Privacy Policy

1. Who we are

Unrivaled Travel Tools ("we", "us", "our") provides a SaaS platform that helps travel advisors generate and manage marketing content. This policy explains what data we collect, why, and your rights.

Contact: [YOUR_CONTACT_EMAIL] · Business: [YOUR_LEGAL_BUSINESS_NAME], [YOUR_BUSINESS_ADDRESS]

2. Data we collect

• Account data: email, password (hashed), authentication tokens.
• Profile data: name, agency, website, social handles, brand guide preferences.
• Generated content: prompts you submit and AI outputs we produce for you.
• Uploaded media: images, videos, and files you upload to your media library or shared galleries.
• Social CRM data: contacts, circles, scripts, and tags you create.
• Usage & technical data: IP address, browser, device type, log data, error reports.

3. How we use your data

• Operate, maintain, and improve the service.
• Authenticate you and protect your account.
• Generate content via AI on your request.
• Send essential service emails (password resets, security notices).
• Detect, prevent, and address fraud or abuse.
• Comply with legal obligations.

We do not sell your personal data. We do not use your data to train third-party AI models.

4. Sub-processors

We rely on the following sub-processors to deliver the service:

• Lovable Cloud / Supabase — database, authentication, storage, edge functions.
• Lovable AI Gateway (Google Gemini, OpenAI) — AI content generation.
• Google Fonts — typography (loaded via CDN).

5. Cookies & local storage

We use essential cookies and browser local storage for authentication, theme preferences, and remembering your session. We do not use marketing or advertising trackers. See our Cookie Policy.

6. Your rights

You have the right to:

• Access your data — export from your Profile page.
• Correct inaccurate data — edit it in your Profile.
• Delete your account and data — from your Profile page.
• Object or restrict processing — contact us.
• Lodge a complaint with your local data-protection authority.

7. Data retention

We retain your data while your account is active. When you delete your account, we remove your data within 30 days, except where retention is required by law (e.g., billing records).

8. Security

We use Row-Level Security on our database, encrypted transport (HTTPS), hashed passwords, strict access controls, and regular security reviews. No system is 100% secure — please use a strong, unique password.

9. International transfers

Our infrastructure may store and process data outside your country. Where required, we use Standard Contractual Clauses or equivalent safeguards.

10. Children

The service is not directed at children under 16. We do not knowingly collect their data.

11. Changes

We may update this policy. Material changes will be communicated via email or in-app notice.

12. Governing law

This policy is governed by the laws of [YOUR_JURISDICTION].