Privacy Policy

Privacy Policy

Effective Date and Last Updated: September 4th, 2024

At Vuelitos, your privacy and the security of your personal data are of utmost importance to us.

This Privacy Policy explains how we collect, use, share, and protect your information when you

use our travel platform.

1. Information We Collect

a. Personal Information

● Contact Information: Name, email address, phone number.

● Identification Information: Passport number, national ID number.

● Payment Information: Credit/debit card details, bank account information.

b. Travel Information

● Itinerary Details: Travel dates, destinations, airlines, flight numbers.

● Travel Preferences: Preferred seats, special meal requests.

c. Technical Information

● Device Data: IP address, device type, operating system, web browser.

● Usage Data: Pages visited, clicks, time spent on the site.

d. Cookie Information

● Cookies and Tracking Technologies: We use cookies and similar technologies to enhance

your experience, analyze site usage, and deliver personalized content and ads. Cookies

are small data files stored on your device that allow us to recognize you and maintain

your preferences.

2. How We Use Information

a. To Provide Services

● Booking Processing: Confirm and manage your flight and other travel service bookings.

● Communication: Send confirmations, updates, and notifications related to your travel.

● Customer Support: Provide assistance and support when needed.

b. To Improve Our Services

● Analysis and Research: Better understand your preferences to improve our platform.

● Personalization: Offer recommendations and content tailored to your interests.

c. Security

Fraud Prevention: Monitor and prevent fraudulent activities.

● Legal Compliance: Ensure compliance with applicable laws and regulations.

3. Sharing Information

a. With Service Providers

● Airlines: We share your information with airlines to process your bookings and manage

your itineraries.

● Insurance Providers: We share necessary data for travel insurance purposes.

● Global Distribution Systems (GDS): We use GDS to access flight inventories and process

your bookings.

● Other Providers: Hotels, car rental companies, and other travel-related services.

b. With Third Parties

● Business Partners: We share information with business partners offering travel-related

products and services.

● Legal Authorities: We may share information with governmental and regulatory

authorities if required by law.

4. Data Security

a. Protection Measures

● Encryption: We use encryption technologies such as SSL/TLS to protect your data during

transmission.

● Secure Storage: We store your data on secure servers with advanced protection

measures.

● Restricted Access: Only authorized personnel have access to your personal data.

b. Data Loss Prevention

● Monitoring: Continuous monitoring to detect and prevent security breaches.

● Backup: Regular backups of our systems to prevent data loss.

5. User Rights

a. Access and Correction

● Access: You can request access to your personal data at any time.

● Correction: If you find errors in your data, you can request corrections.

b. Deletion

● Right to be Forgotten: You can request the deletion of your personal data if it is no

longer needed for the purposes for which it was collected.

c. Restriction and Objection

● Restriction: You can request the restriction of processing your data under certain

circumstances.

● Objection: You can object to the processing of your data for legitimate reasons.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it

was collected or as required by law.

7. Changes to the Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes

through our website or via email.

8. Contact

If you have any questions or concerns about our Privacy Policy, you can contact us at:

● Email: privacy@vuelitos.com

● Postal Address: Centro Comercial Piazza, Valencia, Venezuela.

9. Acceptance of the Privacy Policy

By using our platform, you accept the terms of this Privacy Policy. If you do not agree with these

terms, please do not use our services.

At Vuelitos, we are committed to protecting your privacy and ensuring that your personal data

is secure at all times. We appreciate your trust and look forward to continuing to be your top

choice in travel services.

PRIVACY POLICY – VUELITOS (EN)

Effective Date: January 23, 2026

Last Updated: January 23, 2026

1. 1) Who We Are

This Privacy Policy describes how Vuelitos (“Vuelitos,” “we,” “us,” “our”) collects, uses, shares, and protects personal data when you use our:

• Website(s) and web services (the “Website”)
• iOS and Android mobile applications (the “App”)
• Customer support channels (email, chat, phone, WhatsApp, and similar) (the “Support Channels”)

Business entities. Depending on your location and the service provided, Vuelitos may be operated and supported by one or more related entities, including Travel Caribe C.A. and/or Vuelitos LLC (collectively, “Vuelitos”). For privacy requests, you may contact us using the details below.

