Privacy Policy

This English text is provided for convenience only. In the event of any discrepancy, the French version is the binding one.

1. WHO PROCESSES YOUR DATA

Dareviz is an online service that lets you gather the travel content you have found and turn it into an itinerary. This policy explains which data is processed along the way, why, for how long, and what you can require.

It is written in accordance with the General Data Protection Regulation (EU 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

Given its size and the nature of its processing, Dareviz is not required to appoint a data protection officer. Any question about your data is handled at the address above.

2. WHAT DATA IS PROCESSED

2.1 Your account

• First name and email address
• Password, stored in hashed form and never readable by us
• If you create your account with Google, your first name, your email address and your Google ID reach us this way, with no password for us to store
• Account creation date and date of last sign-in

2.2 Your subscription

The purchase is made from Lemon Squeezy, which sells in its own name. From it we receive the name, email address, billing country, plan chosen and payment status.

Your bank details never reach us and at no point pass through our servers.

2.3 What you gather in the service

• The links, texts and notes you submit for analysis
• The resulting activity cards, your trips and your itineraries
• The people you invite to a collaborative trip, and their contributions

2.4 The waiting list

If you sign up to be told when the mobile app launches, we keep your first name and your email address, and nothing else.

2.5 Technical data

• IP address, browser and device type, in the server logs
• Number of collections used, to apply your plan's allowance
• Sign-in dates and times, for account security
• When you sign up, an anti-bot score computed by Google reCAPTCHA from your IP address and technical signals from your browser

2.6 What we do not do

• We do not sell or rent your data to anyone.
• Neither we nor the providers that analyse your links use your content to train artificial intelligence models.
• We set no advertising cookies and no audience-measurement trackers.

3. WHY, AND ON WHAT LEGAL BASIS

Each processing operation rests on one of the bases set out in article 6 of the GDPR.

Processing	Purpose	Legal basis
Account and provision of the service	Give you access to Dareviz, analyse the links you supply, keep your trips	Performance of the contract
Subscription and billing	Take payment, issue the invoice, handle renewal and cancellation	Performance of the contract and legal obligation
Accounting	Keep accounting records	Legal obligation (art. L123-22, French Commercial Code)
Service messages	Confirmation, invoice, notice of a change or an outage	Performance of the contract
Waiting list and newsletter	Tell you about the launch, send you news	Consent, withdrawable at any time
Security and technical logs	Detect abnormal access, prevent fraud, diagnose outages	Legitimate interest in protecting the service

4. WHAT IS REQUIRED, WHAT IS NOT

An email address and a password are necessary to create an account: without them the service cannot be provided. Billing data is necessary to take out a paid subscription.

Everything else is optional. Not signing up to the newsletter, not giving your first name or not inviting other travellers has no effect on your access to the service.

5. WHO ELSE HAS ACCESS

Your data is shared only with the providers strictly necessary to run the service. Each acts on our instructions, under a processing agreement compliant with article 28 of the GDPR, except where noted otherwise below.

Hosting

Payment

Automated analysis of your content

Only the content needed for the analysis is sent to Anthropic and Google: the link or the text you submit, never your identity, your email address or your billing data. They do not keep that content beyond the processing and the technical period needed for the security of their service.

Fetching the content of the source you submit

Sign-in and security

Communication

Technical monitoring

Your data may also be disclosed to a judicial or administrative authority where the law requires it.

6. TRANSFERS OUTSIDE THE EUROPEAN UNION

Part of your data stays within the European Union: your database, with Supabase, in Frankfurt; the application server, with Railway, in Amsterdam; the showcase site, with Hostinger, in Cyprus; the fetching of source content, with Apify, in the Czech Republic; emails, with Brevo, in France; technical error monitoring, with Sentry.

Several operations involve a transfer to the United States: the service interface, with Vercel, taking payment, with Lemon Squeezy, and part of the automated analysis, with Anthropic and with Google - the latter two also contracted through their Irish entity.

These transfers are framed by the standard contractual clauses adopted by the European Commission on 4 June 2021, which require the recipient to provide protection equivalent to the GDPR, together with the supplementary measures each provider documents.

You can obtain a copy of these safeguards by writing to dareviz.contact@gmail.com.

7. HOW LONG

No data is kept indefinitely. Each period matches the purpose pursued or a legal obligation.

Data	Retention period
Account and content	For as long as the account exists, then 3 years after the last sign-in
Trips after cancellation	30 days, to give you time to export them
Accounting records and invoices	10 years, legal obligation
Bank details	Never kept by Dareviz
Waiting list and newsletter	Until consent is withdrawn, then 3 years at most
Technical logs	12 months

An account inactive for three years receives a reminder message. Without a reply from you, it is deleted.

8. COOKIES

The site uses no advertising cookies, no audience-measurement cookies and no third-party trackers.

Only cookies strictly necessary to run the service are used: keeping your session once signed in, and form security. Article 82 of the French Data Protection Act exempts these cookies from consent, which is why there is no banner.

Were an audience-measurement tool ever introduced, a banner allowing refusal as easily as acceptance would be shown beforehand, and this policy would be amended accordingly.

9. AUTOMATED DECISIONS AND PROFILING

The analysis of the links you supply is automated: that is the very purpose of the service. It produces activity cards that you remain free to edit, keep or delete.

No decision producing legal effects concerning you, or significantly affecting you, is taken solely on the basis of automated processing within the meaning of article 22 of the GDPR. No profiling is carried out for advertising purposes.

10. SECURITY

The following measures protect your data:

• Encryption of traffic between your browser and our servers (HTTPS)
• Passwords stored as hashes, never in the clear
• Access to data limited to those who need it
• Regular backups and access logging

In the event of a data breach likely to result in a high risk to your rights, you will be informed as soon as possible, and the CNIL within 72 hours, under articles 33 and 34 of the GDPR.

11. MINORS

The service is for adults only. We do not knowingly collect data concerning a minor. Were such collection reported to us, the data would be deleted without delay.

12. YOUR RIGHTS

You have the following rights over your data, which you may exercise at any time.

12.1 How to exercise them

Write to dareviz.contact@gmail.com. We reply within one month of receiving your request. That period may be extended by two months where the request is complex or where requests are numerous; you would be told within the first month, with the reasons for the extension.

We may ask for proof of identity, but only where there is reasonable doubt as to who is making the request.

12.2 Complaint to the CNIL

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority:

13. CHANGES TO THIS POLICY

This policy may change. The last-updated date at the top of this page lets you track its changes.

The version in force is always the one published on dareviz.com.

14. CONTACT

For any question about this policy or about how your data is processed: