Privacy Policy

Last updated: April 7, 2026

Itinara ("we", "us", "our") operates itinara.ai. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website.

1. Information We Collect

Information You Provide

• Contact information: name and email address when you use our contact form or subscribe to our newsletter
• Account information: email, display name, and preferences if you create an account
• AI Planner inputs: travel preferences, dates, budget, and interests you provide to the AI trip planner

Information Collected Automatically

• Usage data: pages viewed, time spent, clicks, and navigation patterns
• Device information: browser type, operating system, screen resolution, and language
• IP address: used for approximate geolocation (country/region level) and security
• Cookies and similar technologies: see our Cookie Policy

2. How We Use Your Information

• To provide and improve the Service, including personalized itineraries and recommendations
• To respond to your inquiries and support requests
• To send newsletters and updates (only with your consent; you can unsubscribe anytime)
• To analyze usage patterns and improve user experience
• To prevent fraud and ensure security
• To comply with legal obligations

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Consent: for newsletters, cookies, and optional data collection
• Legitimate interest: for analytics, security, and service improvement
• Contract performance: to provide the services you request
• Legal obligation: to comply with applicable laws

4. Your Rights

For All Users

• Access, correct, or delete your personal information
• Opt out of marketing communications
• Request a copy of your data

Additional Rights for EEA Residents (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Additional Rights for California Residents (CCPA/CPRA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise any rights, please use our contact form.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: hosting (Vercel), analytics (privacy-respecting), email delivery
• Legal requirements: when required by law, court order, or governmental authority
• Business transfers: in connection with a merger, acquisition, or asset sale

6. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, or as required by law. You may request deletion at any time.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (HTTPS), secure data storage, and access controls. However, no method of transmission over the Internet is 100% secure.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR and other applicable regulations.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service. The "Last updated" date at the top indicates the most recent revision.

11. Contact

For privacy-related inquiries, please use our contact form or email us at support at itinara dot com.