Privacy policy

1. Who is responsible for your data

SLOT Tech SAS operates Arie and is the controller for the personal data described in this notice. Our registered office is at 122 rue Amelot, 75011 Paris, France. For privacy questions or rights requests, contact support@arie.guide.

This notice covers the Arie website, the Arie application, enquiries and creator applications. It explains what we collect, why we use it, who receives it and the choices available to you. Where a feature needs a separate notice, we provide it at the point of collection.

2. Information you provide

Account details: your email address, account identifier and profile information supplied when you sign in. Your chosen sign-in provider may supply these details. Required information lets us create and secure your account.

Discovery and saved content: your interests, destination, dates, budget and travel context, together with searches, feedback, saved places, lists and notes. We use this information to provide the features you request. Optional fields can be left blank, although suggestions may then be less specific.

Creator applications: your name, email, profile or website link, creator activity and, if you choose to provide it, your guide idea. We use these details to assess your application and contact you about creator early access. We may consult the public professional profile you submit. Your application is private and is not permission to send unrelated promotions.

Support and purchases: messages you send us, order and payment references, amount, currency, credit balance and transaction history. Our payment provider handles payment credentials and supplies transaction confirmations. Do not send full card numbers or unnecessary identity documents to support.

Content reports may include the reporter’s contact details, the content concerned and information about affected people. We use these details to review the report and meet our legal duties. Public availability of information does not remove data-protection rights.

Avoid entering health information, religion or other sensitive personal data into searches, notes or applications. Family or Kids describes a travel party; it does not require children’s names or an account for a child.

3. Information collected when you visit

We process connection and service information, such as browser and device details, IP addresses, timestamps, errors and security events, to deliver and protect the service. Diagnostic records may include information needed to investigate a particular request or account problem.

With your relevant cookie choice, website analytics and advertising tools collect visit and interaction information, identifiers and referral or campaign information. The Cookie policy explains the providers, purposes, storage and controls. The website’s analytics events do not include creator-form contents, your email, travel dates, notes or selected interests.

4. Purposes and legal bases

Accounts, requested discovery, saving content and purchased credits: performance of our contract with you, or steps you ask us to take before entering a contract.

Creator applications: steps you request before a potential collaboration. If you act for an organisation, our legitimate interest in assessing and managing that business relationship applies.

Technical support, service security, fraud and abuse prevention, and legal claims: our legitimate interests in protecting the service, its users and our rights, subject to necessity, proportionality and your right to object.

Content reports and restrictions: our legitimate interests in operating a lawful service and protecting affected people, and compliance with a legal obligation where action is required by law.

Accounting records and legally binding requests: compliance with legal obligations.

Optional audience measurement, advertising tracking and promotional messages requiring permission: your consent. Necessary account or purchase messages do not depend on marketing consent. A creator application does not subscribe you to general marketing.

5. Personalisation and automated processing

Arie uses automated processing, including AI, to select, rank and explain places using your interests, travel context and interactions. This may involve profiling for recommendations. It does not make decisions with legal or similarly significant effects on you.

Specialist processing providers may receive the request and context needed to produce a recommendation. Do not include unnecessary sensitive information. Recommendations can be incomplete or inaccurate; check important details with the venue. Contact us if you have questions about personalisation or wish to exercise your data rights.

6. Who can receive information

Authorised SLOT Tech personnel receive information needed for their work. We use contracted providers for hosting and secure storage, account access, payment processing, email delivery, technical support and diagnostics, and automated recommendation processing. Providers receive the information needed for the relevant function, rather than every category of information listed in this notice.

These providers operate in the European Economic Area and the United States. Mapping and place-information services may process the location or request needed for the feature. They do not receive the contents of your creator application.

When you allow the corresponding category, website audience measurement uses Google Analytics (Google Ireland Limited) and Amplitude (Amplitude, Inc.); advertising measurement and audiences use Meta (Meta Platforms Ireland Limited) and X (X Internet Unlimited Company, the EEA provider of X). Their privacy information and your controls are linked in the Cookie policy. Payment or advertising providers may also process information as controllers for purposes described in their own notices.