Privacy Contact Email: info@vuelitos.com

Business Location: Valencia, Venezuela (with additional operations and support locations as applicable)

Mailing Address (Vuelitos LLC):

1111B S Governors Ave STE 23037

Dover, DE 19904

United States

If you appoint a Data Protection Officer (DPO) or legal representative for specific jurisdictions, you may add those details here.

2) What This Policy Covers

This Policy applies when you:

• Browse or use the Website or App
• Create an account, sign in, or manage profile settings
• Search travel options, build itineraries, and make bookings
• Pay for travel services (online or via assisted/offline methods)
• Contact support or receive notifications and communications
• Participate in promotions, referral programs, or surveys (if offered)

This Policy does not cover third-party websites, airlines, hotels, payment pages, or other services you may access through links or integrations. Those third parties control their own privacy practices.

3) Key Definitions

• Personal Data: Information that identifies you or can reasonably be linked to you (e.g., name, email, phone, booking details).
• Processing: Anything done with Personal Data (collecting, using, storing, sharing, deleting).
• Travel Providers: Airlines, hotels, consolidators, distribution networks, tour operators, insurance providers, or others that fulfill travel services.
• Service Providers: Vendors who help us operate our systems (hosting, security, analytics/diagnostics, communications, support tools, etc.).

4) Personal Data We Collect

We collect Personal Data in different ways depending on the features you use.

4.1 Account & Identity Data (including Google identification and account information)

When you create an account or sign in, we may collect:

• Full name
• Email address
• Phone number
• Password (if you use email/password sign-in) — stored using secure hashing (not in plain text)
• Account settings and preferences
• Basic profile information provided by a third-party sign-in provider (if you choose it), such as:
• Name
• Email address
• Profile photo (if available and permitted)
• A unique account identifier/token from that provider
• We do not receive your Google/Apple password.

4.2 Booking & Travel Data

To search, book, issue, and manage travel services, we may collect:

• Origin/destination, dates, passenger counts, fare preferences, filters
• Passenger details needed for ticketing (e.g., legal name, date of birth, nationality)
• Passport/ID information (when required by airlines, hotels, or local regulations)
• Booking references/record locators (PNR), ticket numbers, confirmation codes
• Ancillaries (bags, seats, meals, special assistance requests)
• Loyalty program details (if provided)

4.3 Payment & Billing Data (Payment information usage)

Payment details depend on the method you use:

A) Online card payments / digital payments

• Payment status (approved/declined), timestamps, amount, currency
• Billing address (when required)
• Limited payment metadata (e.g., card brand and last four digits)
• Fraud and verification signals (where applicable)
• We do not store full card numbers (PAN). Card details are handled by certified payment processors using tokenization and security controls.

B) Assisted/offline payments (bank transfer, Zelle, local transfer, etc., if offered)

• Proof of payment (receipt/screenshot)
• Sender name and transfer metadata (as shown in your receipt)
• Verification notes and status

4.4 Customer Support & Communications Data

When you contact us, we may collect:

• Messages and correspondence content (email/chat/WhatsApp)
• Call notes or recordings where legally permitted and disclosed
• Support ticket history and resolutions
• Identity verification information to protect your account (where needed)

4.5 Device, App, and Usage Data (Website/App)

When you use the Website or App, we may collect:

• IP address
• Device type, OS version, app version, language, timezone
• Browser type (Website)
• Device identifiers and app instance identifiers
• Session IDs, log data, timestamps, crash logs, diagnostics
• Interaction data (pages/screens viewed, clicks, features used, errors)

4.6 Approximate Location Data

We may derive approximate location from IP address or device settings (where enabled) to:

• improve fraud prevention and security
• comply with providers or regulations
• offer location-relevant options (where applicable)

4.7 Files, Photos, and Documents You Upload

If you upload documents or images (e.g., payment receipts, travel documents), we process the content and metadata needed to verify and fulfill your request.

