Privacy Policy

1. Data We Collect

We collect the following information when you use our service:

• Email address and name (provided during signup)
• Chat messages and AI conversation history
• Travel preferences and search queries
• Trip details you create (destinations, dates, budgets)

2. How We Store Data

Your data is stored securely in Supabase (PostgreSQL database) with encryption at rest. Authentication is handled via Supabase Auth with secure, HTTP-only cookies.

3. Third-Party Services

We use the following third-party services to provide our features:

• Google Gemini — AI processing. Your chat messages are sent to Google's AI models to generate responses.
• Aviasales / Travelpayouts — Flight search data. Only search queries are sent (origin, destination, dates). No personal data is shared.
• Booking.com (via RapidAPI) — Hotel search data. Only search queries are sent. No personal data is shared.

4. Cookies

We use only essential cookies required for authentication (Supabase session cookies). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

5. Data Retention

Your account data and chat history are retained as long as your account is active. If you delete your account, your data will be permanently removed within 30 days.

6. Your Rights

You have the right to:

• Request a copy of your personal data
• Request deletion of your account and all associated data
• Update or correct your personal information via the Settings page

To exercise these rights, contact us at support@itz.life.

7. Children

Our service is not intended for users under the age of 16. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on the service.

9. Contact

For privacy-related questions, contact us at support@itz.life.