Privacy notice

Who we are

Marivoya is a travel itinerary planning service operated by Veronica Castro ("Marivoya", "we", "us"). Veronica Castro is the data controller responsible for the personal data described in this notice and decides why and how that data is processed. You can reach us through the contact page on this site.

Personal data we collect

• Account data: name, email address, password credentials, profile photo, and account type (personal or business).
• Preference data: preferred currency, date format, home airport, language, accessibility settings, and notification choices.
• Trip content you create: destinations, dates, activities, reservations, confirmation numbers, documents you upload, packing lists, budgets, expenses, notes, and the names or email addresses of travelers you invite.
• Business and client data (Pro accounts): client profiles, travel preferences, invoices, quotes, and internal notes you enter.
• Support and communications: messages you send us and the correspondence we send you.
• Usage and technical data: device and browser type, IP address, log data, and basic product analytics.
• Billing data: your subscription plan, status, renewal dates, and transaction records. Card numbers and full payment details are collected and processed by Paddle, not by us — we never see or store your card number.

Why we use it, and our legal basis

• To create and operate your account and deliver the itinerary planning service — performance of a contract with you.
• To process subscriptions, renewals, invoices, and refunds through our Merchant of Record — performance of a contract and compliance with legal obligations.
• To send service and trip notifications you have enabled — performance of a contract, or your consent where required.
• To secure the service, prevent fraud and abuse, and troubleshoot problems — our legitimate interests in operating a safe service.
• To improve and develop features using aggregated or de-identified usage data — our legitimate interests.
• To send optional marketing or product updates — your consent, which you may withdraw at any time.
• To comply with tax, accounting, and other legal requirements — compliance with a legal obligation.

We do not sell your personal information and we do not use your trip content to build advertising profiles.

Who we share it with

• Other travelers: trip content is visible to the travelers you invite, according to the role and document visibility settings you choose.
• Paddle: our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and acts as an independent controller for the billing, payment, tax, invoicing, fraud-screening, and refund data it processes. See Paddle's privacy notice at paddle.com/legal/privacy.
• Service providers (processors): hosting, database, email delivery, file storage, and analytics providers who process data on our behalf under contract and only on our instructions.
• Professional advisers: legal, accounting, and tax advisers where necessary.
• Authorities: where we are legally required to disclose data, or to establish, exercise, or defend legal claims.
• Successors: a buyer or successor entity in the event of a merger, acquisition, or sale of assets.

International transfers

Our providers, including Paddle, may process data in countries outside your own, including the United States. Where personal data is transferred out of the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses together with appropriate additional safeguards.

How long we keep it

• Account and profile data: for as long as your account is active, then deleted or anonymised within 90 days of account closure.
• Trip content and uploaded documents: until you delete it, or within 90 days of account closure.
• Billing and transaction records: retained for 7 years to meet tax and accounting obligations, after which they are deleted.
• Support correspondence: 24 months from the last message.
• Server and security logs: up to 12 months.

When data is no longer needed for the purposes above, we delete it or irreversibly anonymise it.

Your rights

Subject to the law where you live, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability of data you provided, and you may object to processing based on our legitimate interests or withdraw consent at any time. You can edit or delete your trips and close your account directly in Settings. To exercise any right, contact us through the contact page; we respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls that restrict trip data to the travelers you grant access to, and least-privilege access for administrators. No system is perfectly secure, so please use a strong, unique password and keep your credentials confidential.

Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember your settings, and limited analytics storage to understand how the product is used. Paddle sets its own cookies during checkout to process your payment and prevent fraud. You can clear or block cookies in your browser, but strictly necessary storage is required for sign-in to work.

Children

Marivoya is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Changes and contact

We may update this notice as the service evolves; material changes will be announced in the app before they take effect. Questions or requests about privacy can be sent to Veronica Castro through the contact page on this site.