4.8 Fraud Prevention and Security Data

We may collect and generate:

• Risk signals (e.g., suspicious login attempts, unusual transactions)
• Security logs and audit trails
• Device and network indicators used to protect the platform

4.9 Information We Do Not Intentionally Collect

We do not intentionally collect highly sensitive categories (e.g., medical, biometrics) unless you voluntarily provide it and it is strictly necessary for travel fulfillment (for example, mobility assistance requests). If you share sensitive information, please limit it to what is necessary.

5) How We Collect Personal Data

We collect Personal Data:

1. Directly from you (forms, bookings, uploads, support conversations)
2. Automatically (cookies, SDKs, logs, diagnostics when you use Website/App)
3. From Travel Providers and partners (booking confirmations, schedule changes, ticketing status)
4. From payment processors and fraud tools (payment verification, dispute/chargeback signals)
5. From sign-in providers (only if you choose third-party login)

6) Why We Use Personal Data (Purposes)

We use Personal Data to:

6.1 Provide the Service (Core App/Website functionality)

• Create and manage accounts
• Search, build, and display travel options
• Issue tickets, confirm bookings, and manage itineraries
• Process payments and refunds
• Provide customer support and resolve issues

6.2 Security, Fraud Prevention, and Platform Integrity

• Verify identity and protect accounts
• Detect and prevent fraud, abuse, and unauthorized access
• Secure systems and maintain audit logs

6.3 Communications and Notifications

• Send booking confirmations, changes, cancellations, reminders
• Send support responses and service announcements
• Send optional marketing communications (where allowed and where you can opt out)

6.4 Analytics, Diagnostics, and Product Improvement

• Monitor performance and reliability (crash logs, diagnostics)
• Understand feature usage and improve UX
• Troubleshoot errors and maintain service quality
• We configure these tools to reduce the collection of directly identifying data where feasible.

6.5 Legal and Compliance

• Meet legal obligations (tax, accounting, dispute handling)
• Comply with lawful requests from regulators or authorities
• Enforce terms, prevent misuse, protect rights and safety

7) Legal Bases for Processing (Where Applicable)

Depending on your jurisdiction, we rely on one or more of the following bases:

• Contract necessity (to provide bookings and services you request)
• Legitimate interests (security, fraud prevention, product improvement)
• Legal obligations (accounting, disputes, regulatory requirements)
• Consent (where required for certain cookies/marketing or device permissions)

8) Cookies, Tracking Technologies, and Similar Tools

8.1 Website Cookies

We may use:

• Strictly necessary cookies (security, sessions, consent management)
• Functional cookies (preferences)
• Analytics cookies (performance and usage)
• Marketing cookies (only where permitted and with required choices)

Where required by law, we present a cookie banner and allow you to manage preferences.

8.2 Mobile App SDKs and App Tracking

Our App may use software development kits (SDKs) and similar technologies for:

• analytics and diagnostics (including crash reporting)
• security and fraud detection
• push notification delivery
• core app functionality

Advertising tracking: If we ever engage in tracking for advertising purposes that links data across apps/websites, we will provide required disclosures and obtain any necessary permissions (for example, iOS permission prompts) before doing so.

8.3 Your Choices

• Manage cookie preferences on the Website (where available)
• Disable cookies in your browser (may reduce functionality)
• Control device permissions in iOS/Android settings (notifications, photos, etc.)

9) Communications and Notifications

9.1 Transactional Messages

We send messages necessary to deliver the service, including:

• booking confirmations
• itinerary changes
• payment and refund updates
• security alerts
• support responses

9.2 Marketing Messages

If we send marketing emails/SMS/push notifications:

• You can opt out using unsubscribe links or by contacting us
• Opting out may not affect transactional service messages

9.3 Push Notifications (User Control)

You can enable/disable push notifications at any time through:

• your device settings, and/or
• in-app notification settings (if available)

10) Sharing of Personal Data (Third-Party or Other Website Integrations)

We share Personal Data only as needed to provide and protect the service.

