Privacy Policy

Account data: name, email, avatar, and Cognito subject identifier when you sign in. Google account data received through Cognito’s Google identity provider typically includes email, name, and profile image. We do not receive your Google password.

Booking data: traveler names, dates of birth, contact details, trip and leg selections, payment tokens (Stripe handles raw card data). Usage data: pages viewed, saved trips, device and approximate location. [PLACEHOLDER] Complete the record-of-processing list with counsel.

To create your account, fulfill bookings, pay creators, prevent fraud, improve the product, and communicate about trips you saved or booked. Google account data is used to identify you on TravelLTK, not to advertise on Google properties. [PLACEHOLDER]

To complete a booking we share the minimum traveler details a supplier requires (name, dates, contact, sometimes date of birth or passport data when a cruise or international flight demands it). We also share data with Stripe, Amazon Web Services (Cognito, API, storage), and Vercel. We do not sell personal information. [PLACEHOLDER]

Essential cookies keep you signed in. Analytics and marketing cookies are described in the Cookie Policy and can be controlled from that page. [PLACEHOLDER]

Depending on where you live you may request access, correction, deletion, portability, or restriction, and you may object to certain processing. California residents see Do Not Sell My Info. [PLACEHOLDER] Add EU/UK representative and lawful bases.

Account data is kept while the account is open. Booking records are kept for the period required by tax and travel-supplier rules, then deleted or de-identified. [PLACEHOLDER] Insert actual schedules.

Privacy questions: privacy@travelltk.com. [PLACEHOLDER] Add mailing address and DPO once appointed.