Privacy Policy

Introduction

Talaka LLC, doing business as Travel Vibes ("Travel Vibes," "we," "us," or "our"), is an AI-powered platform dedicated to helping users plan their travel adventures using natural language interactions. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy ("Policy") outlines how Travel Vibes collects, uses, shares, and protects personal information from users ("User," "you," or "your") of our website, platform, and services (collectively, our "Services"). By using our Services, you acknowledge and agree to this Policy.

This Policy is designed to comply with applicable privacy laws including the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents, and other applicable privacy regulations.

Personal Data Definition

For purposes of this Policy, "personal data" (also called "personal information" under CCPA/CPRA) means any information that relates to an identified or identifiable natural person. This includes, for example, your name, email address, IP address, device identifiers, usage data, or other information generated through your use of our Services.

Information We Collect

Information You Provide Directly

When you use our Services, you may provide us with:

• Travel preferences and destination interests
• Trip planning content and itineraries you create
• Messages and prompts you submit to our AI assistant
• Contact information if you reach out to us (name, email address)
• Any other information you choose to provide

Information Collected Automatically

When you interact with our Services, we automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location (city-level only)
• Usage data (pages visited, features used, timestamps, session duration)
• Log data (access times, error logs, referring URLs)
• Cookies and similar tracking technologies

Information We Do Not Collect

We do not intentionally collect sensitive personal data such as health information, financial account numbers, government identifiers, biometric data, or precise geolocation. Our Services are not designed to handle such data, and we instruct users not to submit sensitive information.

Legal Bases for Processing (GDPR)

For users in the European Economic Area, United Kingdom, or Switzerland, we process personal data only where we have a valid legal basis:

• Performance of a Contract: We process your data to provide, maintain, and support the Services you have requested.
• Legitimate Interests: We use personal data to secure the platform, detect fraud, generate analytics, and improve our features where these interests are not outweighed by your privacy rights.
• Consent: We rely on your consent for non-essential cookies, marketing communications, and any other processing that requires consent. You may withdraw consent at any time.
• Legal Obligations: We retain and disclose information as necessary to comply with legal duties.

How We Use Your Information

We use your information for the following purposes:

• Providing and operating our Services, including generating AI-powered travel suggestions
• Personalizing your experience and tuning AI features for your needs
• Analyzing usage patterns and improving performance, functionality, and reliability
• Detecting, preventing, and investigating fraud, abuse, or security incidents
• Communicating with you and providing customer support
• Complying with legal and regulatory obligations
• Enforcing our Terms of Service and protecting our rights

AI and Data Processing

Our Services use artificial intelligence to process your travel-related queries and generate recommendations. When you interact with our AI assistant:

• Your prompts and inputs are processed to generate relevant travel suggestions
• We may use anonymized and aggregated data to improve our AI models
• Your travel plans are stored to provide continuity in your planning sessions
• We do not use identifiable personal data to train general-purpose AI models without your permission
• We do not sell your personal travel data to third parties

Third-Party AI Providers

Our Services may use third-party AI providers (such as OpenAI) to process your queries. When you use our AI features, your inputs may be transmitted to these providers for processing. These transmissions are necessary to provide the Services. We encourage you to review their privacy policies:

• OpenAI: openai.com/policies/privacy-policy

Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help us operate our Services (hosting, analytics, AI providers). All service providers are contractually bound to protect your data.
• Legal Requirements: When required by law, court order, subpoena, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction.

We do not sell your personal information to third parties for marketing purposes. We do not share your personal data for cross-context behavioral advertising.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. For users in the EEA, UK, or Switzerland, we safeguard these transfers through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally recognized transfer mechanisms

Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure data storage practices
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using industry-standard practices.

Data Retention

We retain your information according to the following guidelines:

• Account Data: Retained while your account is active and for a reasonable period afterward
• Usage Data: Typically retained for up to 90 days for operational purposes
• Log Data: Retained for up to 90 days unless required longer for legal purposes
• Anonymized Data: May be retained indefinitely for analytics and improvement purposes

You may request deletion of your data by contacting us. Some data may be retained as required by law or for legitimate business purposes (fraud prevention, legal defense).

Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Strictly Necessary: Essential for the Services to function (session management, security)
• Analytics: To understand how users interact with our Services and improve performance
• Functional: To remember your preferences and settings

You can control cookies through your browser settings. Disabling certain cookies may affect functionality of our Services. We honor "Do Not Track" signals and Global Privacy Control (GPC) where required by law.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal exceptions)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

For California Residents (CCPA/CPRA)

California residents have additional rights under CCPA/CPRA, including the right to know what personal information we collect, the right to delete, and the right to opt-out of "sales" or "sharing" of personal information. We do not sell or share your personal information as defined under California law.

For EEA/UK/Swiss Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have the rights described above and may lodge a complaint with your local supervisory authority if you believe your rights have been violated.

To exercise your privacy rights, please contact us at team@travelvibes.ai. We will respond to verified requests within 30 days (or as required by applicable law).

Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a child without verifiable parental consent, we will promptly delete it. If you believe we may have collected such data, please contact us immediately.

Links to Third-Party Sites

Our Services may contain links to third-party websites or services that are not controlled by Travel Vibes. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated Policy on our website with a new "Last Updated" date. For material changes, we will provide at least 30 days' advance notice by email or prominent notice on our Services. Your continued use after changes are posted constitutes acceptance of the revised Policy.

Severability

If any provision of this Policy is found to be unlawful, void, or unenforceable, that provision will be deemed severed and will not affect the validity of the remaining provisions.

Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Email: team@travelvibes.ai

Company: Talaka LLC (doing business as Travel Vibes)

We aim to respond to all inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.