Privacy Policy

This Policy explains how ViajAI processes personal data when you use viajai.cl or app.viajai.cl.

1. Controller

ViajAI, Chile. privacidad@viajai.cl for privacy rights and questions. soporte@viajai.cl for general support.

2. Data we process

• Account: identifier, name, email and authentication method.
• Trips: destinations, dates, preferences, prompts, itineraries and ratings.
• Collaboration: members, proposals, shared group expenses and reservations. Balances between travelers are informational records; ViajAI does not transfer money between people.
• Payments to ViajAI: if you purchase an AI plan, the payment processor (Mercado Pago on web or Apple on iOS) receives the data needed to charge you. ViajAI does not store card numbers or security codes; we keep transaction identifiers, plan status, amount, currency and validity dates.
• Documents: files you upload, accessible only through authorized temporary links.
• Operations: IP address (for rate limiting), browser, device, timestamps and errors.
• Optional analytics: aggregated and technical data — no emails, destinations, prompts or financial data.

3. Purposes

Creating and securing accounts; generating and storing trips; enabling collaboration and documents; providing support and transactional email; preventing abuse; and meeting legal obligations. Analytics, personalization and replay depend on separate consents you can withdraw at any time.

4. Artificial intelligence

We use an external AI model to generate itineraries. Required trip parameters and text you provide are sent for processing. Do not enter passports, passwords or medical data in free-text fields. Output may be inaccurate — always verify with official sources.

5. Third-party content (TikTok)

If you enable the optional TikTok insights add-on, we analyze public destination videos to suggest places. That content belongs to its authors and source platforms; we use it only to enrich your itinerary within the product. We do not republish full videos or guarantee accuracy of recommendations derived from social media.

6. Providers

We use providers that may process data on our behalf or as independent controllers, including:

• Infrastructure: hosting, database and storage (e.g. Railway, Supabase).
• Authentication and transactional email: Supabase Auth and Resend.
• Payments: Mercado Pago (web) and Apple / RevenueCat (in-app purchases on iOS).
• AI and travel data: language models, maps, places and search providers.
• Operations: error monitoring, optional analytics and bot prevention.

Some process data outside Chile. We apply contracts and access controls to protect these transfers.

7. Analytics and optional consents

Analytics and session replay are not loaded before you accept. Replay applies to a 25% sample, masks all inputs and text, and is disabled for documents, profile and financial areas. You can accept, reject or revoke at any time via “Privacy preferences” in the site footer.

8. Retention

• Account and content: while your account remains open or until you request deletion.
• Documents: until you delete them or close your account.
• Technical logs: as long as needed to investigate incidents.

Backups may take up to 30 days to be overwritten.

9. Security

We use encryption in transit, row-level access control, private storage, signed links, CAPTCHA and error monitoring. Report vulnerabilities to seguridad@viajai.cl.

10. Your rights

You can access, correct, export or delete your data from within the product, or request it by email. You may also complain to the competent authority.

11. Children

ViajAI is not directed to children under 13.

12. Changes

We will publish updates here and change the displayed date. We will ask again when an optional purpose changes materially.