This Privacy Policy explains how HEY MAN LLC ("SPECTERS", "we", "us"), a Wyoming limited liability company, collects, uses, and protects personal data when you visit specters.fr or use the SPECTERS AI travel-planning service (the "Service"). HEY MAN LLC is the data controller for that processing.
1. What we collect
- Trip inputs. The details you give us to build your itinerary — destination, dates, number of travellers, budget, interests and preferences.
- Account data. Your email address and account settings.
- Purchase data. Records of what you bought, when, and your subscription status. We do not receive or store your full card number — card details are entered directly with our payment processor.
- Support correspondence. Messages you send us and our replies.
- Technical data. Standard information your browser sends when loading a page — IP address, user agent, and the page requested — processed by our hosting provider to serve the site and protect it from abuse.
We do not ask for and do not want special-category data (health, religion, political views) or payment card numbers. Please do not include them in your trip inputs or support emails.
2. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Generate and deliver your trip report | Trip inputs, account data | Performance of a contract |
| Take payment and manage subscriptions | Purchase data, email | Performance of a contract |
| Provide the Travel Assistant (price alerts, updates, chat) | Trip inputs, account data | Performance of a contract |
| Answer support requests | Correspondence, account data | Performance of a contract |
| Keep the Service secure and working | Technical data | Legitimate interests |
| Meet tax, accounting and legal obligations | Purchase data | Legal obligation |
| Send marketing emails, where you have opted in | Email address | Consent — withdrawable anytime |
We do not sell your personal data, and we do not share it with third parties for their own marketing.
3. Automated processing
Your itinerary is produced by automated AI systems using the trip details you provide. This produces travel suggestions only — it has no legal or similarly significant effect on you, and a human is available at support@specters.fr if you want a decision or output reviewed.
4. Who we share it with
We use a small number of service providers ("processors") who handle data only on our instructions:
- Payment processing — to take payments and manage subscriptions. Our processor is the controller of your card data under its own privacy policy.
- Hosting and content delivery — to serve this website and protect it from abuse.
- AI and travel-data providers — to generate itineraries and retrieve live flight, stay and pricing information.
- Email delivery — to send your report, service notices, and support replies.
We may also disclose data where required by law, or in connection with a merger, acquisition or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.
5. International transfers
We are based in the United States, so personal data of visitors in the European Economic Area, the United Kingdom and Switzerland is transferred to and processed in the U.S. and other countries. Where required, we rely on the European Commission's Standard Contractual Clauses, or an equivalent transfer mechanism, together with appropriate technical and organisational safeguards.
6. Cookies and tracking
This website does not set advertising or analytics cookies. Where a login or checkout is used, strictly necessary cookies may be set to keep you signed in and to complete your purchase — these do not require consent. Some pages load fonts from third-party font services, which receive your IP address in order to deliver those files.
If we later add analytics or advertising technology, we will update this policy and ask for your consent first where the law requires it.
7. How long we keep it
- Account and trip data — while your account is active, then up to 12 months after it is closed.
- Purchase and invoice records — up to 10 years, to meet tax and accounting obligations.
- Support correspondence — up to 24 months.
- Server and security logs — typically up to 30 days.
8. Your rights
Depending on where you live, you may have the right to:
- access a copy of the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data ("right to be forgotten");
- restrict or object to certain processing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing already carried out;
- opt out of the sale or sharing of personal information — note that we do not sell or share it.
If you are in the EEA you may also complain to your national supervisory authority — in France, the CNIL (cnil.fr). In the UK, the ICO (ico.org.uk).
9. Security
We use encryption in transit (HTTPS), access controls, and reputable infrastructure providers to protect your data. No system is perfectly secure, but we take reasonable steps to protect personal data and will notify you and the relevant authority of a breach where the law requires it.
10. Children
The Service is not directed to children. You must be at least 18 to use it, and we do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The current version takes effect when posted with a new "Last updated" date. If a change materially affects how we use your data, we will tell you before it takes effect.