voly.
FR EN

Privacy policy

Last updated: October 25, 2026. This policy applies to Voly (voly.voyage) and follows Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25).

Person in charge of personal information protection

Voly's person in charge of personal information protection can be reached at [email protected]. Use this address for any question, access, correction or deletion request, or complaint.

What we collect

  • Your email address, your language and the departure airport(s) you choose (any real airport can be chosen: Voly then starts watching it), plus any price watches you create.
  • Proof of your consent: date and time, the text you accepted (with its version) and your IP address at signup.
  • Your plan (free or Premium) and, for Premium, the subscription identifiers assigned by Stripe. Payments are handled by Stripe: Voly never sees or stores your card number.
  • The history of emails sent to you and their delivery status (delivered, bounce, complaint, unsubscribe), reported by our email provider.
  • Minimal technical data needed to run and secure the site: IP address and requested page in server logs, and error reports from which email addresses and personal links are removed before sending.

We do not collect your name, phone number or location. There is no password account: you manage your subscription through the personal link in our emails.

What it's used for

  • Confirming your signup (double opt-in), sending deal alerts for the airports you chose and messages about your account.
  • Managing your Premium subscription and billing.
  • Proving your consent and honouring your requests (unsubscribe, deletion).
  • Keeping the service secure, fixing errors and measuring traffic on public pages.

Your address is never sold or rented, and is not used for advertising. Voly uses no profiling technology and makes no decision about you based solely on automated processing: the deals you receive depend only on the airports you choose.

You consent to these uses by ticking the signup box and confirming your address. You can withdraw your consent at any time by unsubscribing.

Who has access and where information is kept

  • Duva (email delivery): in Canada. It receives your address and the content of messages.
  • OVHcloud (storage of our encrypted backups): in Canada. Backups are encrypted before they are uploaded.
  • Stripe (Premium payments): Stripe collects your payment information directly, processes it under its own privacy policy and may keep it outside Quebec and Canada, including in the United States. Voly receives from Stripe only your subscription status and identifiers.
  • Travelpayouts (affiliate partner, see below): it has no access to your email address or your signup. It may process browsing data outside Canada.
  • Cloudflare Turnstile (anti-bot check on the signup and sign-in forms): it does not receive your email address. It may process your IP address and browser signals, outside Canada, to tell a person from a robot, under Cloudflare's privacy policy.
  • Voly's administrators, as far as necessary to run the service.

We share your information with no one else, unless the law requires it. When a provider processes information outside Quebec, we limit this to what is strictly necessary (Stripe, for payment only).

Traffic analytics (Umami)

We measure traffic on public pages with Umami, an analytics tool we host ourselves (analytics.centia.ca). It sets no cookies and builds no individual profiles: it counts page views, referrer, device type, browser and country in aggregate form. This data is shared with no third party. Umami is never loaded on the signup-management, confirmation and unsubscribe pages, which contain your personal link.

Cookies and affiliate partner

Public pages (home, deals, archive) show an Accept / Refuse choice. The script from our affiliate partner Travelpayouts is loaded only if you accept; it may then set cookies and measure clicks to booking sites so that we earn a commission on bookings made through those links, at no extra cost to you. Your choice is kept for 13 months in your browser (not on our servers); you can change it at any time with the “Cookies” link at the bottom of the pages. If you refuse after accepting, also delete the cookies already set in your browser settings. Refusing removes no feature of the service. This script is never loaded on the signup-management, confirmation and unsubscribe pages. The site's fonts are hosted on our own servers. Booking links lead to sellers' sites, which have their own privacy rules.

Retention

  • While you are subscribed: your signup information.
  • Signup never confirmed: destroyed after 30 days.
  • After you unsubscribe (or an address becomes invalid): only the proof of consent is kept, for 3 years (the period during which a claim can be brought in Quebec), then destroyed automatically.
  • Encrypted backups are kept for up to 12 months on a rolling basis: a deletion disappears from them as they expire.
  • Billing data held by Stripe is kept under the legal obligations that apply to Stripe.

Security

Traffic to the site is encrypted (HTTPS), keys and passwords are kept out of the code, backups are encrypted, administrator access is protected, and the personal links of your subscription are unique and unguessable. In the event of a privacy incident presenting a risk of serious injury, we notify Quebec's Commission d'accès à l'information and the people concerned.

Your rights

At any time you can:

  • unsubscribe in one click (link at the bottom of every email) and withdraw your consent;
  • access the information we hold about you, get a copy in a structured, commonly used technological format, or have it transferred to another organization;
  • have inaccurate information corrected (you can change your airports and language from your management link);
  • ask for your information to be deleted.

Write to us at [email protected]: we reply within 30 days. If you believe your rights are not being respected, you can file a complaint with Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).

Changes

We may update this policy. The date at the top shows the latest version; for any significant change we notify you by email.