Privacy Policy · Politique de confidentialité

Effective Date: 16 April 2026 · Last updated: 16 April 2026

English version below · Version française ci-dessous

Privacy Policy

1. Introduction

FlashVoyage (“we”, “us”, or “the Service”), publisher of flashvoyage.com, respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, with whom we share it, and your rights under the General Data Protection Regulation (GDPR) and applicable French law. It applies to the FlashVoyage website, content pipeline, and the FlashVoyage application that integrates with TikTok, Instagram, Facebook, and Threads.

2. Data Controller

• Publisher: FlashVoyage
• Website: flashvoyage.com
• Contact: [email protected]
• Hosting: OVHcloud SAS, 2 rue Kellermann, 59100 Roubaix, France

3. Data Collected

3.1 Website Visitors

• Anonymized analytics via Google Analytics 4: page views, session duration, approximate geographic location (country/city), device type, referrer.
• IP address: anonymized at collection, never stored in clear text.
• Cookies: only for Travelpayouts affiliate widgets and GA4 analytics. No advertising cookies.
• Contact form submissions: email address and message content, only if you proactively contact us.

3.2 TikTok Integration

Under the TikTok Content Posting API and Login Kit, we collect the following data when you authorize the FlashVoyage application:

Performance metrics (views, likes, comments, shares) are retrieved from the TikTok Research and Display APIs and aggregated for internal editorial analysis only. We do not collect personal data of TikTok viewers, followers, or commenters.

3.3 Meta Platforms (Facebook, Instagram, Threads)

The Service uses the Meta Graph API to publish content to FlashVoyage-owned Facebook Pages, Instagram Business accounts, and Threads. We retain OAuth access tokens and aggregated performance metrics (impressions, likes, comments) on FlashVoyage accounts only. We do not collect personal data of third-party users.

4. Data Retention

• OAuth access tokens (TikTok, Meta): retained while the integration is active; deleted within 7 days of authorization revocation.
• Video files (MP4 sources): retained in intermediate storage for up to 30 days, then deleted.
• Content metadata and performance metrics: retained for up to 24 months for editorial analysis.
• Contact form submissions: retained for up to 36 months after the last exchange.
• Analytics data (GA4): retained for 14 months, then automatically deleted by Google.
• Server access logs (OVH): retained for 12 months as required by French law (LCEN Art. 6.II).

5. Data Sharing and Sub-processors

We do not sell personal data. We share limited data with the following sub-processors strictly necessary for the Service to function:

• OVHcloud SAS (France) — hosting provider. Data hosted in EU.
• Google LLC (United States) — Google Analytics 4 (anonymized). Data transferred under EU Standard Contractual Clauses.
• TikTok Pte. Ltd. (Singapore) — TikTok Content Posting API and Login Kit. Data governed by TikTok’s own Privacy Policy.
• Meta Platforms Ireland Ltd. (Ireland) — Facebook, Instagram, Threads integrations. Data governed by Meta’s own Privacy Policy.
• Anthropic PBC (United States) — Claude AI used for content generation. Data transferred under EU Standard Contractual Clauses.
• Travelpayouts LTD (Cyprus) — affiliate partner for travel links. Click tracking only.

6. International Data Transfers

Some of our sub-processors are located outside the European Economic Area. Transfers to the United States (Google, Anthropic, Meta US entities) are protected by EU Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU-US Data Privacy Framework. Transfers to TikTok (Singapore/China) are subject to TikTok’s own data-transfer safeguards.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — obtain a copy of the data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure (“right to be forgotten”) — request deletion
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (in France: CNIL)

To exercise any of these rights, email [email protected] with the subject line “GDPR Request”. We respond within 30 days.

8. OAuth Authorization Revocation

You may revoke the authorization granted to the FlashVoyage application at any time:

• TikTok: Profile → Settings and privacy → Security and login → Apps that can access your TikTok account → remove FlashVoyage.
• Facebook / Instagram: Settings → Apps and websites → Active → remove FlashVoyage.
• Threads: Settings → Privacy → Account authorizations.

Upon revocation, all corresponding OAuth tokens are deleted within 7 days. You may also email us to request immediate deletion.

9. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, contact us at [email protected] and we will delete it promptly. For users in the European Union, this age threshold is 16 in accordance with GDPR Art. 8 (or lower if national law permits).

10. Cookies

We use the following categories of cookies:

• Strictly necessary: session, security. Cannot be disabled.
• Analytics (Google Analytics 4): measures aggregated audience. Anonymized IPs, opt-out possible via browser settings.
• Affiliate tracking (Travelpayouts): only set when you click an affiliate link. Used to attribute commission without surcharge to you.

