01Who processes your data, and in what capacity
The uMyris application is published by AGREGATE, a French simplified joint-stock company (SAS) with a share capital of €5,000, registered with the Chambéry Trade and Companies Register under number 104 607 791, with its registered office at 495 rue de la Martinière, 73000 Bassens, France.
AGREGATE does not act in the same capacity for every category of data. This distinction drives everything else in this document:
| Data | Who decides | AGREGATE's role |
|---|---|---|
| Host account, billing and usage data | AGREGATE | Data controller |
| Guests (bookings, messages, welcome guide) | The host using uMyris | Data processor, on the host's instructions |
| Service staff (cleaning, maintenance) | The host who engages them | Data processor, on the host's instructions |
In other words: if you are a host, we answer directly for your data. If you are a guest or a member of service staff, we act on behalf of the host, who remains your primary contact — but you can always write to us and we will pass your request on.
Contact: sas@agregate.fr.
02The data we process
If you are a host (customer)
Identity and contact details, billing and payment information, content you enter (properties, rates, instructions), a log of your actions in the application, and your exchanges with support.
If you are a guest
Name, email address, phone number, billing address where applicable, dates and details of your stay, the content of your exchanges with the host, and any information you enter yourself in the welcome guide.
If you are service staff
Identity, phone number, email address, schedules and assignments, end-of-assignment reports, and the photos and videos you upload.
In all cases
Technical connection data strictly necessary for the operation and security of the service.
03Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the subscribed service: managing bookings, stays, cleaning and maintenance | Performance of the contract |
| Communicating with guests during their stay | Performance of the contract, on behalf of the host |
| Billing and payment collection | Performance of the contract and legal obligation |
| Keeping end-of-assignment reports | Legitimate interest: establishing evidence in case of dispute |
| Securing the service and logging access | Legitimate interest |
| Meeting accounting and tax obligations | Legal obligation |
04AI assistance
uMyris offers hosts suggested replies and translation of their exchanges with guests. To do this, the content of the relevant message is sent to a large-language-model provider established in the United States.
- The suggestion is proposed, never sent automatically: the host reads it, edits it if they wish, and alone decides whether to send it.
- No decision producing legal effects is made by the model.
- Messages sent to the provider are not used to train the model.
- The transfer is covered either by the EU–US adequacy decision where the provider is certified under the Data Privacy Framework, or by the European Commission's standard contractual clauses.
Hosts who do not wish to use this assistance can disable it in their account settings; the rest of the service works exactly the same.
05How long we keep it
| Data | Retention |
|---|---|
| Active customer account | For the duration of the subscription |
| Cancelled account | 90 days, then anonymised |
| Trial account never activated | 6 months, after one reminder |
| Bookings and guest contact details | 3 years after check-out |
| Messages exchanged with guests | 1 year after check-out |
| Cleaning-report photos and videos | 15 days after check-out |
| Media attached to an open dispute | Frozen until the dispute is resolved |
| Access logs and technical audit trail | 1 year |
| Access links sent by email | 24 hours, stored hashed |
| Invoices and accounting records | 10 years (legal obligation) |
06Who can access your data
Internally, only the people who need it for their role. Every access is logged.
Externally, our processors, each bound by a contract compliant with Article 28 GDPR:
| Processor | Role |
|---|---|
| OVH SAS | Hosting of the application and data, in France |
| Large-language-model provider | Reply suggestions and translation, when the assistance is enabled |
| Payment provider | Payments and deposits |
| Email delivery service | Transactional messages |
| Booking platforms (Airbnb, Booking.com) | Booking synchronisation, at your request |
The precise identity and location of each processor is listed on the Subprocessors page (in French), kept up to date.
Your data is never sold, rented out, or shared for advertising purposes.
07Transfers outside the European Union
Hosting is located in France. Two processing activities leave the EU: the AI assistance described above, and exchanges with booking platforms when you choose to connect your listings to them.
Each is covered by an adequacy decision where applicable, or otherwise by the European Commission's standard contractual clauses.
08Security
- Communications encrypted in transit; media accessed through temporary links valid for 15 minutes to 1 hour.
- Data segregated per customer account.
- Access and sensitive actions logged.
- Email links valid for 24 hours and stored hashed.
Our security practices are described in more detail on the Security page (in French).
09Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions for your data after your death, under French law.
One address for everything: sas@agregate.fr. We reply within one month. To delete your account, a dedicated page describes the procedure: delete my uMyris account.
If you are a guest or service staff, please contact the host first — they are the controller of your data; we will pass on your request if you prefer to go through us.
If you remain unsatisfied, you can lodge a complaint with the French supervisory authority, the CNIL, or with your local supervisory authority.
10If you are a host: what you need to know
For your guests' and service staff's data, you are the controller and we are your processor. This creates obligations for both sides:
- We only process this data on your instructions and to provide you with the service.
- We assist you in answering requests from your guests and service staff.
- It is your responsibility to inform your guests about how you process their data: we provide a notice template in your name that you can adapt.
- The detailed terms are set out in the data-processing annex to the terms of use, which you accept when signing up.
11Minors
uMyris is intended for adult professionals. The application is not directed at minors and does not knowingly collect their data.
12Changes to this document
Any substantial change is flagged in the application and, for hosts, announced by email before it takes effect. The date of the last update appears at the top of this page.