompile all or part of the platform;
To extract, collect, or reuse platform data for commercial purposes;
To reverse engineer algorithms or calculation systems;
To use the platform to develop a competing or similar service;
To resell, sublicense, or transfer access to the platform.

Article 19 — Responsibilities and limitations

19.1 DEESCO's obligations

DEESCO undertakes to provide the services described in these GTCU with the care and diligence of a competent professional service provider. DEESCO's obligation is an obligation of means. DEESCO undertakes to implement reasonable measures to ensure the availability, security, and quality of the service, without however guaranteeing a specific result.

19.2 Limitation of DEESCO's liability

To the fullest extent permitted by applicable law, and subject to the mandatory rights of the consumer User, DEESCO cannot be held liable:

For decisions made by the User on the basis of estimates, simulations, or recommendations produced by the platform;
For inaccuracies resulting from erroneous, incomplete, or obsolete declarative information provided by the User;
For errors, delays, or interruptions related to data provided by third parties (ADEME, Enedis, GRDF, Stripe, OVHcloud);
For data losses resulting from a force majeure event, an external cyberattack, a third-party infrastructure failure, or User behavior contrary to these GTCU;
For the use of the platform for a purpose other than personal, or for professional purposes without authorization;
For indirect, immaterial, consequential, or profit loss damages, even if DEESCO had been informed of their possibility.

In cases where DEESCO's liability is retained, the amount of damages likely to be charged to DEESCO cannot exceed the total sums actually received by DEESCO for the User's subscription during the twelve (12) months preceding the event causing the damage.

19.3 Liability for APIs and third-party data

DEESCO exercises no control over data provided by public and partner APIs (ADEME, Enedis, GRDF). The quality, completeness, and availability of this data depend on their respective providers. Any interruption, error, or modification of third-party APIs can affect Deesco Pass® features without DEESCO being held liable.

19.4 User's responsibility

The User is entirely responsible for the accuracy of the information they enter into the platform, the security of their credentials, the use they make of the features, and the decisions they make based on platform outputs. They indemnify DEESCO against any third-party recourse resulting from their use of the platform.

The Services rely notably on information declared by the User, public data, data provided by third parties as well as on automated and algorithmic processing. DEESCO does not guarantee the completeness, absolute accuracy, or total absence of errors in the information processed or returned within the framework of the Services.

Article 20 — Availability — Maintenance — Interruptions

20.1 Platform availability

DEESCO implements reasonable means to ensure the availability of the Deesco Pass® platform. The platform is accessible 24/7, subject to maintenance operations and events beyond DEESCO's control. DEESCO does not guarantee uninterrupted availability, free from errors or bugs.

20.2 Maintenance and updates

DEESCO reserves the right to interrupt access to the platform for preventive or corrective maintenance operations, system updates, deployment of new features, or security improvement. DEESCO will endeavor to carry out these operations outside peak usage hours and to inform Users beforehand whenever possible.

20.3 Independent events

DEESCO's liability cannot be engaged in the event of interruption or degradation of the service resulting notably from: hosting infrastructure failures (OVHcloud), Internet outages, cyberattacks, malicious acts by third parties, unavailability of third-party APIs (ADEME, Enedis, GRDF, Stripe), server overloads, or any force majeure event within the meaning of Article 1218 of the Civil Code.

20.4 Evolution of features

DEESCO reserves the right to evolve, modify, temporarily suspend, or delete all or part of the platform's features, while respecting the contractual rights of Users with a current paid subscription. In the event of a substantial modification affecting the features included in a paid subscription, the User will be informed in accordance with Article 23.

Article 21 — User account security

21.1 DEESCO's security measures

DEESCO implements the following technical and organizational security measures to protect the platform and Users' data: HTTPS encryption of all communications, encryption of sensitive data at rest, administrator access control, logging of access and sensitive operations, continuous system monitoring, and secure network architecture.

21.2 User's security obligations

The User is responsible for the confidentiality of their login credentials and must: choose a sufficiently robust password, not communicate their credentials to third parties, log out of the platform after each session on a shared terminal, and regularly update their password. DEESCO recommends activating two-factor authentication when available.

21.3 Incident reporting

Any suspected security incident (unauthorized access, fraudulent use of the account, loss or theft of credentials) must be reported immediately to DEESCO via support@deesco.com. DEESCO reserves the right to preventively block access to an account in the event of suspected fraudulent use, in the User's interest.

Article 22 — Suspension and termination

22.1 Termination initiated by the User

The User can end their subscription and/or request the deletion of their account at any time from their management space or by contacting support@deesco.com. Account deletion entails the permanent erasure of personal data under the conditions provided in Article 15, subject to legal retention obligations and anonymized data referred to in Article 17.

