1. Who We Are

Luxvia (“we”, “us”, “our”) is a travel preparation platform operated by:

For privacy-related enquiries, please email: helloluxvia@gmail.com

2. What This Policy Covers

This policy explains how Luxvia collects, uses, stores, and protects your personal information when you use myluxvia.com, including when you sign in using Google OAuth. It applies to all users globally, with additional rights outlined for users in the European Union, United Kingdom, and California.

3. Information We Collect

3a. Information Received From Google Sign-In

When you choose to sign in with Google, we receive the following information from your Google account:

• –Email address — to identify your account
• –Display name — to personalise your experience
• –Profile photo URL — to display your avatar within the platform

We request only the minimum scopes necessary to authenticate your account. We do not access your Gmail, Google Drive, Google Calendar, or any other Google services.

3b. Information You Provide Directly

• –Passport country — collected during onboarding to personalise visa and entry requirement information
• –Trip data — destinations, travel dates, and trip details you create within the platform
• –User-submitted content — insider tips and suggested edits you contribute to the platform

3c. Information Collected Automatically

• –Usage data — pages visited, time spent on pages, and general interaction patterns, collected via Vercel Analytics
• –Device and browser information — browser type, device type, and operating system
• –IP address — collected automatically as part of standard web server operation and analytics

Vercel Analytics is privacy-focused and does not use cookies or track users across third-party websites. Aggregated, anonymised data is used solely to understand how the platform is being used.

4. How We Use Your Information

We do not use your data for advertising or ad targeting. We do not sell your personal information.

5. Google User Data — Specific Disclosures

Luxvia's use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• –Google user data is used only to provide and improve features visible to you within Luxvia
• –Google user data is not transferred to third parties except as necessary to operate the platform (i.e., secure storage in Supabase)
• –Google user data is not used for advertising or to build advertising profiles
• –Google user data is not read by humans except where required for security investigation or legal compliance
• –You may revoke Luxvia's access to your Google account at any time via Google Account Permissions. Upon revocation, we will retain only anonymised contribution data as described in Section 9.

6. How We Store and Protect Your Data

Your personal data is stored securely in Supabase, a managed database platform. Data is protected by:

• –Encrypted connections (TLS/HTTPS) for all data in transit
• –Encrypted storage at rest
• –Row-level security policies restricting data access to authorised users only
• –Access controls limiting database access to authorised personnel only

No user data is shared with or processed by artificial intelligence systems. Luxvia uses AI tools internally — no personal data is involved in that process.

In the event of a data breach affecting your personal information, we will notify affected users and relevant supervisory authorities within the timeframes required by applicable law.

7. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

All third-party service providers are contractually required to handle your data securely and only for the purposes described above.

8. Cookies and Tracking

Luxvia does not use advertising cookies or cross-site tracking cookies.

Vercel Analytics, our only analytics tool, operates without cookies and does not track users across websites. No cookie consent banner is required for this tool.

If we introduce additional analytics or tracking tools in future, this policy will be updated and users notified in advance.

9. User-Submitted Content Retention

When you submit insider tips, suggested edits, or other contributions to Luxvia, you grant Luxvia a perpetual, irrevocable, royalty-free licence to use, display, and distribute that content on the platform.

If you delete your account, your personal information will be removed from your contributions, but the content itself may be retained in anonymised form to preserve the integrity and usefulness of the platform for other travellers.

10. Data Retention

You may delete your account at any time from your account settings. Upon deletion, all personal data associated with your account will be permanently removed from our systems within 30 days, except for anonymised contribution data as described above.

11. Your Rights

All Users

• –Access — request a copy of the personal data we hold about you
• –Correction — request correction of inaccurate data
• –Deletion — request deletion of your account and associated personal data
• –Portability — request your data in a portable format

EU and UK Users (GDPR / UK GDPR)

In addition to the above, you have the right to:

• –Restrict processing — request that we limit how we use your data
• –Object to processing — object to processing based on legitimate interests
• –Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
• –Lodge a complaint — with your local supervisory authority:
  • EU users: Your national data protection authority (edpb.europa.eu)
  • UK users: The Information Commissioner's Office — ico.org.uk

To exercise any of these rights, please contact us at: helloluxvia@gmail.com. We will respond within 30 days.

12. International Data Transfers

Luxvia is operated by an individual based in the United States. Your data may be processed and stored in data centres outside your country of residence, including in the United States, where Supabase and Vercel infrastructure is hosted.

For users in the EU and UK, these transfers are made under appropriate safeguards including standard contractual clauses incorporated into our agreements with Supabase and Vercel. For more information, see the Supabase Privacy Policy and the Vercel Privacy Policy.

13. Travel Information Disclaimer

Visa and entry requirement information displayed on Luxvia is provided for general guidance only and may not reflect current government policy. Requirements change frequently without notice.

Always verify visa and entry requirements with the relevant embassy, consulate, or official government source before travel. Luxvia assumes no liability for denied entry, visa refusals, missed travel, or any other consequences arising from reliance on information displayed on this platform.

14. Children's Privacy

Luxvia does not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us at helloluxvia@gmail.com and we will delete it promptly.

15. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Continued use of Luxvia after changes are posted constitutes acceptance of the updated policy.

16. Contact

For privacy-related questions, data requests, or to exercise your rights: helloluxvia@gmail.com