Privacy Policy

1. Introduction

Waypoint Logic LLC, doing business as Real Travel AI ("we," "us," or "our"), is the data controller responsible for your personal information collected through the Real Travel AI platform, website, mobile applications, and services (collectively, the "Service").

We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains:

• What personal information we collect;
• How we use your information;
• How we share your information;
• Your privacy rights and choices;
• How we protect your data.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Create an account or register for the Service;
• Use our AI-powered travel tools (visa checker, itinerary builder, budget calculator, etc.);
• Subscribe to a paid plan;
• Contact customer support;
• Provide feedback or participate in surveys;
• Sign up for email newsletters or marketing communications.

Personal Information Collected:

• Account Information: Name, email address, password (encrypted);
• Travel Data: Passport country, destination countries, travel dates, itinerary preferences, budget information;
• Payment Information: Billing name, payment method details (processed securely by Stripe; we do not store full credit card numbers);
• Communications: Messages, feedback, support requests, and correspondence.

2.2 Information Automatically Collected

When you access or use the Service, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type, operating system, device identifiers;
• Usage Data: Pages visited, features used, time spent on the Service, clickstream data;
• Location Data: Approximate geographic location based on IP address (we do not collect precise GPS location without your permission);
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and analyze Service usage. See our Cookie Policy for details.

2.3 Information from Third Parties

We may receive information about you from:

• Authentication Providers: If you sign in using third-party accounts (e.g., Google, Apple), we receive basic profile information (name, email) as authorized by you;
• Payment Processors: Stripe provides transaction status and billing information;
• Analytics Services: We use third-party analytics tools to understand Service usage and performance.

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 To Provide and Improve the Service

• Create and manage your account;
• Provide AI-powered travel recommendations, visa guidance, and itinerary planning;
• Process payments and manage subscriptions;
• Respond to your requests, questions, and customer support inquiries;
• Analyze usage patterns to improve features, functionality, and user experience;
• Develop new products and services.

3.2 To Communicate with You

• Send account-related notifications (e.g., subscription confirmations, password resets);
• Provide customer support and respond to inquiries;
• Send marketing communications about new features, promotions, and updates (you may opt out at any time).

3.3 For Security and Legal Compliance

• Detect, prevent, and address fraud, security incidents, and abuse;
• Enforce our Terms of Service;
• Comply with legal obligations, court orders, and regulatory requirements;
• Protect the rights, property, and safety of Real Travel AI, our users, and the public.

3.4 With Your Consent

We may use your information for additional purposes with your explicit consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• AI Processing: OpenAI (for AI-generated travel recommendations);
• Database and Authentication: Supabase (for secure data storage and user authentication);
• Payment Processing: Stripe (for billing and payment transactions);
• Email Services: Brevo (for transactional and marketing emails);
• Analytics: Google Analytics (for usage analytics and insights).

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes;
• Government or regulatory requests;
• Investigations of suspected illegal activity, fraud, or security threats;
• Protection of our legal rights, property, or safety, or that of others.

4.3 Business Transfers

If Real Travel AI or Waypoint Logic LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent.

5. AI and Third-Party Processing

5.1 Use of AI Technologies

Our Service uses Artificial Intelligence (AI) to generate personalized travel recommendations, visa information, and itineraries. When you use our AI tools:

• Your travel inputs (destination, dates, preferences) are processed by third-party AI providers (e.g., OpenAI);
• We do not use your personal contact information (name, email) to train public AI models;
• AI-generated responses are based on general knowledge and may not always be accurate or up-to-date.

5.2 Third-Party Data Processing

Third-party service providers (OpenAI, Supabase, Stripe) may process your data on servers located outside your country of residence. By using the Service, you consent to the transfer and processing of your data in accordance with this Privacy Policy.

6. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to:

• Maintain your session and keep you logged in;
• Analyze Service usage and performance;
• Personalize your experience;
• Serve targeted advertising (with your consent).

You can control cookie preferences through your browser settings. For more details, see our Cookie Policy.

7. Data Retention

We retain your personal information only as long as necessary to:

• Provide the Service and fulfill the purposes described in this Privacy Policy;
• Comply with legal, accounting, or regulatory obligations;
• Resolve disputes and enforce our agreements.

When your account is deleted or inactive for an extended period, we will delete or anonymize your personal information unless retention is required by law.

8. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest;
• Secure authentication (password hashing, two-factor authentication);
• Access controls and role-based permissions;
• Regular security audits and vulnerability assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 General Rights

• Access: Request a copy of the personal information we hold about you;
• Correction: Request correction of inaccurate or incomplete data;
• Deletion: Request deletion of your personal information (subject to legal retention obligations);
• Portability: Request your data in a structured, machine-readable format;
• Objection: Object to certain processing activities (e.g., marketing communications);
• Restriction: Request restriction of processing under certain circumstances;
• Withdraw Consent: Withdraw consent for processing activities that require consent.

9.2 GDPR Rights (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

9.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information we collect, use, and share;
• Right to request deletion of your personal information;
• Right to opt out of the "sale" of personal information (we do not sell personal information);
• Right to non-discrimination for exercising your privacy rights.

9.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@realtravelai.com. We will respond to your request within 30 days.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including the United States, where data protection laws may differ.

We ensure appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Compliance with GDPR and other applicable data protection laws;
• Encryption and security measures during data transmission.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Notify you via email or a prominent notice on the Service;
• Provide you with the opportunity to review the updated policy.

Your continued use of the Service after the updated Privacy Policy takes effect constitutes your acceptance of the changes.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: