Privacy policy

Who is responsible

ABC AI CONCEPTS LIMITED is the controller of personal information used to operate Jourvay. Our company details and contact options appear below and on the Contact page. This policy covers the Jourvay website and hosted application.

Information we process

Account information includes your email address, username, authentication information and optional profile photo. We process the trips, dates, places, budgets, expense records, packing lists, notes, messages, reservation records and files that you or your collaborators add.

We also process technical information needed to operate and protect the service, such as IP addresses, device and browser information, access logs and error reports. Optional integrations may involve authorisation credentials and information you choose to import. Please upload only information you are entitled to share and avoid adding unnecessary identity documents or sensitive personal details.

Why we use it

We use account and trip information to provide the service you request, synchronise changes, manage sharing and respond to support requests. Our legal basis is performance of our contract with you, or taking steps you request before entering it.

We use necessary security and diagnostic information for our legitimate interests in preventing abuse, troubleshooting and keeping the service reliable. We retain information where required to comply with legal obligations. Where a feature requires consent, you can withdraw it without affecting earlier lawful processing. We do not use Jourvay trip content to target behavioural advertising.

Sharing and service providers

Trip members can access content according to their permissions. Public links make selected information available to people who have the link. Consider your sharing settings before adding personal information; we cannot remove copies another person has already made.

Lovable Cloud and its connected Supabase services provide hosting, authentication, database and file storage. Infrastructure, email delivery and diagnostic providers process information needed to run the service. When paid subscriptions become available, Stripe will process payment and billing information. Jourvay does not receive or store full payment card numbers.

Map, place search, weather and routing services receive the queries or locations needed for the requested results; direct browser requests also disclose your IP address to the provider. The application uses providers including OpenStreetMap-related services and may use other providers for optional features. Photo and other integrations receive information needed for the actions you request. Each external provider has its own privacy terms.

We may disclose information to comply with law, protect legal rights, or in a business transfer subject to appropriate safeguards. We do not sell your personal information.

International processing

Our infrastructure and optional providers may process personal information outside the UK. Where UK data protection law requires safeguards for an international transfer, we must use a valid transfer mechanism, such as adequacy regulations or appropriate contractual safeguards. Contact us for information about the safeguards relevant to your data. Choosing an optional provider may introduce additional international processing under that provider's terms.

Booking imports and optional AI parsing

When you import a booking, source documents are uploaded to private storage for processing. The document parser reads them through short-lived signed links. Import-processing copies are intended to be temporary; files you choose to attach to saved reservations are retained as trip content under the retention rules below.

If you enable AI parsing, extracted booking text, rather than the original source file, is sent to the configured AI provider. That text can contain personal and travel details from your document. Review the provider and the information you submit, and check imported results before saving or relying on them.

Storage on your device

Jourvay uses necessary local storage, IndexedDB and service-worker caches for sign-in, preferences, offline content and synchronisation. Our hosting and security providers may set necessary cookies. Shared devices can retain downloaded or cached trip information, so sign out and clear site data when appropriate. This policy does not authorise optional advertising or analytics cookies; we would request consent before adding any that require it.

How long information is kept

Account and trip content is kept while needed to provide the service, until you delete it or request deletion, subject to collaboration and legal requirements. You can manage content and request account deletion in Settings. Security logs, backups and records needed for legal claims may remain for a limited period appropriate to their purpose; deleted information is not necessarily removed immediately from backups. We review retention and do not keep personal information indefinitely simply because storage is available.

Billing records, when applicable, are retained for required accounting and legal purposes. Copies held by collaborators or external services follow their own retention arrangements. Contact us about retention or deletion of a particular record.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. You can also withdraw consent where we rely on it. Contact us through the Contact page; we may need to verify your identity. We normally respond to data-rights requests within one month and will explain any lawful extension or limitation.

You can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority. Contacting us first may help resolve your concern but is not a condition of making a complaint.

Children and changes

Jourvay is intended for people aged 18 or older. Do not create an account if you are under 18. Contact us if you believe a child has supplied personal information.

We may update this policy as the service changes. We will publish the updated date and provide additional notice of material changes where appropriate.

Contact us

Contact details and request information