Privacy & Cookie Policy

VidiVeni is built around one idea: travel is for everyone. So is privacy. We've written this policy in plain English so you actually know what's going on — not just what satisfies a checkbox.

The short version

• Travelers who follow a shared guide link don't need an account, and we collect almost nothing from them.
• Registered users (travel businesses, beta participants) share account info so we can run the service.
• We don't sell your data. We don't sell your data. We don't sell your data.
• Pseudonymous product analytics are on by default (legitimate interest) — never your name or email — and you can opt out anytime.
• You can ask us to delete your data at any time.

Who we are

VidiVeni is the data controller for all data processed through the platform. If you have questions about your data or want to exercise your rights, reach us at privacy@vidiveni.app — a human reads and replies.

What we collect and why

If you're a traveler

You've received a guide link from someone — a travel agency, a hotel, a friend. You don't need an account to open it. When you do, our server logs the request the same way every web server does: a timestamp and your browser type. That's it. We can't identify you from this and we don't try to.

If you install the guide as a PWA, we log that install event so the person who created the guide knows it was used. Still no name, no email, no location.

If you're a registered user

We store your email address, username, country, and organization so you can log in and manage your guides. We also record which guides you've created and your dashboard activity — that's how the service works. Nothing more.

Social sign-in (Google, Microsoft)

If you choose to sign in via Google or Microsoft, we request only the minimal OAuth scopes needed: email and basic profile (display name). We do not request access to your calendar, contacts, Drive, or any other data. The email address returned is stored as your account identifier; the display name is stored so your dashboard can greet you by name. We never receive your Google or Microsoft password.

You can unlink a social provider or delete your account entirely from your profile settings at any time — this removes all stored OAuth tokens from our systems.

Product analytics (Pendo)

To understand how features are adopted and improve the product, we load Pendo by default on the basis of legitimate interest. Pendo receives a pseudonymous UUID (a random identifier — never your email or name), your role (e.g. "user"), and your account tier. It is never used for advertising and is never shared with ad networks. You can opt out anytime via the "Cookie settings" link in the footer — opting out stops Pendo and clears its session for the rest of your visit and on future visits.

Travelers who open a guide without an account are tracked with a separate anonymous UUID stored only in their browser's localStorage, and the same opt-out applies.

Pendo acts as a data processor under a Data Processing Agreement with Standard Contractual Clauses (SCCs) in place for international transfers.

Marketing communications

We send transactional emails (account verification, password reset, invite notifications) regardless of marketing preferences — these are necessary to operate the service. Separately, you may opt in to occasional product news at signup or from your profile settings. This checkbox is not pre-ticked, and you can withdraw consent at any time from your profile or by following the unsubscribe link in any marketing email.

What we never collect

• Payment card details — handled by our payment processor, never touching our servers
• Precise geolocation of any user
• Browsing history outside of VidiVeni

How we use your data

To run the service. To log you in, show you your guides, deliver those guides to travelers, and keep the platform secure. That's the whole list.

We may use aggregated, anonymized statistics to understand which features are actually useful. This never involves identifying individual users.

Who we share data with

We don't sell your data to anyone, ever.

• AI providers (Anthropic, Google) — when you generate a guide, destination and trip parameters are sent to produce the content. No personal information goes with that request.
• Hosting infrastructure — our servers and storage providers process data to keep the platform running.
• Pendo — pseudonymous product analytics. We send a random UUID, your role, and tier — never your email or name. Pendo processes this under a Data Processing Agreement with Standard Contractual Clauses.
• Payment processor — billing data for paid plans when applicable. Your card details never touch our systems.

How long we keep data

• Account data: kept while your account is active; deleted within 30 days of closure
• Guide data: kept while the guide exists; permanently deleted 90 days after revocation or deletion
• Server logs: 90 days, then purged automatically
• Traveler access logs: 90 days

Cookies

What cookies we use

Cookie	Purpose	Type	Duration
cga_consent	Stores your cookie preferences	Necessary	1 year
cga_token	Keeps you logged in (JWT)	Necessary	Session
_pendo_*	Pendo product analytics (pseudonymous visitor ID, no PII)	Analytics	Session / 1 year

What each type means

• Necessary: required for the service to function — login sessions and remembering your cookie choice. Can't be disabled without breaking things.
• Analytics: help us understand broadly how the platform is used. Pseudonymous — never your name or email — and on by default under legitimate interest. You can opt out anytime through the "Cookie settings" link in the footer.

Your rights (GDPR)

If you're in the EU or EEA, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct anything that's inaccurate
• Erasure — ask us to delete your data entirely
• Restriction — limit how we process your data
• Portability — receive your data in a structured, readable format
• Objection — object to processing based on our legitimate interest
• Object / opt out — stop analytics processing at any time via the "Cookie settings" link in the footer

Email privacy@vidiveni.app to exercise any of these. We'll respond within 30 days.

Legal basis for processing (GDPR)

• Contract: processing necessary to deliver the service to registered users
• Legitimate interest: security monitoring, fraud prevention, service improvement, and pseudonymous product analytics (which you can opt out of at any time)
• Consent: marketing email, where you opt in

Security

We use HTTPS everywhere, bcrypt for passwords, JWT for sessions, and restrict access to production systems. We're a small team and we take this seriously.

AI providers and international transfers

Guide generation may send trip parameters (not personal data) to Anthropic (US) or Google (US). Both are covered by Standard Contractual Clauses as required under GDPR.

Children

VidiVeni is not designed for children under 16. We don't knowingly collect data from them. If you believe a child has provided us with personal data, contact privacy@vidiveni.app and we'll delete it promptly.

Changes to this policy

When we make material changes, registered users will hear about it by email or through a dashboard notification before the change takes effect.

Questions?

privacy@vidiveni.app — we're happy to talk through anything in here.