Privacy Policy
Last updated: July 29, 2026
GoTourista ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, why we collect it, and the rights you have over it. It applies to visitors from every country, with additional rights called out for the EU/UK (GDPR/UK GDPR) and California (CCPA).
1. What We Collect
- Email addresses — when you subscribe to flight alerts or our newsletter.
- IP address & device information — for analytics, security, and fraud prevention.
- Flight search preferences — origin, destination, dates, region, and currency.
- Browser data — user agent, language, screen size, and referring URL.
- Cookie identifiers — see our Cookie Policy.
2. How We Use Your Data
- Send you the price alerts and emails you request.
- Improve website performance and search relevance.
- Analyze aggregate traffic patterns.
- Detect and prevent fraud and abuse.
- Comply with legal obligations.
3. Third-Party Services
- Supabase — hosting, database, and authentication.
- Google Analytics 4 — anonymized traffic statistics (only if you opt in).
- Make.com — internal automation and workflows.
- SendGrid — transactional and marketing email delivery.
- TravelPayouts / Aviasales — flight data and affiliate links.
4. Data Retention
- Email addresses: kept until you unsubscribe or request deletion.
- Analytics data: retained for 90 days then auto-deleted.
- Cookie data: session length + up to 30 days.
5. Your Rights
Regardless of where you live, you may request to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Opt out of marketing communications.
- Export your data in a portable format.
6. GDPR (EU/UK visitors)
Our lawful basis for processing is your consent (for analytics and marketing) and legitimate interest (for security, fraud prevention, and delivering the flight search you requested). Data may be transferred to the United States under Standard Contractual Clauses. You may lodge a complaint with your local supervisory authority.
7. CCPA (California residents)
We do not sell your personal information. You have the right to know what we collect, request deletion, and opt out of any sharing for cross-context behavioral advertising.
8. Children
GoTourista is not directed to children under 16 and we do not knowingly collect their data.
9. Changes to This Policy
We will post any updates on this page and revise the "Last updated" date above. Material changes will be highlighted via email or an in-app notice.
10. Contact
Questions or data requests: privacy@gotourista.com.