Privacy Policy

Who we are

Planisky is an AI-powered travel planning service. When this policy refers to "we", "us", or "Planisky", it means the team behind this product. For any privacy-related question, contact us at privacy@planisky.com.

What we collect

We only collect what is necessary to provide the service:

• Email address — when you join the waitlist or create an account.
• Travel preferences — your answers when you complete the destination quiz, saved to provide and improve personalised recommendations.
• How you found us — information about how you discovered Planisky, captured when you join the waitlist.
• Aggregate visit statistics — anonymous page session counts grouped by country. No personal data is stored.
• Usage data — pages visited and features used, collected with your consent and in aggregate to improve the service.

We do not collect payment details directly. When payments are introduced, they will be handled entirely by a certified payment processor and never touch our servers.

Legal basis for processing

We process your data under the following legal bases (GDPR Art. 6):

• Consent (Art. 6(1)(a)) — for analytics cookies (PostHog) and marketing communications. You can withdraw consent at any time via the cookie preferences link in the footer.
• Contract (Art. 6(1)(b)) — to provide the service once you create an account.
• Legitimate Interests (Art. 6(1)(f)) — for product improvement and understanding our audience, where our interest does not override your rights. You may object at any time by contacting privacy@planisky.com.

How we use it

• Send waitlist updates and product announcements
• Provide and improve the Planisky service
• Personalise trip recommendations based on your travel style
• Prevent abuse and protect the security of the platform

We do not use your data for advertising, and we do not sell it to third parties.

Data sharing

We share data only with trusted infrastructure providers (Supabase, Vercel, PostHog, Upstash, Resend) under GDPR-compliant data processing agreements. We do not share your data with advertisers, data brokers, or any other third party.

International transfers

Your data is stored in the European Union. Where any provider operates outside the EU, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) before any transfer occurs.

Data retention

Email addresses are kept while your account is active. Travel preferences and analytics data are retained for up to 12 months. Aggregate statistics are retained for up to 24 months. If you request deletion, we remove your personal data within 30 days.

Security

We apply industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is perfectly secure — if you believe your data has been compromised, contact us immediately at privacy@planisky.com.

Cookies and local storage

We use essential cookies for authentication and language preferences. With your consent, we use analytics cookies to improve the service. We also collect aggregate page view data without cookies, and use temporary session data (containing no personal data) to improve your experience.

Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, email privacy@planisky.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Children

Planisky is not directed at children under 16. We do not knowingly collect data from anyone under that age. If you believe we have done so by mistake, contact us and we will delete it promptly.

Prohibition on AI training use

The content, text, data, design, and all other materials on this website may not be used, in whole or in part, to train, fine-tune, evaluate, or otherwise develop artificial intelligence or machine learning models without prior written consent from Planisky. This prohibition applies to all automated systems, including but not limited to large language models, image generation models, and recommendation systems. Accessing this website with an automated agent for the purpose of AI training data collection is a violation of these terms. Authorised AI search and answer crawlers (such as GPTBot, ClaudeBot, and PerplexityBot) are permitted solely to index content for the purpose of answering user queries — not for model training.

Changes to this policy

We may update this policy as the product evolves. If changes are material, we will notify you by email before they take effect. Continuing to use Planisky after that date means you accept the updated policy.