Privacy Policy

TravelZing ("TravelZing," "we," "us," or "our") is a service operated by TRAVEL ZING LIMITED, a private company limited by shares registered in Scotland, United Kingdom, with its registered office at 63 Duke Street, Edinburgh, Scotland, EH6 8HN, United Kingdom. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit travelzingli.com (the "Site") or use the TravelZing AI travel planning assistant (the "Service"). TRAVEL ZING LIMITED is the data controller for personal data processed in connection with the Service.

This Privacy Policy applies to all users of the Site and Service. If you do not agree with this Privacy Policy, please do not use the Site or Service.

We collect the following categories of information:

• Account information. When you create an account, we collect your name, email address, and a hashed password. If you sign in with a third-party identity provider, we receive the identifiers and basic profile details that provider shares with us.
• Trip and travel information. When you use the Service, you voluntarily provide information about your trips — including destinations, dates, budget ranges, travel companions, preferences captured by the travel style quiz, and the content of your conversations with the AI trip chat. You control what you share.
• Payment information. When you buy a subscription or credit pack, our payment processor (Stripe Payments Europe, Ltd.) collects your payment card details directly. We do not store full card numbers on our servers. We receive only a tokenized reference, the last four digits of your card, the card brand, expiration month/year, and billing country.
• Usage information. We automatically collect information about how you interact with the Service — such as pages visited, features used, timestamps, device and browser type, IP address, and approximate location derived from IP. We use this data for security, analytics, and product improvement.
• Communications. If you email us or submit a contact form, we retain the content of the communication and any information you voluntarily include.

We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us at travel@travelzingli.com and we will delete it.

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating AI-powered itineraries, taste quiz profiles, packing lists, phrasebooks, and budget plans.
• Process payments and manage subscriptions through Stripe.
• Send you operational emails (receipts, account notices, security alerts) and, where permitted, product updates you can unsubscribe from at any time.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with our legal obligations and enforce our Terms of Service.
• Improve the Service — for example, by analyzing aggregated, de-identified usage patterns.

We do not sell personal information. We do not use the content of your private trip conversations to train public AI models outside the scope of providing the Service to you.

Where UK GDPR or EU GDPR applies, we process personal data under the following legal bases: (a) performance of a contract with you (to deliver the Service), (b) our legitimate interests (e.g., security, fraud prevention, product improvement), (c) compliance with legal obligations, and (d) your consent, where required (e.g., certain cookies and marketing emails). You have the right to object to any processing based on legitimate interests.

We share personal information only in the following circumstances:

• Service providers. We use trusted third parties to operate the Service. Current key vendors include: Stripe Payments Europe, Ltd. (payment processing), cloud hosting providers (infrastructure), email delivery providers (transactional email), and analytics providers (aggregated usage metrics). Each is contractually required to handle data only on our instructions.
• Large language model providers. To generate AI responses, we transmit the relevant parts of your conversation to one or more large language model API providers. These providers process the content solely to return a response; per our contracts, they do not retain the content for model training.
• Legal and safety. We may disclose information when required by law, court order, or to protect the rights, property, or safety of TravelZing, our users, or others.
• Business transfers. If TRAVEL ZING LIMITED is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you and provide an opt-out where required.

We do not share personal information with advertising networks or data brokers.

Depending on where you live, you may have the following rights under UK GDPR, EU GDPR, the California Consumer Privacy Act (CCPA / CPRA), and other applicable privacy laws:

• Access — request a copy of the personal information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your personal information ("right to be forgotten").
• Portability — request a machine-readable copy of your data.
• Objection / restriction — object to or restrict certain processing.
• Withdraw consent — withdraw consent where we rely on it.
• Non-discrimination — exercise your rights without being denied service or charged a different price (CCPA / CPRA).
• Complaint — lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO, ico.org.uk).

To exercise any of these rights, email us at travel@travelzingli.com with the subject line "Data request" and the email address associated with your account. We respond to verified requests within 30 days (or extended by a further 2 months for complex requests, with notice).

We retain personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your personal information within 30 days, except where we are required to retain it (for example, tax records, fraud prevention, or to resolve an active dispute).

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information — including encryption in transit (TLS 1.2+), encrypted storage of sensitive fields, least-privilege access controls, and regular review of our security posture. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

TravelZing is operated from the United Kingdom. Some of our service providers are located outside the UK and the European Economic Area, including in the United States. Where we transfer personal data out of the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the European Commission's Standard Contractual Clauses.

The Service may contain links to third-party websites (for example, external reference links in a phrasebook or destination write-up). We are not responsible for the privacy practices of those websites. Please review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will notify registered users by email or with a prominent notice on the Site before the changes take effect.

• Email: travel@travelzingli.com
• Phone: +44 7762 146766 (billing and account disputes only)
• Mail: TRAVEL ZING LIMITED, 63 Duke Street, Edinburgh, Scotland, EH6 8HN, United Kingdom