Skip to main content

Privacy Policy & Terms

Your rights, our responsibilities, and the rules of travel

Last Updated: March 8, 2026

1. Introduction

Welcome to Beetravel ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and while using our app. This policy explains our data practices and your rights regarding your personal information.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

    2.2 Automatically Collected Information

    When you use our services, we automatically collect:

      3. Legal Basis for Processing (GDPR Art. 6)

      We process your personal data based on the following legal grounds:

      • Contract (Art. 6(1)(b)): Processing necessary to provide our services — including account creation, trip planning, itinerary management, and customer support.
      • Consent (Art. 6(1)(a)): Where you have given explicit consent — including marketing emails, newsletters, optional location sharing, and non-essential cookies (analytics and preference cookies).
      • Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate interests — including service improvement, fraud prevention, security monitoring, and anonymized usage analytics.
      • Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable laws — including tax obligations, legal requests from authorities, and data breach notifications.

      You may withdraw your consent at any time where consent is the legal basis for processing. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

      4. How We Use Your Information

      We use your information to:

        5. Sharing Your Information

        We may share your information with:

          We never sell your personal information to third parties.

          6. Third-Party Subprocessors

          We use the following third-party service providers to operate and improve our services. Each processes data on our behalf under contractual obligations:

          ProviderPurposePrivacy Policy
          Google Analytics (GA4)Website analytics and usage statisticspolicies.google.com/privacy
          HotjarHeatmaps and session recordings for UX improvementhotjar.com/privacy
          MapboxMaps and location servicesmapbox.com/privacy
          ResendTransactional and marketing email deliveryresend.com/privacy
          Supabase (AWS EU)Database hosting, authentication, and backend servicessupabase.com/privacy

          We regularly review our subprocessors to ensure they meet adequate data protection standards. This list may be updated as we add or change service providers.

          7. Your Choices and Rights

          Under the GDPR and applicable data protection laws, you have the right to:

          • Access — Request a copy of the personal data we hold about you.
          • Rectification — Correct any inaccurate or incomplete personal information.
          • Erasure — Request deletion of your account and personal data.
          • Restriction — Request restriction of processing in certain circumstances.
          • Object — Object to processing based on legitimate interests.
          • Data Portability (Art. 20) — Request your personal data in a structured, commonly used, machine-readable format (JSON). To exercise this right, contact us at contact@beetravel.app and we will provide your data export within 30 days.
          • Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.
          • Lodge a Complaint — You have the right to lodge a complaint with your local data protection authority (in Portugal: CNPD — Comissão Nacional de Proteção de Dados).

          To exercise any of these rights, contact us at contact@beetravel.app. We will respond within 30 days.

          8. Data Security

          We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no internet transmission is completely secure, so we cannot guarantee absolute security.

          9. International Transfers

          Our primary data processing takes place within the European Union. Some third-party subprocessors listed in Section 6 may process data outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, in compliance with GDPR Chapter V.

          10. Data Retention

          We retain your personal data only as long as necessary for the purposes described in this policy. If you delete your account, all personal data is permanently erased within 30 days and cannot be recovered. Anonymized analytics data may be retained indefinitely as it cannot be linked to any individual.

          11. Cookies & Tracking

          We use cookies and similar tracking technologies to enhance your experience. Below are the specific tools and cookie types we use:

          • Essential cookies: Required for basic functionality such as session management and security. These cannot be disabled.
          • Analytics cookies: We use Google Analytics 4 (GA4) to understand how visitors interact with our website, collecting anonymized usage data such as pages visited and session duration. GA4 uses first-party cookies. You can opt out via the Google Analytics Opt-out Browser Add-on.
          • Experience analytics: We use Hotjar for heatmaps and anonymized session recordings to improve usability. Hotjar does not collect personally identifiable information in our configuration. You can opt out at hotjar.com/do-not-track.
          • Preference cookies: Remember your settings and choices (such as language or region) to provide a more personalized experience.

          We do not use cookies for advertising or third-party tracking purposes. You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of our services.

          12. Children's Privacy

          Beetravel is intended for users aged 13 and above. We do not knowingly collect data from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly.

          13. Changes to This Policy

          We may update this policy periodically. We will notify you of significant changes by posting a notice on our website or sending you an email. Continued use of our services after changes constitutes acceptance of the updated policy.

          14. Data Protection Contact

          For all privacy-related inquiries, data protection requests, or to exercise your rights under GDPR, please contact our Data Protection team:

          If you are not satisfied with our response, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

          15. Contact Us

          If you have general questions about this policy or our practices, please contact us at contact@beetravel.app.