Who is responsible

Pierre-Louis Thiery EI, trading as Hospitality Steward, 6 rue Émile Dubonnet, 45240 La Ferté-Saint-Aubin, France, is responsible for the personal data described on this page.

For any question or request about your data, write to info@hospitality-steward.com.

What this page covers

This page covers visits to hospitality-steward.com, emails you send us, and signing in to the application at app.hospitality-steward.com.

Client companies put their own information into the application, and we process it on their behalf under a data processing agreement. For that information the client company is responsible, and its own privacy notice applies.

Visiting the website

The website sets no cookies, runs no analytics and loads nothing from other websites. Fonts are served from our own address.

To deliver each page, our host Vercel receives technical information: your IP address, browser type, the page requested and the time. This information is used only to serve the website and protect it against abuse. We rely on our legitimate interest in running a secure website. These logs are kept for one day.

When you email us

"Request a demo" and "Contact" open your own email program. Nothing is sent through the website.

When you email us, we receive what you choose to send, usually your name, email address, company and message. We use it to reply, arrange a demo and follow up on your request. We rely on our legitimate interest in answering business enquiries and, where you ask for a demo or an offer, on steps you ask us to take before a contract.

We keep this correspondence for three years after our last contact, unless it leads to a contract. Emails are held by our mailbox provider, OVH SAS (France), on servers in France.

Signing in to the application

To give you access, we process your name, email address, company, role and sign-in records. This is needed to provide the service your company has contracted for and to keep it secure, which is our legitimate interest and your company's.

Signing in sets the session cookies needed to keep you signed in, which end when you sign out, after 30 minutes with nothing done, or 60 days after you signed in; the time of your last action is kept on our server for the 30-minute limit, and deleted at the latest 61 days later. One more cookie remembers the company you last chose in the company selector, kept for one year. These cookies are needed for the service you use, so no consent is required.

The application sends you sign-in and reminder emails. Reminder emails carry only a reference, the register's name and dates, never counterparty names, amounts or document content.

Service providers and where data is stored

Vercel Inc. (United States) hosts the website and the application. The application's server code runs in the European Union (Paris); pages may be delivered from the Vercel server closest to you.

Supabase, Inc. (United States) runs the application database and sign-in on servers in the European Union (Paris).

Plus Five Five, Inc. (Resend, United States) sends the application's emails from Ireland. It keeps a copy of each email and its delivery records in the United States for 30 days.

Functional Software, Inc. (Sentry, United States) receives error reports from the application's pages, including the sign-in and password pages, never from the website, legal or privacy pages. They are stored in the European Union (Germany). A report describes the error and the page where it happened, and may include the signed-in user's internal account identifier (no name or email address). IP addresses are not stored.

OVH SAS (France) hosts our email.

Where a provider is based outside the European Union or can access data from there, the transfer relies on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

What we do not do

We do not sell personal data, use it for advertising, or make decisions about you by automated means.

Your rights

You may ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to info@hospitality-steward.com and we will answer within one month.

You may also complain to a data protection authority, in particular in the country where you live or work. In France, this is the CNIL.

Changes

Last updated: 20 October 2026.