Privacy Policy

We collect information that you voluntarily provide to us and data gathered automatically through your use of our platform:

• Account & Profile Information: Username, display name, email address, password (securely hashed), avatar image, city, and country. This includes data received via third-party authentication services (e.g., Google OAuth).
• Travel Preferences & Interactions: Interests (e.g., Culture, Adventure), travel dates, budget, and chat history with our AI travel assistant.
• Usage Data & Cookies: IP addresses, browser types, device information, and pages visited via cookies to optimize our platform performance and personalize your experience.

We use your data for the following purposes:

• Service Delivery: To create custom travel itineraries via our AI models and facilitate inquiries for car charters and travel packages.
• Account Management: To manage your profile, authenticate your access, and secure your account.
• Communication: To respond to your inquiries, share travel proposals, and provide customer support via email or WhatsApp.
• Platform Improvement: To analyze usage patterns and improve our AI prompts, itinerary builder, and overall user experience.

We do not sell your personal data. We only share your information under the following circumstances:

• AI & Search Providers: We use Google Gemini as our primary AI service, with Inception AI, Mistral, and Fireworks AI as fallbacks. Data handling varies by provider and plan: Google AI API data use differs between free and paid tiers; Mistral retains prompts for abuse monitoring on its standard plan (zero-data-retention is not enabled); Fireworks AI retains API inputs and outputs per its default policy. We also use Brave Search and Exa for web search context; each service applies its own data retention practices.
• Cloud Storage: Images and media you upload for reviews, blogs, or your profile are stored on Cloudinary, a third-party cloud platform.
• Email Delivery: We use the Gmail API to send verification emails, password reset links, and respond to your inquiries.
• Travel Partners: We share the information necessary to fulfill your booking request with trusted local operators, drivers, and hotels.
• Error Monitoring: We use Sentry for error diagnostics. Sentry receives technical data (error stack traces, request paths) with all personal information stripped or masked.
• Legal Obligations: If required by law, valid legal process, or to protect the rights and safety of BaliBlissed and our users.

We use encryption, secure token management, and other security measures to protect your personal information from unauthorized access. We retain your data only for as long as your account is active or as needed to provide our services and meet legal obligations.

You may have the following rights regarding your personal data, depending on your location:

• The right to access, update, or correct your profile information at any time.
• The right to request the deletion of your account and associated personal data.
• The right to opt-out of marketing communications (note that we do not send marketing communications at this time).
• The right to withdraw cookie consent at any time via the cookie settings on our website.

To exercise these rights or if you have any privacy-related questions, contact us at admin@baliblissed.com.

This section explains what cookies we use, their purpose, and how you can control them. A cookie is a small text file stored on your device when you visit our website.