Privacy Policy | VALIRIS

1. Who we are

VALIRIS SAS is an AI-powered guest communication platform for short-term rental operators. We are registered in France and act as the data controller for the personal data described in this policy.

Company: VALIRIS SAS
Country: France
SIRET: [pending registration]
Contact: contact@valiris.io

2. What data we collect

Waitlist sign-ups

When you submit your email address via the waitlist form on our website, we collect your email address. Nothing else. We use this solely to notify you when VALIRIS is available and to send you relevant pre-launch updates.

Platform accounts (post-launch)

When you create a VALIRIS account, we collect your name, email address, company name, and billing information (processed securely via Stripe). We also collect data about how you use the platform to improve the product and provide support.

Guest message data

VALIRIS processes guest messages and booking information on behalf of operators. In this context, VALIRIS acts as a data processor, not a data controller. The operator is the data controller for their guests' personal data. We process this data solely to deliver the service the operator has configured.

Chat widget

Our website includes a chat widget that lets you ask questions about VALIRIS. When you use it, the messages you type are sent to Anthropic, Inc. (a third-party sub-processor based in the United States) to generate AI responses. We do not store or retain the content of your chat messages after the session ends. Your IP address is temporarily used for rate limiting purposes during the session only and is not stored. The legal basis for this processing is legitimate interest: providing you with product information before you decide whether to sign up.

Anthropic processes data in accordance with its own privacy policy. By using the chat widget, you acknowledge that your messages will be processed by Anthropic as a sub-processor.

Usage and technical data

We collect anonymised usage data (page views, feature interactions) to understand how the product is used and improve it. This data cannot identify you personally.

3. Why we process your data

Waitlist email

Legal basis: consent. You voluntarily submitted your email. You can withdraw consent and be removed from the list at any time by emailing us.

Platform account & billing

Legal basis: contract performance. We need this data to provide the service you signed up for.

Guest message data

Legal basis: contract performance. Processed strictly to deliver the AI communication service operators have configured.

4. Who we share data with

We do not sell, rent, or trade your personal data. We share data only with the following third-party sub-processors, each of whom is bound by appropriate data protection agreements:

Sub-processor	Purpose	Location
Supabase	Database hosting	EU
Vercel	Website & application hosting	EU regions
Stripe	Payment processing	EU
Lodgify	PMS integration (user-initiated)	EU

5. How long we keep your data

Waitlist emails Until 12 months after public launch, or until you unsubscribe — whichever comes first.

Account data For the duration of your active subscription, plus 3 years after termination (for legal and accounting purposes).

Guest message data Retained and deleted at the operator's direction. Operators are responsible for their guests' data retention under GDPR.

6. Your rights under GDPR

As a resident of the European Union, you have the following rights regarding your personal data:

Right to access Request a copy of the personal data we hold about you.

Right to rectify Ask us to correct inaccurate or incomplete data.

Right to erasure Ask us to delete your personal data. We will comply unless we have a legal obligation to retain it.

Right to portability Request your data in a structured, machine-readable format to transfer to another provider.

Right to object Object to processing based on legitimate interest.

Right to restrict Ask us to limit how we use your data while a dispute or review is in progress.

To exercise any of these rights, email us at contact@valiris.io. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority: www.cnil.fr.

7. Cookies

Our website uses only essential session cookies required for basic functionality (such as keeping you logged in). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

No cookie consent banner is required for essential cookies under GDPR. If we introduce non-essential cookies in the future, we will update this policy and add a consent mechanism.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will notify active users by email or via a banner on the platform.

Continued use of VALIRIS after an update constitutes acceptance of the revised policy.