10.1 Sharing with Travel Providers (Booking fulfillment)

We share required booking and passenger information with Travel Providers and distribution partners to:

• retrieve availability and pricing
• issue tickets and reservations
• manage changes, cancellations, or disruptions
• provide travel service support

10.2 Sharing with Payment Processors and Financial Partners

We share payment and transaction details needed to:

• process payments and refunds
• handle disputes/chargebacks
• apply fraud and verification controls

10.3 Sharing with Service Providers (Technology vendors)

We may share data with vendors that help us operate:

• hosting and infrastructure
• customer support tools
• security monitoring and fraud prevention
• analytics and diagnostics
• communications delivery (email/SMS/push)

These providers are contractually required to protect data, use it only for authorized purposes, and apply appropriate security measures.

10.4 Sharing for Legal Reasons

We may disclose data when required to:

• comply with law or lawful requests
• protect our rights, users, and systems
• investigate fraud or security incidents

10.5 Integrations and External Links

Our Website/App may contain links or embedded services. When you interact with third-party services, their privacy policies govern their practices.

11) Data Retention

We retain Personal Data only as long as necessary for the purposes described above, including:

• Booking and financial records: typically retained for legal/tax/accounting obligations and dispute resolution (often 5–10 years depending on jurisdiction)
• Support records: typically 12–24 months, unless longer retention is required for disputes or compliance
• Security logs and fraud prevention data: typically up to 12 months, or longer if needed for investigations
• Analytics/diagnostics data: retained based on operational need and configured retention settings

When retention ends, we delete or anonymize data in accordance with our policies and applicable law.

12) Security and Safety Features of Our Product

We use reasonable technical and organizational safeguards appropriate to the sensitivity of the data, such as:

• encryption in transit (TLS/HTTPS)
• access controls and least-privilege policies
• secure development practices and monitoring
• auditing, logging, and incident response procedures
• vendor due diligence and contractual controls

No system can be guaranteed 100% secure; however, we continuously improve our protections.

13) Your Rights and How You Control Your Personal Details

Your rights depend on where you live, but typically include:

• access to your data
• correction/rectification
• deletion/erasure
• portability (where applicable)
• objection/restriction (where applicable)
• withdrawing consent (where processing is based on consent)

13.1 In-App Controls (where available)

You may be able to:

• update profile details
• manage communication preferences
• control notification settings
• manage saved travelers and booking details

13.2 Account Deletion and Data Deletion

You can request account deletion in the following ways:

• In-app deletion request: Settings → Account → Delete Account (or equivalent)
• By email: info@vuelitos.com

What gets deleted: We delete or anonymize personal data associated with your account where permitted.

What may be retained: Some records may be retained when required for legal, tax, accounting, fraud prevention, security, chargeback/dispute resolution, and booking obligations (e.g., invoices, transaction logs, booking records).

Verification: We may need to verify identity before deletion to prevent unauthorized requests.

13.3 How to Submit a Privacy Request

Email info@vuelitos.com with:

• your full name
• the email/phone used on the account
• your country of residence
• the specific request (access, correction, deletion, etc.)

We respond within the timeframe required by law.

14) International Data Transfers

Vuelitos operates and serves users internationally. Your data may be processed in countries other than your own. Where required, we use appropriate safeguards to protect international transfers (such as contractual protections and security measures).

15) Children’s Privacy

Vuelitos is not intended for children under the age required by local law to consent to data processing. We do not knowingly collect Personal Data from children without appropriate consent. If you believe a child has provided data, contact us to address it.

16) Changes to This Policy

We may update this Policy from time to time. We will update the “Last Updated” date and, where required, provide additional notice for material changes.

17) Contact Us

For privacy questions, requests, or complaints:

Email: info@vuelitos.com

Mailing Address (Vuelitos LLC):

1111B S Governors Ave STE 23037

Dover, DE 19904

United States

Optional Companion Page (Recommended): Privacy Choices / Deletion

To make app store reviews faster (without disclosing vendors/SDKs), you can also publish:

• https://vuelitos.com/privacy/choices

Include:

• “Request account deletion” (simple form or email instructions)
• “Request data export”
• “Cookie preferences”
• “Marketing opt-out”
• “Support contact”

If you want, tell me the exact in-app navigation wording Aditya is implementing for deletion (example: “Profile → Settings → Account → Delete”) and I’ll align the policy text to match the UI 1:1, which reduces reviewer questions.