Privacy policy

1. Data controller

The data controller is Mick Dupont, 10 rue de la Paix, 75002 Paris, France. Contact for any privacy request: help@lesfrenchiestravel.com.

No data protection officer (DPO) has been appointed. For any question about your personal data, contact help@lesfrenchiestravel.com.

2. What data we collect

• Account data: email address, name, and authentication details (via magic-link sign-in).
• Trip and usage data: itineraries, saved favourites, checklists, trip preferences (party, budget, dates, neighbourhoods) and shared-trip / guest interactions.
• Payment data: when you purchase premium access, your payment is processed by Stripe. We store a Stripe customer identifier and your access status, but we never receive or store your full card number.
• Technical data: IP address, device and browser information, and — only with your consent — analytics and usage events.

3. Purposes and legal bases

• Providing the Service, your account and your saved trips — performance of a contract (Art. 6(1)(b) GDPR).
• Processing purchases and preventing fraud — performance of a contract and legal obligation (Art. 6(1)(b) and (c)).
• Sending service and transactional emails — performance of a contract; commercial emails, where sent, rely on consent or soft opt-in.
• Measuring and improving the Service through analytics — your consent (Art. 6(1)(a)), collected via the cookie banner.
• Ensuring security and complying with our legal obligations — legitimate interest and legal obligation.

4. Recipients and processors (sous-traitants)

We share data only with providers acting on our instructions as processors:

• Supabase, Inc. — database, authentication and hosting of application data.
• Stripe Payments Europe, Ltd. — payment processing.
• PostHog (EU region, eu.i.posthog.com) — product analytics, loaded only after consent.
• Vercel Inc. — application hosting and delivery.
• Mapbox, Inc. — map rendering and geocoding.
• Resend (e.g. Resend / SMTP) — transactional and sign-in emails.

5. International transfers

Some processors are located outside the European Union (notably in the United States). Such transfers are governed by appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

6. Retention

• Account and trip data: for the life of your account, then deleted or anonymised within 12 months of account closure.
• Purchase and invoicing records: retained for the legal accounting period (10 years in France).
• Analytics data: retained for 14 months.

7. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. To exercise these rights, contact help@lesfrenchiestravel.com.

You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

8. Cookies

The Service uses cookies and similar technologies. Non-essential (analytics) trackers are placed only with your consent. See our Cookie policy for details and to change your choices at any time.