AI Concierge privacy policy

This Privacy Policy describes the privacy practices of AI Concierge L.L.C-FZ (“AI Concierge,” “we,” “us,” or “our”) and how we collect, use, disclose, and otherwise process personal information when you access or use our websites, mobile applications, and other products and services that link to this Privacy Policy (collectively, the “Service”).

AI Concierge is an all-in-one travel platform that enables users to search, compare, book, and manage travel, including (as available) hotels, flights, trains, eSIMs, airport transfers, and related travel services.

This Privacy Policy does not apply to products, services, websites, or content offered by third parties (including travel suppliers and partners) that are governed by their own privacy policies.

PLEASE READ CAREFULLY. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Service. If you use the Service on behalf of another person (for example, booking for a family member) or on behalf of an organization (for example, your employer), you represent that you are authorized to do so and to accept this Privacy Policy on their behalf.

1) OVERVIEW

We obtain personal information from various sources to operate our Service and deliver travel-related functionality.

A. Two common ways people interact with AI Concierge

1. Website visitors: People who browse our public pages, request information, sign up for updates, submit inquiries, or otherwise interact with us without booking.
2. Service users: People who create an account, build trips, book travel, manage travel, communicate with support, or use corporate/teams features (such as approvals, policy controls, traveler management, reporting, and spend controls), where available.

B. Controller vs. Processor (Important for Corporate/Teams)

Depending on your relationship with AI Concierge, we may process personal information in different roles:

• When you use the Service for personal travel, AI Concierge generally acts as a controller (or similar “data owner” concept) for your personal information processed in connection with your use of the Service.
• When your employer/organization provides you access to corporate/teams features, the organization is often the primary controller of employee/traveler information used for that organization’s business travel program, and AI Concierge typically acts as a processor/service provider processing data on the organization’s instructions (subject to our agreements and applicable law).

If you use the Service through a corporate program, your employer/organization may have access to certain information (such as business travel itineraries, booking details, approvals, and traveler status) as configured by that organization and as required to operate the program.

2) DEFINITIONS

• “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with an individual.
• “Sensitive personal information” (or similar concept) generally refers to certain categories of information that are subject to heightened legal protections (for example, certain government identifiers, precise geolocation, health-related details, biometric identifiers, and similar categories depending on applicable law).
• “Processing” means any operation performed on personal information (for example, collection, storage, use, disclosure, or deletion).
• “Corporate Customer” (or “Organization”) means a business, entity, or group that uses AI Concierge’s corporate/teams features for its travelers or employees.
• “Traveler” means an individual for whom travel is booked or managed through the Service (which could include you or another person you book for).

3) PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you use the Service, what you choose to provide, and which features you use.

A. Information you provide to us

B. Information we collect automatically

We (and our service providers) may automatically collect information about how you access and use the Service, including:

• Device and network data: IP address, device identifiers, browser type, operating system, language settings, approximate location (city/region inferred from IP)
• Usage data: Pages/screens viewed, searches performed, clicks, session duration, referral sources, interaction patterns, crash logs, performance diagnostics
• Cookies and similar technologies: Cookies, local storage, web beacons/pixels, SDKs (see Section 7)

C. Information from third parties

We may receive personal information from third parties, including:

• Travel suppliers and partners (airlines, hotels, rail providers, transfer providers, eSIM providers, insurance providers) to confirm bookings, changes, cancellations, service delivery, and support
• Payment processors for payment confirmation, fraud signals, chargeback handling
• Identity/document verification providers (if we offer verification features)
• Corporate Customers (your employer/organization) or designated travel admins, who may provide traveler profile details, eligibility, or program configurations
• Authentication providers (e.g., if you use social login)
• Analytics and marketing partners (subject to your choices and applicable law)

4) SOURCES OF PERSONAL INFORMATION

We collect personal information from:

• You (when you create an account, build trips, book travel, contact support, or use other features)
• People booking for you (e.g., a family member, colleague, or travel admin)
• Corporate Customers (for business travel programs)
• Service providers (payments, analytics, communications, security, hosting)
• Travel partners and supply networks used to fulfill bookings
• Your devices and browsers (automated collection)

5) HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes (and as otherwise described at the time of collection):

A. Provide and operate the Service

• Create and manage accounts and traveler profiles
• Facilitate trip planning, search, comparison, and booking
• Process reservations, changes, cancellations, refunds, and related customer support
• Provide confirmations, receipts, itinerary updates, travel reminders, and alerts (as available)
• Coordinate travel services such as transfers, eSIM provisioning, or rail tickets (as available)

B. Communicate with you

• Respond to inquiries and support requests
• Send administrative messages (security notifications, service updates, policy changes)
• Send booking-related communications (confirmations, schedule changes, disruption notifications where available)

C. Personalize and improve the Service

• Remember preferences and traveler profile details to reduce re-entry
• Provide smarter comparisons and recommendations based on preferences and usage
• Analyze usage trends, measure feature performance, and improve reliability and UX
• Conduct research and development, including creating aggregated or de-identified data for analytics and product improvement

D. Corporate/Teams program operations

• Enable approvals, policy checks, spend controls, and travel continuity features
• Provide reporting, reconciliation support, and operational oversight for the organization
• Maintain audit logs and administrative records for security and compliance

E. Marketing and promotions

Subject to your choices:

• Send newsletters or product updates (where permitted)
• Run promotional campaigns and measure effectiveness
• Invite you to demos, betas, or events (where applicable)

You can opt out of marketing communications as described in Section 11.

