Privacy Policy

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name and contact information (email, phone number)
• Account credentials (username, password)
• Profile information and preferences
• Payment and billing information
• Travel preferences and history
• Content you create and upload, such as photos, posts, reviews, and comments
• Conversations with our AI assistant and the inputs you provide to the Travel Guide

Usage Information

We automatically collect certain information about your device and how you interact with our services, including your IP address, browser type, operating system, referring URLs, device identifiers, pages viewed, and interaction with features.

How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and maintaining our services
• Processing your transactions and bookings
• Personalizing your travel experience
• Sending you service updates and promotional materials
• Responding to your inquiries and support requests
• Improving our services and developing new features
• Detecting and preventing fraud and security threats
• Complying with legal obligations

Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) or similar law applies, we process your personal data only where we have a lawful basis to do so:

• Performance of a contract: to create and manage your account, process bookings and payments, and provide the services you request.
• Legitimate interests: to operate, secure, and improve the platform, prevent fraud and abuse, and communicate with you about your account — balanced against your rights.
• Consent: for optional communications such as our newsletter, which you may withdraw at any time; withdrawing consent does not affect processing already carried out.
• Legal obligation: to comply with tax, accounting, consumer-protection, and other legal requirements.
• You are never required to provide personal data, but some features cannot function without the data needed to deliver them.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Secure data centers with physical security controls
• Employee training on data protection practices
• Access controls and authentication mechanisms
• If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where legally required, affected users without undue delay.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

International Data Transfers

To operate the platform we use trusted service providers, some of which are located outside your country, including in the United States. This means your data may be transferred internationally:

• Cloud hosting and media storage may be provided by infrastructure providers (such as Cloudflare) that operate globally.
• AI features (destination guides, the AI Travel Guide, and the Tevi assistant) are powered by third-party AI providers (such as Anthropic) that may process your prompts to generate responses.
• Payment processing is handled by our payment provider under its own security and privacy standards.
• Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.
• We share personal data only with providers that are bound to protect it and use it solely to provide services to us.

You may request more information about the safeguards we use for international transfers by contacting us.

Your Rights

You have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing your data
• Withdrawal: Withdraw consent where processing is based on consent
• Automated decisions: we do not make decisions producing legal or similarly significant effects about you based solely on automated processing; personalization and AI recommendations are provided only for convenience and inspiration.

Data Controller & Your Right to Complain

This section tells you who is responsible for your data and how to raise concerns:

• The data controller responsible for your personal data is the operator of Tevi Travel, a registered sole proprietor established in Ukraine; full controller and contact details are available on request and will be stated here upon registration.
• You can contact us at any time about your personal data or to exercise your rights using the contact details in this policy.
• If you are in the European Union, you have the right to lodge a complaint with your national data-protection supervisory authority.
• If you are in Ukraine, you may address the authority responsible for personal-data protection.
• We ask that you contact us first so we can try to resolve your concern directly.

Exercising your right to complain to a supervisory authority does not affect any other remedy available to you.

Cookies and Local Storage

Tevi Travel does not use third-party tracking cookies or advertising trackers. To make the site work, we only use your browser's local storage for strictly functional purposes:

• Keeping you signed in (authentication token)
• Remembering your language choice
• Saving your unfinished Travel Guide draft so you don't lose progress
• Remembering that you've already seen the welcome message

This functional storage stays in your browser and is not used to track you across other sites. You can clear it at any time in your browser settings; doing so signs you out and resets your preferences. If we ever introduce analytics or marketing technologies, we will ask for your consent first and update this policy.

Data Retention

We keep your personal data only for as long as necessary for the purposes described in this policy:

• Account data is retained while your account is active and deleted (or anonymized) within a reasonable period after you delete your account, unless we must keep it longer by law.
• Booking, payment, and invoice records are retained for the period required by applicable tax, accounting, and consumer-protection law (commonly up to several years).
• User-generated content (such as posts, photos, and reviews) is retained until you delete it or your account, subject to backups being overwritten in the ordinary course.
• Support messages and dispute records are retained as long as needed to handle the matter and to establish, exercise, or defend legal claims.
• When data is no longer needed, we delete it or irreversibly anonymize it.

You may request deletion of your personal data at any time, subject to our legal obligation to retain certain records.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: