Privacy Policy

1. Who we are

TravelViber is a brand of The Lime Agency LLC ("we", "us", "our"), a company based in the United States. We are responsible for the personal information processed through the TravelViber website and services (the "Service") — the "controller" under the EU and UK General Data Protection Regulation (GDPR). Contact us at [email protected].

This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have — including under UK/EU data protection law and US state privacy laws.

2. The short version

• We collect what you need to use a marketplace: your account, your listings and your messages.
• We don't sell your personal information, share it for targeted advertising, or use advertising or analytics cookies.
• Your trips are private; your email address is never shown to other users.
• We use only essential cookies — no advertising or analytics cookies.
• You can see, download, correct or delete your data — email [email protected].

3. Information we collect

3.1 Information you give us

• Account: name, email address, password (stored only as a secure hash) and, if you enable it, two-factor authentication settings.
• Profile: display name, country and city, and optionally a photo, bio, website and phone number (used only for WhatsApp contact if you turn it on).
• Listings: titles, descriptions, photos and videos, prices, category, city and country, handoff options and dates.
• Activity: messages, offers, reviews, reports, favorites, saved searches and alert settings, notification preferences.
• Trips: destinations and dates you add in the trip planner (and, optionally, where you're coming from).
• Support: anything you send us through the contact form or by email.

3.2 Information collected automatically

• Technical and log data: IP address, browser and device type, pages requested, date and time, and error logs.
• Account activity: when you were last active (used for features such as response indicators).
• Cookies: see Section 7.

3.3 Location

We convert the city you enter on a listing, profile or trip into approximate, city-level coordinates (for example, the center of Chicago) so we can show distances and maps. We never ask for or store a street address. If you use "Use my location" in search, your browser asks for your permission first. We round your location to about 1 km (0.6 miles) and use it only for that search; it is not saved to your account.

3.4 Information from others

Other users may give us information about you, for example in messages, reviews or reports.

4. How we use information, and our legal bases

For users in the UK and EU, the GDPR requires a legal basis for each use:

• To provide the Service — accounts, listings, search, messaging, offers, reviews, favorites, trips, alerts and transactional emails (such as verification, password resets and notifications you've chosen). Basis: performance of our contract with you.
• To keep TravelViber safe — preventing fraud, spam and abuse, automatically flagging first messages that contain links for review, handling reports, and enforcing our Terms. Basis: our legitimate interests in running a safe marketplace.
• To operate and improve the Service — security, troubleshooting and service logs. Basis: legitimate interests.
• Optional features — WhatsApp contact, "near me" searches and email alerts, which you can switch off at any time. Basis: your consent or your request.
• Legal obligations — responding to lawful requests and keeping records required by law. Basis: legal obligation.

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Automatically flagged messages are reviewed by a person before any action is taken against an account.

5. What other users can see

• Public: your display name, profile photo, bio, city and country, ratings and reviews, and your listings (including photos and the listing's city).
• People you message: the messages and offers you send them.
• WhatsApp (only if you turn it on): signed-in users who tap "Chat on WhatsApp" on your listing open a WhatsApp chat with your number, so they will see it. WhatsApp's own privacy policy then applies.
• Private: your email address, trips, saved searches, favorites and account settings are not shown to other users.

Please don't include personal details you don't want others to see in listings, photos or messages. Photos and videos can contain hidden metadata, such as where and on what device they were taken. We automatically remove this metadata (including GPS location) from every photo, video and profile picture before it is stored.

6. Who we share information with

We share personal information only with:

• Hosting: OVHcloud, which hosts our servers and database in Canada.
• Network and security: Cloudflare, which delivers and protects the website and processes visitors' IP addresses and request data.
• Maps: map images come from OpenStreetMap, whose tile servers receive your IP address when a page with a map is displayed. All other fonts, scripts and images are served from our own servers.
• Authorities and others where required: if needed to comply with the law, respond to valid legal requests, or protect the rights, safety or property of our users, the public or us.
• A successor business: if our business or the TravelViber brand is sold or reorganized; we will tell you before your information becomes subject to a different privacy policy.

