> INTRODUCTION

AI VACATIONS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our travel booking platform.

> INFORMATION_WE_COLLECT

[PERSONAL_INFORMATION]

• • Name and contact information (email, phone)
• • Billing and payment information
• • Travel preferences and booking history
• • Passport/ID details (when required for booking)
• • Account credentials

[AUTO_COLLECTED_DATA]

• • Device information (browser, OS)
• • IP address and approximate location
• • Usage patterns and interactions
• • Cookies and tracking technologies

> HOW_WE_USE_YOUR_INFORMATION

• • Process and fulfill your travel bookings
• • Communicate about your reservations
• • Provide customer support
• • Personalize your experience
• • Improve our platform and services
• • Detect and prevent fraud
• • Comply with legal obligations

> INFORMATION_SHARING

• • Travel Providers: Airlines, hotels to fulfill bookings
• • Payment Processors: Stripe for secure transactions
• • Service Providers: Third parties who assist operations
• • Legal Requirements: When required by law or to protect rights

NOTE: We do not sell your personal information for marketing purposes.

> DATA_RETENTION

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• • Account Data: Until you delete your account
• • Booking Records: 7 years (legal/tax requirements)
• • Payment Data: As required by financial regulations
• • Analytics Data: 26 months (anonymized thereafter)

> INTERNATIONAL_DATA_TRANSFERS

Your information may be transferred to and processed in countries outside your jurisdiction, including the United States. When we transfer data internationally, we use appropriate safeguards:

• • Standard Contractual Clauses (SCCs) for EU transfers
• • Data Processing Agreements with all vendors
• • Encryption in transit and at rest

> COOKIES

We use cookies and similar technologies to enhance your experience. You can manage your preferences:

• • Necessary: Required for site functionality (cannot be disabled)
• • Analytics: Google Analytics to understand usage
• • Marketing: Microsoft Clarity for experience optimization

Use "Cookie Settings" in the footer to manage preferences.

> DATA_SECURITY

We implement industry-standard security measures including TLS encryption, secure servers (SOC 2 compliant hosting), regular security assessments, and access controls. However, no transmission method is 100% secure.

> CALIFORNIA_PRIVACY_RIGHTS (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• • Right to Know: What personal information we collect and how it's used
• • Right to Delete: Request deletion of your personal information
• • Right to Opt-Out: Opt out of the sale/sharing of personal information
• • Right to Correct: Request correction of inaccurate information
• • Non-Discrimination: We will not discriminate for exercising your rights

> GDPR_RIGHTS (EU/EEA USERS)

If you are in the European Union or European Economic Area, you have rights under the General Data Protection Regulation:

• • Access and receive a copy of your data
• • Correct inaccurate information
• • Request deletion ("right to be forgotten")
• • Object to or restrict processing
• • Data portability (receive data in machine-readable format)
• • Withdraw consent at any time
• • Lodge a complaint with a supervisory authority

Legal basis for processing: Contract performance, legitimate interests, consent, and legal obligations.

> CHILDREN'S_PRIVACY

AI VACATIONS is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@aivacations.com. We will delete such information promptly.

> UPDATES_TO_THIS_POLICY

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification.

> CONTACT_US

Questions about this Privacy Policy or your data?

• Privacy Inquiries: privacy@aivacations.com
• Data Requests: dpo@aivacations.com

We respond to all data subject requests within 30 days.