We do not use advertising or behavioral profiling cookies.

11. Security

Personal data is stored on servers hosted by OVHcloud in France with HTTPS-only transport, encrypted backups, and restricted access. OAuth tokens are stored encrypted at rest.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced on flashvoyage.com. The “Last updated” date at the top indicates the latest revision.

13. Contact

Questions, requests, or complaints regarding this Privacy Policy:

• Email: [email protected]
• Subject line suggestions: “GDPR Request”, “Data Deletion”, or “Privacy Question”
• Postal: FlashVoyage, c/o OVHcloud, 2 rue Kellermann, 59100 Roubaix, France

Politique de confidentialité (version française)

Date d’entrée en vigueur : 16 avril 2026 · Dernière mise à jour : 16 avril 2026

1. Introduction

FlashVoyage (« nous », « le Service »), éditeur de flashvoyage.com, respecte votre vie privée. Cette politique explique quelles données personnelles sont collectées, comment elles sont utilisées, combien de temps elles sont conservées, avec qui elles sont partagées, et vos droits au titre du RGPD. Elle s’applique au site, au pipeline de contenu, et à l’application FlashVoyage qui s’intègre avec TikTok, Instagram, Facebook et Threads.

2. Responsable de traitement

• Éditeur : FlashVoyage
• Contact : [email protected]
• Hébergeur : OVHcloud SAS, 2 rue Kellermann, 59100 Roubaix, France

3. Données collectées

Visiteurs du site : analytics anonymisées (Google Analytics 4), IP anonymisée, cookies strictement nécessaires + analytics + affilié Travelpayouts, messages de contact si vous nous écrivez.

Intégration TikTok : via Login Kit et Content Posting API, scopes user.info.basic (open ID, nom d’affichage, avatar), video.upload (fichiers vidéo, titres, descriptions), video.publish (publication et jeton OAuth). Aucune donnée personnelle de spectateurs ou followers n’est collectée.

Intégration Meta (Facebook, Instagram, Threads) : jetons OAuth et métriques agrégées sur les comptes FlashVoyage uniquement.

4. Durée de conservation

• Jetons OAuth : supprimés dans les 7 jours suivant la révocation
• Fichiers vidéo sources : 30 jours
• Métadonnées et métriques : jusqu’à 24 mois
• Messages de contact : jusqu’à 36 mois après le dernier échange
• Données GA4 : 14 mois (suppression automatique Google)
• Logs serveur (OVH) : 12 mois (obligation légale LCEN Art. 6.II)

5. Sous-traitants

OVHcloud (France, UE), Google (États-Unis, Clauses Contractuelles Types UE), TikTok Pte. Ltd. (Singapour), Meta Platforms Ireland (Irlande, UE), Anthropic PBC (États-Unis, CCT), Travelpayouts (Chypre, UE).

6. Transferts internationaux

Les transferts hors UE (Google, Anthropic, entités US de Meta) sont encadrés par les Clauses Contractuelles Types (Art. 46 RGPD) et, le cas échéant, le EU-US Data Privacy Framework. Les transferts vers TikTok Singapour/Chine sont soumis aux garanties propres de TikTok.

7. Vos droits (RGPD)

Droits d’accès, rectification, effacement, limitation, portabilité, opposition, retrait du consentement, réclamation auprès de la CNIL. Exercice via [email protected] avec pour objet « Demande RGPD ». Réponse sous 30 jours.

8. Révocation OAuth

TikTok (Profil → Paramètres → Sécurité et connexion → Applications), Facebook / Instagram (Paramètres → Applications et sites web), Threads (Paramètres → Confidentialité → Autorisations de compte). Jetons supprimés dans les 7 jours.

9. Protection des mineurs

Le Service n’est pas destiné aux enfants de moins de 13 ans (16 ans dans l’UE selon RGPD Art. 8). Nous ne collectons pas sciemment de données de mineurs. Si vous estimez que nous avons collecté de telles données, contactez-nous.

10. Cookies

Strictement nécessaires (session, sécurité) ; analytics GA4 (IPs anonymisées, opt-out via navigateur) ; tracking affilié Travelpayouts (uniquement au clic). Aucun cookie publicitaire ou de profilage comportemental.

11. Sécurité

Hébergement HTTPS chez OVHcloud France, sauvegardes chiffrées, accès restreint. Jetons OAuth chiffrés au repos.

12. Modifications

FlashVoyage se réserve le droit de modifier cette politique. Les changements importants seront annoncés sur flashvoyage.com.

13. Contact

Email : [email protected]. Adresse postale : FlashVoyage, c/o OVHcloud, 2 rue Kellermann, 59100 Roubaix, France.