When you share a list, anyone who receives its link may pass it on. If a feature allows public publication, the content and displayed author information can be seen by others and may be indexed by search engines. Check the visibility before sharing. Removing content from Arie does not immediately remove independent copies or search-engine caches. Do not share confidential information or other people’s personal data without an appropriate basis.

We may disclose information to comply with law, protect rights in a dispute, or carry out a corporate transaction with appropriate safeguards. Opening an external ticket, booking, social or AI service takes you to that provider, which applies its own terms and privacy notice.

7. International transfers

Some providers process or access information outside the European Economic Area, including in the United States. European hosting or an EU service endpoint does not mean that every processing activity stays in the EEA.

Transfers requiring protection under data-protection law must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses and supplementary measures where necessary. Contact support@arie.guide to ask which safeguards apply to your data and obtain an accessible copy, with confidential information protected where necessary.

8. Retention and deletion

We keep account details, preferences and saved content while needed to provide the account features you use. You can delete your account in settings or request deletion at support@arie.guide. Your request covers your profile and associated discovery history, places, lists, notes and published guides, subject to limited lawful retention.

Creator applications are kept while we assess the potential collaboration and conduct related exchanges. Once the assessment and exchanges end, we remove information no longer needed, unless it is required for an ongoing collaboration or a specific legal claim. Support correspondence is kept for resolving the request and any related complaint; technical records are kept for investigating faults, security incidents and documented abuse. Retention after the original purpose ends must be justified and access restricted.

Invoices and accounting evidence are kept for 10 years from the close of the relevant financial year where French accounting law requires it. Other records kept for a legal obligation or claim are limited to what that purpose requires. A minimal account-closure record may be retained to prevent fraud or repeated abuse of starter allowances, only for as long as necessary for that purpose; it is not an active account and is not used for marketing. A minimal record of a marketing objection may be retained to respect it.

Cookie settings are remembered for 180 days and website campaign-attribution cookies for up to 90 days. Those periods concern browser storage; they are different from retention of analytics events or evidence of a consent choice. The Cookie policy provides further information.

Deletion from active systems and expiry of protected backups are separate steps. We arrange deletion with providers acting on our behalf. Providers with their own legal obligations may retain records required by those obligations. We take the steps required by law concerning public personal data and its recipients, but cannot guarantee immediate erasure of independent copies or search-engine caches. We can confirm the scope and status of your deletion request.

9. Your rights

Subject to the applicable conditions, you can access and obtain a copy of your data, correct it, request erasure, restrict processing, and receive portable data in a structured, commonly used, machine-readable format. You can object to processing based on legitimate interests.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of earlier processing. Under French law, you may also give instructions concerning your personal data after your death.

Write to support@arie.guide, preferably from your account email, describing your request. Additional identity information is requested only when necessary and proportionate. Requests are normally free. We respond without undue delay, ordinarily within one month. If complexity or the number of requests requires up to two additional months, we explain this within the first month.

If we cannot fulfil a request, we explain the reason and available remedies. You may complain to the CNIL or another competent supervisory authority, including where you habitually live or work, without contacting us first.

• CNIL: exercise your data-protection rights

10. Marketing choices

You can object to direct marketing at any time, including related profiling, using the unsubscribe link or support@arie.guide. For other processing based on legitimate interests, explain your particular situation so we can assess your objection. You do not need to delete your account to exercise these rights.

Optional website tracking can be changed or withdrawn through Cookie settings in the footer. Rejecting it does not prevent you from browsing or applying as a creator.

11. Security and age

We use technical and organisational measures appropriate to the risks, including restricting access to personal data. No online service can guarantee absolute security. Report a suspected issue to support@arie.guide without sending passwords or payment credentials.

Arie accounts are intended for people aged 18 or over. An adult can discover places for a family trip. Contact us if you believe a minor has opened an account or submitted personal information so we can assess the situation and take appropriate action.

12. Changes and contact

We update this notice when processing changes. Material changes receive appropriate notice and a new consent where required. Updating a notice does not itself authorise a new purpose. Contact support@arie.guide for privacy questions and rights requests.