Last updated: 1/9/2026
1. Introduction
At Aistear, we take the protection of your personal data very seriously. This privacy policy explains how we collect, use, store and protect your personal information.
By using our service, you accept the practices described in this policy.
2. Data Controller
The data controller is:
Unhandled Studio SASU
Résidence Le Fouquet, Bâtiment D7
Rue de la Reine Jeanne
13127 Vitrolles
Email: support@aistear.app
3. Data Collected
3.1 Identification Data
- First and last name
- Email address
3.2 Connection Data
- IP address
- Browser type
- Connection dates and times
- Pages visited
3.3 Usage Data
- Created itineraries
- Travel preferences
- Modification history
- Service interactions
3.4 Payment Data
Payment data is processed directly by our provider Stripe. We do not store your banking information.
4. Processing Purposes
We use your data to:
- Provide and improve our services
- Personalize your user experience
- Manage your account and orders
- Communicate with you (support, updates)
- Analyze service usage
- Comply with our legal obligations
- Prevent fraud and ensure security
5. Legal Basis for Processing
The processing of your data is based on:
- Contract execution: to provide our services
- Your consent: for sending marketing communications
- Our legitimate interests: to improve our services and prevent fraud
- Legal obligations: to comply with applicable regulations
6. Retention Period
We retain your data:
- Account data: for the entire period of use + 3 years after last connection
- Order data: 10 years (accounting obligations)
- Cookies: 13 months maximum
- Connection logs: 1 year
7. Data Sharing
7.1 Service Providers
We share your data with:
- Supabase: hosting and database
- Stripe: payment processing
- OpenAI: itinerary generation (anonymized data)
- Vercel: application hosting
- Resend: email sending
7.2 Legal Obligations
We may disclose your data if required by law or in response to valid legal requests.
8. International Transfers
Some of our providers are located outside the European Union. We ensure that these transfers are governed by appropriate safeguards (standard contractual clauses, Privacy Shield, etc.).
9. Data Security
We implement appropriate technical and organizational measures:
- Encryption of sensitive data
- Secure authentication (OAuth 2.0)
- HTTPS protocol for all communications
- Regular backups
- Restricted access to personal data
- Staff training on data protection
10. Your Rights
In accordance with GDPR, you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct your inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: limit the processing of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to withdraw consent: at any time
To exercise these rights, contact us at: privacy@aistear.com
11. Cookies
11.1 Types of Cookies Used
- Essential cookies: necessary for site operation
- Performance cookies: site usage analysis
- Functionality cookies: storing your preferences
11.2 Cookie Management
You can manage your cookie preferences from your browser settings or via our consent banner.
12. Minors
Our service is not intended for persons under 16 years old. We do not knowingly collect personal data from minors.
13. Policy Changes
We may update this privacy policy. Significant changes will be notified by email or via a notification on the site.
14. Contact and Complaints
For any questions or complaints:
- Email: support@aistear.app
- Address: Résidence Le Fouquet, Bâtiment D7, Rue de la Reine Jeanne, 13127 Vitrolles
You also have the right to file a complaint with CNIL: www.cnil.fr
