Last Updated: January 11, 2026

Privacy Policy

1. Introduction

Welcome to iTravelAI ("Company", "we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our AI-powered trip planning platform.

This policy applies to all information collected through our services and/or any related services, sales, marketing, or events (collectively, the "Services").

2. Information We Collect

2.1 Personal Information You Provide

  • Account information: name, email address, password
  • Profile information: travel preferences, interests, budget preferences
  • Trip planning data: destinations, dates, accommodation preferences
  • Payment information: credit card details (processed securely via third-party payment processors)
  • Communications: messages, feedback, customer support inquiries

2.2 Automatically Collected Information

  • Device information: IP address, browser type, operating system
  • Usage data: pages visited, features used, time spent on platform
  • Cookies and tracking technologies: session data, preferences, analytics
  • Location data: approximate location based on IP address (with consent)

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide Services: Generate personalized trip itineraries, manage bookings, process payments
  • Improve Services: Analyze usage patterns, develop new features, enhance user experience
  • Communication: Send transactional emails, trip updates, customer support responses
  • Marketing: Send promotional materials, travel inspiration (with your consent)
  • Security: Detect and prevent fraud, protect against unauthorized access
  • Legal Compliance: Comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context:

  • Contract Performance: Processing necessary to provide services you requested
  • Consent: You have given clear consent for specific purposes
  • Legitimate Interests: Processing necessary for our legitimate business interests
  • Legal Obligation: Processing necessary to comply with legal requirements

5. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Cloud hosting, payment processors, analytics providers, email services
  • Travel Partners: Airlines, hotels, tour operators (only when necessary for bookings)
  • Business Transfers: In case of merger, acquisition, or sale of assets
  • Legal Requirements: When required by law or to protect rights and safety

We do not sell your personal data to third parties.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Privacy Shield Framework (where applicable)
  • Adequacy decisions by relevant data protection authorities

7. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request limitation of processing
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests or for marketing
  • Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
  • Opt-Out of Sale: California residents can opt out of data sale (we don't sell data)

To exercise these rights, contact us at [email protected]

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it.

  • Account data: Retained while your account is active, plus 30 days after deletion request
  • Trip data: Retained for 7 years for legal and tax compliance
  • Marketing data: Until you opt-out or withdraw consent

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security audits and penetration testing
  • Access controls and authentication measures
  • Employee training on data protection

10. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings. For more information, see our Cookie Policy.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance.

13. Contact Us

For questions about this privacy policy or to exercise your rights, contact us:

EU residents can also lodge a complaint with their local supervisory authority.