Privacy Policy
Last updated: May 10, 2026
This Privacy Policy explains how kozah Travels (“we”, “us”) handles personal information when you use our website and services. It is written as a realistic placeholder for a travel agency; adapt it with your legal counsel to match your actual data flows, processors, and jurisdictions.
1. What we collect
We collect information you provide (name, email, phone, traveler details, payment references), technical data from your device (IP address, browser type, approximate location), and booking-related data from suppliers and payment partners necessary to complete and support your trip.
2. How we use information
We use personal data to operate the site, process searches and bookings, authenticate accounts, communicate confirmations and service messages, detect fraud, improve our product, and comply with law. Marketing communications, if any, are sent only with appropriate consent and with an easy unsubscribe option.
3. Sharing with others
We share data with airlines, hotels, rental hosts, payment processors, fraud-prevention providers, analytics tools, and infrastructure hosts strictly as needed to deliver the service you request. We do not sell your personal information for money; where “sale” or “sharing” is defined broadly by law, we describe compatible disclosures in supplementary notices when required. Concretely, this includes: Duffel (our flight booking and GDS partner) to search, price, and ticket flights; LiteAPI (our hotel supplier platform) to search and book hotel stays; Stripe (our payment processor) to process card payments, refunds, and agent payouts; Supabase (our database, authentication, and hosting provider) to store and secure account and booking data; and Google Analytics to understand aggregate site usage, consistent with our Cookie Policy. We may also enable additional supplementary flight-data sources, such as TraveloPro, from time to time; where enabled, the same limits described in this section apply.
4. Retention and security
We retain personal data only as long as necessary for the purposes described in this Policy: • Booking, transaction, and tax-relevant records are retained for 6 years from the end of the relevant tax year, in accordance with Canada Revenue Agency and Revenu Québec record-keeping requirements. • Payment dispute or chargeback-related data is retained until the matter is resolved, typically within approximately 2 years of the transaction. • Account and profile data is anonymized promptly upon a verified account deletion request (see our Delete Account page for details), except where retained in anonymized form as part of the records described above. We use administrative, technical, and organizational measures appropriate to the sensitivity of travel and payment data; no method of transmission over the Internet is completely secure.
5. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or request a copy (portability) of your personal data, and to object to certain processing. Québec and Canadian privacy frameworks may apply to our users. To exercise any of these rights, including requesting an export of your data, contact privacy@kozahtravels.com with enough detail for us to verify your request — we will provide your data in a commonly used format within a reasonable timeframe.
6. International transfers
Travel suppliers and cloud providers may process data in countries other than your own. Where required, we rely on appropriate safeguards (such as contractual clauses) and transparency in booking flows about who receives traveler data.
7. Updates and contact
We may update this Policy from time to time; the “Last updated” date will change and, for material changes, we will provide additional notice where appropriate. Questions: privacy@kozahtravels.com. Operational support: support@kozahtravels.com.
8. Privacy Officer
Georges Kozah is our Privacy Officer, responsible for overseeing compliance with this Policy and Quebec's Act respecting the protection of personal information in the private sector. Contact: privacy@kozahtravels.com.
9. AI assistant (Nancy)
Nancy, our in-app AI assistant, is powered by Anthropic's Claude API. When you chat with Nancy, we send Anthropic your typed message, recent conversation history, and — when relevant — flight search details already visible on screen (origin, destination, dates, passenger count, cabin class) so Nancy can generate a response. We do not send your account or profile information, booking records, or payment data to Anthropic as part of this chat.