Privacy policy
Last updated: October 27, 2026
In short: PERQO works without a password. When you connect your Google Calendar, we readonly your busy slots (start and end), never the title, description, place or guests of your events, to send you alerts (3 a week at most) when a real deal lands on your meeting-free days. No advertising, no sale of data, no advertising or audience measurement cookies. You can erase everything at any time: “Disconnect my calendar and delete my account” on the “My account” page, or the /supprimer_mes_donnees command in the bot.
1. Data controller
The data controller is William MESSI MBASSI — trading as PERQO, publisher of the PERQO service ([to be completed]). Contact for any question about your data: hello@perqo.online.
2. The service
PERQO alerts you as soon as a direct flight in Europe from your city lands on your free days at a price well below the usual price. It is available on perqo.online, by email and through the Telegram bot@Perqo_travel_bot. PERQO does not sell tickets: it points you to offers and redirects you to the seller’s website.
3. Data we use
| Data | Why | Legal basis |
|---|---|---|
| Availability of your primary Google Calendar: busy slots (start and end) for the next two months, read with Google’s “availability” permission; Google access token (encrypted) | Find your meeting-free days and compatible flight times (leaving after your last meeting, back before the next one) | Consent (connecting your calendar, can be withdrawn at any time) |
| Email address and Google account ID (sent by Google when you connect) | Recognise you, send you the alerts if you choose email | Consent (box ticked when turning on alerts, can be withdrawn at any time) |
| First name (sent by Google, or taken from your Telegram account when you connect it) | Personalise alerts (“Camille, you’re free from…”) | Consent / performance of the service; edit or erase it at any time on the “My account” page |
| Departure city, budget, whether you can work from the destination, chosen alert channel (email or Telegram) | Pick the trips that fit your dates | Performance of the service you request |
| Subscription: plan, status, renewal date, Stripe customer and subscription IDs (never your card details) | Give access to full alerts, remind you before renewal, handle cancellation and refunds | Performance of the contract; accounting obligations for invoices (kept by Stripe) |
| Digests sent (trips, prices) and number of clicks on their links | Avoid duplicates, measure the usefulness of the service | Legitimate interest (service quality) |
| Numeric Telegram ID (we do not store your username or phone number; only your first name, see above) | Recognise you and send you your alerts | Performance of the service you request |
| Searches created with the former “Create an alert” feature (disabled, no longer monitored): departure and arrival airports, trip type, dates, flexibility, optional budget, status (active, paused, booked…) | Watch prices matching your criteria | Performance of the service |
| Your language and the state of your current conversation with the bot | Talk to you in your language and resume an alert setup where you left it | Performance of the service |
| Alerts sent: announced price, date, itinerary, offer link, number of clicks on the link, “I booked” indication | Avoid duplicates, measure the reliability of announced prices and the usefulness of the service | Performance of the service and legitimate interest (service quality) |
| How you reached the bot (e.g. which website button you used) | Know which website links are useful | Legitimate interest |
| Technical logs (internal IDs, errors) | Security and troubleshooting | Legitimate interest |
Clicks on an alert button go through a PERQO redirect address that counts the clickwithout recording your IP address or browser. Flight prices collected for your searches are not personal data.
Your “My account” page is reached through a secret personal link, with no password: do not share it.
Google Calendar. PERQO only asks for the calendar.freebusy permission (your availability) on top of your identity (name, email). We never read, copy or keep the content of your events, and we only read your primary calendar. Busy slots are replaced at each read (at most once per alert run and when you open your page) and deleted when you disconnect your calendar. You can also remove access from your Google account (Security → Third-party apps).
PERQO’s use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements. This data is only used to find your free days and flight times: it is never sold, used for advertising, read by a person, or used to train artificial intelligence models.
We do not collect any sensitive data and make no automated decision producing legal effects concerning you.
4. The website and cookies
Cookieless audience measurement. The website counts its visits with Vercel Web Analytics: pages viewed, referring site, country and device type, as aggregate statistics. No cookie is set and nothing is read from or stored in your browser; a visitor is only recognised for one day, through a technical fingerprint that is not stored, with no link to your PERQO account. These statistics are only used to improve the website (legal basis: our legitimate interest) and never for advertising. This measurement never runs on the “My account” page.
Technical cookie. A cookie is set for 10 minutes while you connect your Google Calendar (security check, strictly necessary). The website also remembers your language choice in your browser (local storage), which never leaves your device. The host may keep technical connection logs (including IP addresses) for security purposes. When you follow a link to Telegram, an airline, an agency or Google Flights, you leave PERQO: those services apply their own privacy policies.
5. Recipients and processors
Your data is never sold, rented or used for advertising. It is processed only by:
- Google LLC (United States) — sign-in with your Google account and reading your Google Calendar availability;
- Stripe (Stripe Payments Europe, Ireland) — subscription payment; PERQO never receives or stores your card details, only a customer ID, the subscription status and its renewal date;
- Vercel Inc. (United States) — hosting of the website and the bot, anonymous cookieless visit statistics;
- Neon Inc. (United States), via Vercel — database;
- Telegram — carries messages between you and the bot; Telegram acts as a separate controller for its messaging service;
- Brevo (Sendinblue SAS, France, data hosted in the European Union) — sending emails;
- Ignav (flight fare search) — receives only the airports and dates of the flights searched, never your identity or your free days;
- SerpApi (United States, Google Flights data) — confirms a route’s usual price; receives only airports and dates, never your identity;
- cron-job.org — triggers monitoring at set times, with no access to your data.
6. Transfers outside the European Union
Vercel, Neon, Google and SerpApi are US companies. Any transfer of data to the United States is covered by the safeguards provided by the GDPR (European Commission standard contractual clauses and, where applicable, the EU–US Data Privacy Framework), according to these providers’ commitments.
7. Retention
- Unconfirmed email sign-up: deleted after 30 days.
- Your calendar availability: replaced at each read; deleted, with the access token (revoked at Google), as soon as you disconnect your calendar.
- Email unsubscribe: your address is no longer used; delete all your data from the “My account” page to erase it.
- Your profile, searches and alerts: as long as you use the service, until you delete them.
- A deleted search: erased together with its collected prices and alerts.
/supprimer_mes_donneescommand: immediate and permanent erasure of your profile, searches, alerts and conversation state.- Technical logs: the host’s retention period (a few days).
- Visit statistics: only in aggregate, anonymous form, for Vercel’s retention period.
- Operating statistics (number of searches checked, alerts sent): kept without any personal data.
8. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions regarding your data after your death.
- Erase everything:
/supprimer_mes_donneescommand in the bot. - Settings, unsubscribe, calendar disconnection and deletion: “My account” page (link in every alert).
- Any other request: hello@perqo.online (reply within one month at most).
If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.
9. Security
Exchanges are encrypted (HTTPS), technical access is protected by secrets never stored in the code, and we keep data to the strict minimum.
10. Minors
The service is intended for adults. It is not designed for minors.
11. Changes
This policy may change, for example when new features are added. The update date is shown at the top of this page; you will be informed in the bot of any significant change.
This English version is provided for convenience; in case of discrepancy, the French version prevails.