We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined in US state privacy laws. We do not use third-party advertising or analytics trackers.

7. Cookies and similar technologies

We use only these cookies, all strictly necessary for the Service to work:

• travelviber_session — keeps you signed in and remembers your session (expires after 2 hours of inactivity, or when you log out).
• XSRF-TOKEN — protects forms against cross-site request forgery.
• remember_web_… — set only if you tick "Remember me" when signing in, to keep you signed in on that device until you log out.

Because these cookies are essential, they don't require consent. We don't use advertising or analytics cookies, so there is nothing to opt out of; we treat Global Privacy Control and "Do Not Track" signals as satisfied because we do not sell or share personal information or track you across other sites.

8. Where your data is stored

Our servers are in Canada, and The Lime Agency LLC operates from the United States. Cloudflare processes traffic through its global network. The European Commission and the UK have recognized Canada as providing adequate protection for personal data handled by commercial organizations. Where information is accessed from or transferred to the United States or other countries, we rely on the safeguards available under applicable law, such as our service providers' standard contractual clauses or their certification under the EU–US Data Privacy Framework and its UK extension.

9. How long we keep it

• Your account and content are kept while your account is open.
• When you delete your account, it is hidden immediately and permanently erased 30 days later, together with your listings, photos, messages, offers, reviews, trips, saved searches and favorites.
• Listings you delete are permanently erased after 30 days. Expired listings stay in your account until you delete or renew them.
• Unfinished drafts are removed after 30 days without changes.
• Service logs are kept for up to 90 days.
• Backups are kept for a limited period for disaster recovery and then overwritten.

We may keep specific information longer where the law requires it or to deal with a legal claim or an ongoing investigation of abuse.

10. Security

We protect your information with measures including HTTPS encryption, hashed passwords, optional two-factor authentication, access restricted to authorized personnel, and time-limited links for media. No online service is completely secure; if a breach affects your personal information, we will notify you and the relevant authorities as required by law.

11. Your rights — UK and EU

If you are in the UK, the European Economic Area or Switzerland, you have the right to:

• access your personal data and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting earlier processing.

You can also complain to a data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your country of residence or work. We'd appreciate the chance to help first.

12. Your rights — United States

Depending on your state of residence (for example California, Colorado, Connecticut, Florida, Oregon, Texas, Utah or Virginia), you may have the right to:

• know what personal information we collect, use and disclose, and access a copy;
• correct inaccurate information;
• delete your personal information;
• receive your information in a portable format;
• opt out of the sale of personal information, targeted advertising and profiling — we do none of these;
• appeal our decision on your request, by replying to our response;
• not be discriminated against for exercising your rights.

Categories collected in the last 12 months: identifiers (name, email, IP address, account ID); customer records (phone number, if provided); commercial information (listings, offers); internet activity (log data); approximate geolocation (city-level); and user-generated content (photos, messages, reviews). These are collected from you, your device and other users, for the purposes in Section 4, and disclosed only to the service providers in Section 6. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

You or an authorized agent can make a request by emailing [email protected]. We will verify your identity (usually by confirming control of your account email) and respond within the time required by law, normally 45 days.

13. Using your rights

Email [email protected] from the address on your account. You can also update your profile and delete your account yourself in your profile settings. We respond within one month (UK/EU) or the period required by your state law, and we don't charge for reasonable requests.

14. Children

TravelViber is only for adults aged 18 or over. We don't knowingly collect information from anyone under 18; if we learn we have, we delete it. If you believe a minor is using the Service, contact [email protected].

15. Changes to this policy

If we update this policy we will change the "Last updated" date, and for material changes we will email registered users at least 14 days before they take effect.

16. Contact

The Lime Agency LLC — TravelViber Privacy
[email protected]