Privacy Policy
We collect what is needed to plan your vacation, keep it for a limited time, and let you view, export and delete it.
Last updated:
Draft pending legal review — this text is not final and has not yet been approved by a lawyer.
What we collect
Data is collected per purpose, and only what the service needs.
- Trip request: destination, dates, traveler count and children ages, budget and preferences.
- Account: email or sign-in identifier, language and currency.
- Service usage: operational events and pseudonymous identifiers used to improve the product.
- Sensitive preferences (kosher/halal, allergies, accessibility) — only with explicit consent, stored encrypted.
Why we use it
To generate a tailored plan, compute a budget, alert you to price changes, provide support, and meet legal obligations.
Sharing with third parties
To search availability and pricing we query travel and information providers. We do not sell personal data.
A child age is passed to a supplier when required for pricing; full identity details are not shared without need.
Retention
Retention periods depend on the type of data.
- Guest request not converted to an account: 30 days.
- Active trip: as long as the account exists or until you delete it.
- Raw provider snapshots: 7–30 days, subject to supplier terms.
- Pseudonymous analytics: up to 13 months.
Your rights
You can view, correct, export and request deletion of your data — directly from the privacy settings in the app or on the web.
You can withdraw consent for storing sensitive preferences at any time.
Security
Encryption in transit and at rest, role-based access, and audit logging for sensitive data access.
Contact
Privacy enquiries: privacy@rahlio.com