Privacy Notice
Last updated: 04/12/2026
1. Overview
This Privacy Notice explains how PassaLá collects, uses, and protects your personal data. We are committed to complying with:
- GDPR (EU/EEA users)
- CCPA (California users, where applicable)
2. Data We Collect
a. Information You Provide
- Name
- Email address
- Account details
- Travel preferences
- Messages submitted to AI concierge
b. Automatically Collected Data
- IP address
- Browser/device type
- Usage data (pages visited, interactions)
- Cookies and tracking technologies
c. Payment Data
Handled securely by third-party processors (e.g., Stripe). We do NOT store full payment details.
3. How We Use Your Data
We use your data to:
- Provide and improve the Service
- Personalize travel recommendations
- Operate AI concierge features
- Process payments
- Communicate with you
- Ensure security and prevent fraud
4. Legal Basis (GDPR)
We process personal data under:
- Consent (e.g., marketing, cookies)
- Contractual necessity (providing the Service)
- Legitimate interests (improving product, security)
- Legal obligations
5. Data Sharing
We may share data with:
- Service providers (hosting, analytics, payments)
- AI infrastructure providers
- Legal authorities when required
We do NOT sell your personal data.
6. International Transfers
Your data may be transferred outside your country (including the U.S.). We use safeguards such as:
- Standard Contractual Clauses (SCCs)
- Trusted providers with adequate protections
7. Data Retention
We retain data only as long as necessary:
- Account data: until deletion
- Usage data: limited retention for analytics
- Legal obligations may require longer storage
8. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
9. Cookies
We use cookies for:
- Essential functionality
- Analytics
- Personalization
You can manage cookies via your browser or consent banner.
10. Security
We implement appropriate technical and organizational measures to protect your data. However, no system is 100% secure.
11. Children's Privacy
Our Service is not intended for children under 13 (or equivalent local age). We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Notice. Updates will be posted on this page.
© 2026 PassaLá. All rights reserved.