MyTravelConnect is in development. Today, only this site and our contact addresses process personal data: our host’s connection logs and the emails you send us (last two rows of the table in section 2). The rest of this policy describes the service as it will work from its first version, open at first to invited testers.
1. Who we are
MyTravelConnect (“MTC”) is operated by Themis-X, a simplified joint-stock company (SAS) with a share capital of 1,000 euros, registered with the Paris Trade and Companies Register under number 907 686 893, 30 boulevard Masséna, 75013 Paris, France. Themis-X is the controller, within the meaning of the GDPR, for the processing described here. Themis-X is notified to Arcep, the French regulator, as a provider of data intermediation services under the EU Data Governance Act, and is listed in the European Commission’s public register.
Contact for any question about your personal data: privacy@mytravel-connect.com. Themis-X has not designated a data protection officer; Olivier Dion, managing director, is the contact for personal data.
2. What we process, why, and on what basis
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Account data: email address and password (hashed), or Google account identifier, with your email address, name and profile picture | Create and secure your account, sign you in | Performance of the contract (terms of use) | Until you close your account, or after 24 months without any sign-in, with a warning beforehand |
| Gmail connection: Google access tokens (encrypted) and the list of senders you approved or refused | Read your mailbox within the limits you set | Your consent, given when you connect your mailbox | While Gmail stays connected; deleted when you disconnect it |
| Email metadata: sender, subject, date, technical headers | Detect messages that contain travel bookings | Your consent | Not kept beyond the detection |
| Content of messages from senders you approved, attachments included | Extract travel information into your wallet | Your consent | Never kept: processed in memory and discarded |
| Travel information in your wallet: bookings, trips, preferences you enter, each with its source | Keep your wallet and let you share it | Performance of the contract | Until you delete it or close your account |
| Receipts of your decisions: consents, withdrawals, refusals and requests, with their date, the recipient designated by its own identifier and the fields concerned, never their values | Prove what you decided | Legal obligation: being able to demonstrate your consent (GDPR, Art. 7) and keeping the record of the intermediation activity (Data Governance Act, Art. 12) | 5 years after your account is closed, the civil limitation period |
| Security logs of the service: technical and pseudonymous identifiers, never the content of your data | Protect the service and detect abuse | Our legitimate interest in securing the service | 12 months |
| Your exchanges with us: emails sent to our support, personal data, security or contact addresses | Answer you and follow up your request | Our legitimate interest in answering you; for a request to exercise your rights, our legal obligation | 3 years after the last exchange; 5 years after our answer for a request to exercise your rights |
| Connection logs of this site, kept by our host: IP address, date, page requested, browser | Run and secure the site | Our legitimate interest in securing the site | The period OVHcloud sets for hosting security and its legal obligations; Themis-X looks at them only after an incident |
Sensitive data. Data revealing your health or accessibility needs will be processed only with your explicit consent, given separately. Before it, such data met in an email is neither extracted, kept nor used to infer anything.
Other people. Data about other people found in a booking (a fellow traveler, the person who booked or paid) is not attributed to you: their names stay in the booking, visible to you alone, and are never passed on; sharing the booking passes on only the number of travelers.
No automated decision with legal or similarly significant effects on you. A derived preference stays a hypothesis until you confirm it.
3. Google user data
When you connect a Google account, MTC accesses only what you authorize on Google’s consent screen:
- Sign in with Google (
openid,email,profile): your Google account identifier, email address, name and profile picture, to create your account and sign you in. Signing in with Google gives no access to Gmail. - Gmail, read-only (
gmail.metadata, thengmail.readonly), only if you connect your mailbox. Google classifies both permissions as restricted. The read permission technically covers your whole mailbox: MTC itself limits what it reads to metadata to detect bookings, then to the content of messages from senders you have approved.
How we use it
Only for the features you see in MTC: signing you in, building your travel wallet, and sharing it when you decide. We do not send, modify or delete any email.
How we store it
Email contents and attachments are processed in memory and discarded; they are never written to a database, file, log, cache or backup, and never leave infrastructure Themis-X controls, its contracted host included. They are analyzed there by AI models Themis-X operates; no outside AI service receives them. We store only the travel information extracted, with its source, in your wallet, hosted in France by OVHcloud. Your Google access tokens are stored encrypted, used only to read your mailbox within these limits, and never passed to a recipient.
How we share it
Travel information extracted from Gmail is passed only to the AI travel assistants and travel services you yourself authorize, field by field, for the feature shown in their request (the first: Gen4Travel’s Inspiration assistant, which suggests trip ideas), after showing you who receives it, why and for how long. Google’s Limited Use requirements stay attached to that information. Your emails themselves are never passed on. We never sell this data, never use it for advertising, and no one reads it, except with your explicit agreement for a support request, for security purposes, or to comply with the law.
No AI training
Data obtained from Gmail, including the information extracted from it, is not used to train any AI or machine-learning model, at MTC or anywhere else.
Limited Use
MyTravelConnect’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
You can disconnect Gmail or Google sign-in at any time in MTC, or from your Google account at myaccount.google.com/permissions. Disconnecting Gmail stops any further access at once and deletes your tokens and sender list; the information already in your wallet stays there until you delete it.
Verification by Google
Before opening Gmail access to everyone, MTC will have to obtain Google’s verification and pass an independent security assessment (CASA), renewed every year. This has not happened yet: Gmail access is not open.
4. Who receives your data
- Recipients you authorize: AI travel assistants and travel services, only for the fields, purpose and period you approved. Each is responsible for its own processing; to be admitted, it commits to its purpose, its retention period, erasure on request and no sharing beyond your authorization. Each receives an identifier created for it alone, never your email address; your address is passed on only if you authorize it, like any other information. The information you choose to share may, however, identify you.
- Our processors, bound by contract to act only on our instructions: OVHcloud (hosting, France) and Google (Google Workspace, for the emails you send to our contact addresses).
- Authorities, only when the law requires it.
5. Transfers outside the European Economic Area
Your wallet is hosted in France. No data is transferred outside the European Economic Area without a basis provided by the GDPR. Emails you send to our contact addresses are handled with Google Workspace, which may process them outside the European Economic Area; Google’s data processing terms provide the European Commission’s standard contractual clauses for this. If a recipient you choose uses your data outside the European Economic Area, its request tells you so before you agree, with the safeguard that covers the transfer.
6. Your rights
You can access, rectify, erase, restrict, object to the processing of, and port your data, and withdraw any consent at any time, from your wallet or by writing to privacy@mytravel-connect.com. We answer within one month.
Withdrawing a sharing authorization takes effect immediately at MTC: nothing more is sent to the recipient. MTC tells the recipient, which must stop using and delete what it received unless the law requires it to keep it, and you see its answer in your wallet. At any time, you can also ask a recipient, from your wallet, to delete what it holds about you; MTC passes on the request and follows up the answer.
You can complain to the CNIL, the French data protection authority (www.cnil.fr).
7. Security
Encryption in transit and at rest, access restricted to what each person’s role needs, no access to your wallet content by Themis-X staff by default. Before Gmail opens to everyone, the independent security assessment Google requires (section 3). If a data breach is likely to result in a high risk to you, we tell you without undue delay.
8. Cookies
MTC will use only cookies strictly necessary for the service: a session cookie that keeps you signed in and protects your account. They need no consent. We use no audience measurement, analytics or advertising cookies, and these public pages set no cookie at all.
9. Minors
MTC is for adults: you declare being 18 or over when you create an account.
10. Changes
We announce any material change on this page and in your wallet before it takes effect.