Data processing
Controller and roles
Controller of data relating to Host accounts, Majordia billing, the marketing website, and programs operated by Majordia:
Majordia SASU — 138 avenue Victor Hugo, 75016 Paris, France — [email protected]. Up-to-date contact details: Legal notice.
| Context | Controller | Majordia’s role |
|---|---|---|
| Host account, subscription, support, platform security | Majordia | Controller |
| Guest booklet, upsell orders, guest messages | Host | Processor |
| Majordia marketing newsletter | Majordia | Controller |
The Host must have a lawful basis and must inform Guests of the processing it carries out.
Data and purposes
Majordia processes the data necessary for:
- providing the Service (account, booklet, orders, connectivity depending on plan);
- billing and payments;
- support, security, and fraud prevention;
- product statistics and Service improvement;
- marketing newsletter (if subscribed);
- optional commercial programs (e.g. referral);
- legal obligations (accounting, responses to authorities).
Typical categories: Host identity and account data, booklet content, OTA/PMS connection data, payment data (via provider), guest orders, technical logs, exchanges with the AI assistant if enabled.
Legal bases and retention periods
Bases (Art. 6 GDPR): performance of the contract; consent (newsletter, non-essential trackers); legitimate interest (security, service improvement); legal obligation.
Retention periods (principles):
- account data: for the duration of the relationship; deletion or anonymization upon effective account closure (immediate or at the end of the open period);
- billing: statutory retention period (notably 10 years under French law);
- refund request reasons (support tickets, admin traces): 3 years after the case is closed, unless a legal obligation or ongoing dispute applies;
- booklet AI conversations: limited retention (generally 12 months);
- newsletter events: depending on configuration (by default 365 days);
- security logs: limited and proportionate retention.
Processors and transfers
Main processors:
| Provider | Role |
|---|---|
| Railway Corp. | Application hosting (site, API) |
| Neon Inc. | Database |
| Cloudflare, Inc. | CDN, DNS, network protection, Turnstile (anti-abuse) |
| Stripe, Inc. | Payments, billing, and connected accounts (Connect) |
| Resend, Inc. | Sending transactional and marketing emails |
| Sentry | Error monitoring (without voluntary sensitive data) |
| Google LLC | OAuth login (if used by the Host) |
| Channex Ltd | Messaging and OTA synchronization (optional connectivity) |
| Repull Connect | OTA/PMS reservation import (optional connectivity) |
| Pennylane SAS | Additional electronic invoicing (where applicable) |
| AI providers (e.g. LLM models via API) | Majord'IA assistant, where applicable |
| Gift voucher issuers | Referral program, where applicable |
The domain name majordia.fr is managed by Infomaniak Network SA (registrar).
Some processing may take place outside the EEA (notably Stripe in the United States) with appropriate safeguards (standard contractual clauses or equivalent). Copy available on request: [email protected].
For guest data, a DPA (Art. 28 GDPR) is available under Settings → Security (PDF download) or on request at [email protected].
AI assistance
If the assistant is enabled, exchanges are processed to respond to Guests and provide the service (quality, security). Limited retention (see above). No resale to third parties; no training of third-party general-purpose models without an appropriate legal basis. The Host may enable or disable the assistant; the Guest is informed in the booklet when it is active.
Your rights
You have the rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent (without retroactive effect). To exercise them: [email protected] (identity verification may be required). Response generally within one month.
Guests: for data under the Host’s responsibility, please contact the Host first.
Marketing: unsubscribe via the link in each email or through account preferences. Emails strictly necessary for the service (security, orders, billing) are not affected.
A complaint may be filed with the CNIL.
Cookies
Essential cookies and, with your consent, analytics trackers. Details: Cookie Policy.
Majordia implements security measures appropriate to the risk. In the event of an incident presenting a risk to your rights, the legal notification obligations will be complied with.