22.2 Termination or suspension initiated by DEESCO

DEESCO reserves the right to suspend or terminate a User's access to the platform, with or without notice depending on the severity of the facts, in the following cases: violation of these GTCU, provision of fraudulent information, use of the platform for illegal purposes, attempt at unauthorized access to systems, behavior harmful to DEESCO or other Users, or non-payment of a subscription.

In the event of termination due to the User's fault, no refund for the current period will be granted.

22.3 Consequences of termination

Account termination results in the permanent loss of access to personal data associated with the Deesco Pass® account. DEESCO recommends that the User export all their documents and data prior to any account deletion request.

Article 23 — Modification of the GTCU

DEESCO reserves the right to modify these GTCU at any time, notably to adapt them to the legal, regulatory, or functional evolutions of the platform. Any substantial modification will be notified to the User by email at the address provided in their account, with a minimum notice of thirty (30) days before the new conditions take effect.

Continuing to use the platform after this period constitutes acceptance of the new GTCU. In case of refusal, the User has the right to terminate their subscription and close their account before the modifications take effect, without penalty and with a pro-rata temporis refund of the paid unconsumed period, solely in the event of a substantial modification of the covered services.

The current version of the GTCU is always accessible on the Deesco Pass® platform. Version history is retained by DEESCO.

Article 24 — Miscellaneous provisions

24.1 Entire agreement

These GTCU constitute the entire agreement between DEESCO and the User relating to the use of Deesco Pass® and replace all previous agreements or commitments concerning the same subject.

24.2 Severability

If any provision of these GTCU is declared null or inapplicable by a competent jurisdiction, the other provisions will remain fully in force, and the null provision will be replaced by a valid provision best reflecting the intent of the parties.

24.3 Non-waiver

The failure of DEESCO to rely on a breach by the User of any of the obligations provided in these GTCU cannot be interpreted as a waiver to rely on it subsequently.

24.4 Notifications

All notifications, requests, and communications addressed to DEESCO under these GTCU must be made by email to contact@deesco.com (general questions) or support@deesco.com (technical support and account management), or by registered mail with acknowledgment of receipt to: DEESCO SAS, 19 rue de Miromesnil, 75008 Paris, France.

24.5 Minors

The Deesco Pass® platform is exclusively reserved for natural persons of legal age (18 years and older). DEESCO reserves the right to delete any account if it is established that its holder is a minor.

24.6 Force majeure

DEESCO cannot be held liable for any delay or non-performance of its obligations resulting from a force majeure event within the meaning of Article 1218 of the French Civil Code, notably: natural disasters, epidemics, terrorist acts, general strikes, telecommunication network failures, governmental or regulatory decisions, infrastructure breakdowns beyond DEESCO's control. DEESCO will inform the User as soon as possible of the occurrence of such an event.

Article 25 — Applicable law — Mediation — Competent jurisdiction

25.1 Applicable law

These GTCU are governed and interpreted in accordance with French law, excluding its conflict of law rules.

25.2 Consumer mediation

In accordance with Articles L. 616-1 and following of the Consumer Code and Directive 2013/11/EU on alternative dispute resolution for consumer disputes, the User has the right to have recourse free of charge to a consumer mediator for any dispute not resolved amicably with DEESCO.

Before any referral to a mediator, the User must have attempted to resolve the dispute directly with DEESCO by sending a written complaint to support@deesco.com. In the absence of a satisfactory response within two (2) months, the User can refer to the competent mediator. The contact details of the mediator referenced by DEESCO are provided upon simple request addressed to contact@deesco.com and will appear in the subscription confirmations.

Mediation is an optional procedure. Its engagement does not deprive the User of their right to seize the competent courts.

25.3 Online dispute resolution

The European Commission provides an online dispute resolution (ODR) platform accessible at: https://ec.europa.eu/consumers/odr. This platform allows consumers residing in the European Union to submit their consumer disputes.

25.4 Competent jurisdiction

Failing amicable resolution or mediation, any dispute relating to the formation, interpretation, execution, or termination of these GTCU will be submitted to the exclusive jurisdiction of the competent courts within the jurisdiction of DEESCO's registered office, subject to mandatory provisions relating to territorial jurisdiction in consumer disputes, which may grant jurisdiction to the courts of the consumer User's place of residence.

DEESCO SAS — General Terms and Conditions of Sale and Use — Deesco Pass®
Version 1.0 — Effective Date: June 1, 2026
RCS Paris — 19 rue de Miromesnil, 75008 Paris, France — contact@deesco.com