Privacy policy
This page explains which data Dendo processes and what it does with it.
Data controller and contact
Thibault Ballof, an individual, is responsible for processing the data. To exercise your rights, write to moi@thibault-ballof.fr.
Data processed and purposes
Dendo processes your account data: email address, password hashed with bcrypt, and Google or Apple sign-in identifier. It also processes your preferences, trips and messages in your conversations with the concierge to provide these services. For hotel bookings, it processes the names and contact details of the booking holder and travelers. Usage events are linked to your account to measure use of the service.
Usage events
Usage events are used to measure use of the service. This processing is based on legitimate interest. Events remain linked to your account for 13 months, then are anonymized: the link to your account is removed and the events are retained.
Administrator access to conversations
A Dendo administrator may read a conversation with the concierge for support and to improve the quality of replies. Each reading is logged by the server: the log records which administrator read the conversation and when. This log is retained.
Account deletion
Deleting your account takes effect immediately. Your conversations, trips, preferences and sign-in identities are deleted. Usage events immediately lose their link to your account; aggregate statistics remain. For a hotel booking, the names of the booking holder and travelers are erased. Only the accounting record — price, dates, hotel and status — is retained.
Payment
Payment for a hotel booking is entered in Nuitée's payment module, operated by Stripe. Dendo neither sees nor stores any card data.
Processors and third parties
OpenAI receives message content to produce concierge replies. LiteAPI and Nuitée handle hotel search and booking, with payment via Stripe. Viator, GetYourGuide, Civitatis and Travelpayouts/Aviasales are affiliate partners: you are redirected to their site, where their own policy applies. OVH provides hosting and sends emails. Google and Apple handle sign-in if you choose it. MapTiler and Mapbox display maps. Some processors, such as OpenAI, may process data outside the European Union.
Your rights
You may request access to, correction, erasure, restriction and portability of your data, and object to its processing. You can delete your account from the account area. You may also file a complaint with the CNIL.
Last updated: 29 September 2026.