Last updated: 26 October 2026.
We collect little data: what you write to us in the contact form, the email address you give to our newsletter, and what we need to sell and deliver Agent A\lex to you. The website sets no cookies and we sell no data.
This policy applies to the website www.inexpeditions.com, in French and in English.
in:Expeditions SAS, 8 rue Lacépède, 75005 Paris, France, SIREN 830 860 607, represented by Florian Guillaume, founder.
For any question about your data: bonjour@inexpeditions.com.
Data: first name, last name, organisation, description of your project, phone number (optional), email address, plus the page you came from and the language of the page.
Purpose: to answer your request and to prepare and follow up a proposal for a learning expedition, a retreat or a study trip.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering people who write to us (Article 6(1)(f)).
How it works: the form is processed by Netlify Forms, which stores the request and sends it to us by email.
Retention: 3 years from our last exchange. If the request leads to a contract, the data related to that contract is kept for the duration of the relationship, then 5 years (French civil limitation period), and 10 years for accounting records.
Our newsletter is published on Substack (inexpeditions.substack.com). When you enter your email address in a form on the website, you are redirected to Substack's sign-up page, where the subscription takes place. The website itself does not keep your address.
Data: email address, and the information Substack collects on its platform (for example email opens), under its own privacy policy.
Purpose: to send you the in:Expeditions newsletter.
Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every issue.
Retention: until you unsubscribe.
Payment takes place on a secure Stripe page. Your card details are entered at Stripe and are never passed on to us.
Data we receive from Stripe: name, email address, country and billing address if you provide it, offer purchased, amount, date and status of the payment, any promotion code.
Purposes: to perform the sale, deliver the file and, for the "A\lex and its agents" offer, your access key; to issue invoices; to answer your requests; to keep our accounts.
Legal bases: performance of the contract (Article 6(1)(b) GDPR) and our legal accounting and tax obligations (Article 6(1)(c)).
Retention: 10 years for accounting records (Article L123-22 of the French Commercial Code); 3 years after our last exchange for support messages. Stripe keeps the payment data the law requires it to keep.
Stripe also processes some data on its own behalf, in particular to prevent fraud, under its privacy policy.
With the "A\lex and its agents" offer, you receive an access key to the A\lex MCP server. This key is a signed token that contains your purchase email address, the offer and its expiry date. It is generated at delivery and we do not store it in a database.
When your team queries the MCP server, the request (the tool called and its search keywords) is processed to answer it and is not recorded by us. Our host may keep technical logs, described below.
A\lex runs in your own AI (Claude, ChatGPT, Le Chat, Gemini). Your conversations with A\lex are processed by the provider of that AI, under its own terms: in:Expeditions has no access to them.
Legal basis: performance of the contract (Article 6(1)(b) GDPR). The key expires 12 months after it is issued.
We measure traffic on the website with Cloudflare Web Analytics. This tool sets no cookies, creates no identifier and does not follow visitors from page to page or from site to site. It gives us overall statistics: number of visits, page views, referring sites, countries, browser types.
We receive no data that could identify you. Legal basis: our legitimate interest in understanding how the website is used in order to improve it (Article 6(1)(f) GDPR).
Like any web server, the server of our host Netlify receives the IP address and technical information of each connection. These logs are used for the security and proper operation of the website (Article 6(1)(f) GDPR) and are kept by Netlify for a limited period, under its policy.
Messages you send to bonjour@inexpeditions.com, and contact form notifications, arrive in our mailbox, hosted by Google Workspace.
Retention: 3 years after the last exchange, except messages related to a contract or an invoice, which are kept with those records.
The website sets no cookies. After the purchase of Agent A\lex, the /alex page keeps in your browser's local storage the language of the page and, for the "A\lex and its agents" offer, your access key, so it can show it to you again. These items are needed for the service you asked for, stay on your device and are erased when you clear your browsing data.
Your data is only accessible to the members of the in:Expeditions team who need it, and to the following providers, each for its own task:
Netlify, Inc. (United States): website hosting, processing of the contact form and of the delivery of A\lex.
Substack, Inc. (United States): publication and sending of the newsletter.
Stripe Payments Europe, Limited (Ireland), and the companies of the Stripe group: online payment.
Cloudflare, Inc. (United States): cookieless audience measurement.
Google Ireland Limited (Ireland), and the companies of the Google group: email (Google Workspace).
We do not sell or rent any data. We only disclose your data to an authority when the law requires us to.
Netlify, Substack and Cloudflare are based in the United States, and Stripe and Google may process data there. These transfers are covered by the standard contractual clauses adopted by the European Commission and, when the provider is certified, by the EU-US Data Privacy Framework.
You can obtain a copy of these safeguards by writing to bonjour@inexpeditions.com.
The website is served over HTTPS only. Access keys are signed, payments go through Stripe, and access to the tools that hold your data is limited to the team members who need it.
You have the right to access, rectify and erase your data, to restrict and object to its processing, to data portability, and to withdraw your consent at any time. Under French law, you can also give instructions on what happens to your data after your death.
To exercise these rights, write to bonjour@inexpeditions.com. We answer within one month, which may be extended by two months for a complex request; we will tell you if so. If we have reasonable doubts about your identity, we may ask you for proof.
For the newsletter, the unsubscribe link in every issue is enough.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the authority of your country of residence in the European Union.
We may change this policy, for example when we change providers. The date of the latest update appears at the top of the page.
Last updated: 26 October 2026.
Agent A\lex