F. Security, fraud prevention, and compliance

• Protect accounts, prevent misuse, and investigate suspicious activity
• Detect and prevent fraud, identity theft, and unauthorized access
• Enforce our terms and policies
• Comply with applicable laws, regulations, and lawful requests
• Maintain records needed for accounting, tax, dispute resolution, and compliance obligations

6) HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients for the purposes described in this Privacy Policy:

A. Service providers and vendors

We may disclose personal information to vendors that help us operate the Service, such as hosting, cloud infrastructure, customer support tools, analytics, security, and payment processing providers.

B. AI technology providers

When you interact with AI-driven features, we may disclose certain information to AI technology providers that help generate responses and recommendations. We require these providers to use the information only to provide the services to us.

C. Travel suppliers and travel partners

When you request a booking, we disclose personal information to airlines, hotels, rail providers, etc., to facilitate and fulfill your reservation.

D. Corporate Customers

If you use AI Concierge through an organization, we may disclose personal information to that organization as necessary to operate the program.

E. Professional advisors

We may disclose personal information to professional advisors (lawyers, auditors, insurers) as needed for professional services.

F. Legal compliance and protection

We may disclose personal information to authorities when we believe disclosure is necessary to comply with law, protect rights, or investigate fraud.

G. Business transfers

In the event of a merger, acquisition, or sale, personal information may be transferred as part of that transaction.

H. With your direction

We may disclose personal information when you ask us to or consent to it.

7) COOKIES, ANALYTICS, AND SIMILAR TECHNOLOGIES

We (and our service providers) use cookies, local storage, web beacons/pixels, and similar technologies to:

• Operate the Service and remember your preferences (e.g., language, cabin class).
• Understand how you interact with the Service and improve performance.
• Personalize content and recommendations.
• Measure the effectiveness of our marketing campaigns.

You can typically control or disable cookies through your browser or device settings. However, if you disable certain cookies, some features of the Service may not function correctly.

8) INTEREST-BASED ADVERTISING AND “DO NOT TRACK”

We may engage in interest-based advertising to show you ads that are more relevant to your interests. Some web browsers may transmit “Do Not Track” signals to the websites with which the user communicates. We do not currently take action in response to these signals.

9) AI FEATURES AND AUTOMATED PROCESSING

As an AI-driven platform, we use automated processing, including machine learning and artificial intelligence, to provide many of our features, such as:

• Generating travel recommendations and itineraries.
• Comparing travel options and predicting prices.
• Powering our concierge chat and support features.
• Detecting and preventing fraud.

While we strive for accuracy, AI-generated content may occasionally contain errors or hallucinations. We encourage you to verify all critical booking details (such as dates, names, and prices) before finalizing any transaction.

10) SECURITY

We maintain reasonable technical, administrative, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

IMPORTANT: Please do not enter payment card numbers, passport details, or other highly sensitive information into free-text chat fields unless specifically prompted by a secure, designated input field.

11) DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide the Service, comply with legal, accounting, or reporting requirements, establish or defend legal claims, and for fraud prevention purposes.

12) INTERNATIONAL TRANSFERS

AI Concierge is headquartered in the United Arab Emirates. Personal information we collect may be transferred to, stored, and processed in the UAE and other countries where our service providers or travel partners are located. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to these transfers.

13) YOUR RIGHTS AND CHOICES

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as:

• Access: The right to request copies of your personal information.
• Correction: The right to request that we correct inaccurate or incomplete information.
• Deletion: The right to request that we delete your personal information (subject to certain exceptions).
• Portability: The right to request that we transfer your data to another organization.
• Objection/Restriction: The right to object to or restrict our processing of your data.
• Opt-Out of Marketing: You can opt out of receiving promotional emails by following the “unsubscribe” link in the email or contacting us.

To exercise your rights, please contact us at contact@aiconcierge.vip. We will respond to your request in accordance with applicable law.

14) ADDITIONAL NOTICES FOR CERTAIN REGIONS

• UAE Residents: We process personal information in accordance with the UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data.
• EEA/UK Residents: If you are in the European Economic Area or the United Kingdom, you have specific rights under the GDPR. Our legal basis for processing includes performance of a contract, compliance with legal obligations, and our legitimate interests.
• U.S. Residents: Certain U.S. state laws (such as the CCPA) provide residents with specific rights regarding their personal information.

15) LINKS TO THIRD-PARTY SERVICES

The Service may contain links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices.

16) USE OF THE SERVICE BY MINORS

The Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete it.

17) CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on the Service and updating the “Last Updated” date.