Privacy policy
Last updated: 31 July 2026 (version 2026-08)
Planix is an AI-assisted travel planning service. This policy explains what personal data we process, why, on what legal basis, how long we keep it and how to exercise your rights.
It is written to be read. If anything remains unclear, email us: we answer.
Who is responsible for your data
The data controller is Abdelmounaim Belghalem, sole trader, publisher of the Planix service available at https://www.planix.fr.
Full details of the publisher are set out in the legal notice.
For any question about your personal data or to exercise your rights: contact@planix.fr.
The data we process
We apply a simple principle: collect only what the service needs to work.
- Account
- Email address, preferred language, Google or Facebook account identifiers if you use them to sign in. We never store your password: it is handled by our authentication provider.
- Travel preferences
- Interests, preferred pace, travel type, weather preference.
- Sensitive preferences
- Dietary restrictions and mobility level. This information may reveal your religious beliefs or health status: we only process it with your explicit consent (see dedicated section).
- Trips
- Destinations, dates, departure city, budget, free-text requests you write, generated itineraries, flights and accommodation viewed.
- Conversations
- Your exchanges with the planning assistant.
- Payments
- History of your credit purchases and your customer identifier at our payment provider. We neither see nor store your card details.
- Feedback
- Reviews, ratings and reports you send us.
- Technical data
- IP address (truncated as soon as it is recorded), browser type, pages viewed, error logs.
Why we process it, and on what basis
Each processing activity rests on a specific legal basis under Article 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Performance of a contract (Art. 6(1)(b)) |
| Generate your travel itineraries | Performance of a contract (Art. 6(1)(b)) |
| Tailor results to your dietary and mobility needs | Explicit consent (Art. 9(2)(a)) |
| Process your payments and issue receipts | Contract (Art. 6(1)(b)) and legal accounting obligation (Art. 6(1)(c)) |
| Send you a reminder if you have not started your first trip | Legitimate interest (Art. 6(1)(f)) — you may object at any time |
| Measure usage of the service | Consent (Art. 6(1)(a)) |
| Ensure security, prevent abuse, diagnose failures | Legitimate interest (Art. 6(1)(f)) |
| Retain accounting records | Legal obligation (Art. 6(1)(c)) |
Your dietary and mobility preferences
Indicating a halal or kosher restriction may reveal religious beliefs. Indicating reduced mobility or wheelchair use is health data. European regulation places this information in a protected category and prohibits processing it without your explicit consent.
We therefore ask for separate consent, via a checkbox that is never pre-ticked. Without it, these fields are neither stored in your profile nor sent to the engine that generates your itineraries. The service remains usable, simply less finely tailored.
You can withdraw this consent at any time from your settings. Withdrawal immediately erases this information from your profile; it does not affect itineraries already generated.
The role of artificial intelligence
Your itineraries and the assistant's answers are produced by a language model provided by OpenAI. To that end, we send OpenAI the content needed for your request: destination, dates, preferences, and the text you write freely.
This data is not used to train OpenAI's models. We have a data processing agreement with this provider covering these transmissions.
No decision producing legal effects or significantly affecting you is taken automatically: the AI proposes an itinerary, it decides nothing on your behalf. Article 22 GDPR therefore does not apply.
Generated content may contain errors. Always check opening hours, prices and access conditions before you travel.
Who your data is shared with
We do not sell or rent your data. We rely on technical providers who act on our instructions and are bound by a data processing agreement.
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Clerk | Authentication and account management | United States | Data Privacy Framework + standard contractual clauses |
| OpenAI | Itinerary generation and assistant | United States | Data Privacy Framework + standard contractual clauses |
| Stripe | Payments | United States / Ireland | Data Privacy Framework + standard contractual clauses |
| PostHog | Audience measurement and session recording (with your consent) | European Union | No transfer outside the EU |
| Resend | Email delivery | United States | Data Privacy Framework |
| Trigger.dev | Background processing (itinerary generation) | United States | Standard contractual clauses |
| Duffel | Flight and accommodation search | United Kingdom | European Commission adequacy decision |
| Mapping and place information | United States | Data Privacy Framework |
Transfers outside the European Union
Some of our providers are established in the United States. These transfers are covered either by the Data Privacy Framework — an adequacy decision adopted by the European Commission in July 2023 — or by the Commission's standard contractual clauses, or both.
You can obtain a copy of these safeguards by emailing contact@planix.fr.
Our database and application servers are hosted in the European Union.
How long we keep it
These periods are enforced automatically by a daily task. Once elapsed, data is deleted, not archived.
| Data | Period |
|---|---|
| Account and preferences | Until you delete your account |
| Trips and itineraries | 3 years after creation |
| Assistant conversations | 12 months |
| Feedback and reports | 2 years |
| Technical logs | 6 months |
| Raw payment events | 90 days |
| Accounting records | 10 years (legal obligation), anonymised as soon as you delete your account |
| Analytics | 13 months for trackers, 25 months for collected data |
| Consent records | Until you delete your account |
Your rights
European regulation grants you the following rights:
- Access
- Obtain a copy of the data we process about you. An export button is available in your settings.
- Rectification
- Correct inaccurate information. Your preferences and email can be changed directly in the app.
- Erasure
- Delete your account and your data. A button is available in your settings; deletion is immediate.
- Portability
- Retrieve your data in a structured, machine-readable format. That is the same export, in JSON.
- Objection
- Object to processing based on our legitimate interest, in particular reminder emails.
- Restriction
- Ask for processing to be frozen while a dispute is resolved.
- Withdrawal of consent
- Withdraw a consent at any time, as easily as it was given. Withdrawal does not affect what was done before.
Export and account deletion can be carried out directly from your settings, without writing to us. For other rights, email contact@planix.fr.
We answer within one month. If your request is complex, that period may be extended by two months: we will tell you within the first month, and explain why.
We may ask you to confirm your identity if reasonable doubt remains about who made the request. We do not ask for identity documents by default.
Complaints
If you believe your rights are not respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr/fr/plaintes.
https://www.cnil.fr/fr/plaintesCookies and trackers
We use cookies strictly necessary for the service to work — essentially to keep you signed in. These do not require your consent.
Analytics, by contrast, is only enabled with your consent, requested on your first visit and changeable at any time from your settings.
See the cookie detailsSecurity
Exchanges with the service are encrypted in transit. Database access is restricted and authentication is delegated to a specialist provider, which means we do not store passwords.
IP addresses are truncated before being written to our logs: we keep enough to diagnose an incident, not enough to identify a device.
No system is infallible. In the event of a data breach likely to result in a high risk to your rights, we would inform you without undue delay, in accordance with Article 34 GDPR.
Minors
The service is not intended for people under 15. We do not knowingly collect their data.
If you are the legal guardian of a child under 15 whose data has been collected, email us: we will delete it.
Changes
This policy carries a version number. Any substantial change results in a new version, and consents given for an earlier version are requested again.
We notify you of significant changes by email or through an in-app notice.