Cookie Policy

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the website owners. Cookies enhance your browsing experience by allowing websites to remember your preferences and understand how you use their services.

How we use cookies

TravelMoney uses cookies and similar technologies for several purposes, including:

• Essential cookies: Required for the operation of our app and website. They enable core functionality such as security and user authentication.
• Analytical/performance cookies: Help us understand how visitors interact with our platforms by collecting and reporting information anonymously.
• Functionality cookies: Allow us to remember choices you make and provide enhanced, personalized features.
• Targeting cookies: Record your visit to our app and website, the pages you have visited, and the links you have followed to improve your experience and make our advertising more relevant.

AI Shopping Assistant & Data Collection

Our website features an AI-powered shopping assistant that helps you with VAT refund questions, travel shopping advice, and product recommendations. When you interact with the AI assistant, we collect and process certain data to provide this service.

What data we collect from AI chat

• Chat conversations: All messages you send to and receive from the AI assistant are stored to improve our service and provide context for ongoing conversations.
• Email addresses: If you provide your email address for our waitlist or to receive information about our service.
• IP addresses: Your IP address is collected for rate limiting (preventing abuse) and security purposes.
• Session identifiers: Unique session IDs are generated to maintain conversation continuity and track individual chat sessions.
• Conversation metadata: We track conversation intent (e.g., waitlist signup, product inquiry, VAT questions), page context (which page you were on when you started chatting), and timestamp information.
• Abuse detection data: We monitor for inappropriate use patterns and may temporarily or permanently restrict access to users who abuse the service.

Third-party AI processing

To provide AI-powered responses, your chat messages are processed by third-party services:

• OpenAI: Your messages are sent to OpenAI's API (GPT-4o-mini model) to generate intelligent responses. OpenAI does not use data submitted via their API to train their models. See OpenAI's Privacy Policy for more information.
• Supabase: All chat conversations and related metadata are stored in Supabase, a cloud database provider. Supabase is SOC 2 Type 2 compliant and GDPR-ready. See Supabase's Privacy Policy.
• Vercel Edge Network: The AI chat service runs on Vercel's edge runtime for fast global performance. See Vercel's Privacy Policy.

Why we collect this data

We collect AI chat data for the following purposes:

• Service delivery: To provide intelligent, context-aware responses to your questions about VAT refunds and travel shopping.
• Conversation continuity: To maintain context across multiple messages in a single chat session.
• Waitlist management: To collect email addresses for users interested in joining our launch waitlist.
• Abuse prevention: To detect and prevent spam, inappropriate use, and automated bot traffic through rate limiting (maximum 15 messages per 15 minutes per IP address).
• Service improvement: To analyze common questions, improve response quality, and enhance the AI assistant's capabilities.
• Customer support: To review conversation history if you contact us for support regarding the AI assistant.

Data retention for AI chat

• Chat conversations: Stored for 90 days, after which they are automatically deleted from our systems.
• Email addresses (waitlist): Retained until you opt out or until 6 months after product launch, whichever comes first.
• IP addresses (rate limiting): Stored for 30 days for security and abuse prevention purposes.
• Session identifiers: Deleted when your browser session ends or after 24 hours, whichever comes first.
• Banned user records: If you are banned for abusive behavior, the ban record (IP address and ban timestamp) is retained for 12 months.

Your rights regarding AI chat data

Under GDPR and other privacy laws, you have the following rights:

• Access: Request a copy of your chat conversation history.
• Deletion: Request immediate deletion of your chat conversations and associated data.
• Opt-out: Stop using the AI chat assistant at any time by closing the chat window.
• Email removal: Unsubscribe from waitlist emails using the link in any email we send you.
• Data portability: Request your chat data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@travelmoney.app with the subject line "AI Chat Data Request".

Managing cookies

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of our app or website may not function properly.

You can generally modify your browser settings to decline cookies if you prefer. This can be done through your browser's settings menu. The procedures for managing cookies vary slightly between different browsers:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Safari: Preferences → Privacy
• Firefox: Options → Privacy & Security
• Internet Explorer/Edge: Tools → Internet Options → Privacy

Types of cookies we use

Session cookies

These are temporary cookies that remain in your browser's cookie file until you leave the website. They enable certain site functionalities like remembering your form inputs when navigating through the app.

Persistent cookies

These remain in your browser's cookie file for a longer period (depending on the lifetime of the specific cookie). They help us recognize returning users and remember your preferences for future visits.

Third-party cookies

TravelMoney also allows certain third parties to place cookies on your device when you use our app or website. These cookies help us analyze how users navigate through our platforms and help us improve our services. We use third-party services such as Google Analytics, which place cookies to help us analyze how users use our app and website.

GDPR Compliance & International Data Transfers

TravelMoney is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Legal basis for processing

We process your personal data under the following legal bases:

• Consent: When you use the AI chat assistant, you consent to the collection and processing of your chat data.
• Legitimate interests: We have a legitimate interest in preventing abuse, maintaining security, and improving our services.
• Contract performance: To provide the AI assistant service you request.

International data transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our service providers (OpenAI, Supabase, Vercel) operate data centers. These transfers are protected by:

• Standard Contractual Clauses (SCCs): Our service providers use EU-approved SCCs for international data transfers.
• Adequacy decisions: Where applicable, we rely on European Commission adequacy decisions.
• Additional safeguards: Technical and organizational measures including encryption, access controls, and data minimization.

Data security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data in transit (HTTPS/TLS)
• Encryption at rest for stored conversation data
• Access controls and authentication for database access
• Regular security audits and monitoring
• Automatic data deletion after retention periods expire

Changes to our cookie policy

We may update our Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. If the changes are significant, we will provide a more prominent notice (such as a notification in the AI chat or via email for waitlist subscribers). We encourage you to review this policy periodically.

Contact us

If you have any questions about our Cookie Policy, please contact us at: