Your journey is personal. Your data should be treated that way.

This Privacy Policy applies to the ZIAROS website at ziaros.com, the ZIAROS public beta, and future official ZIAROS applications or services that link to this policy. In this policy, “ZIAROS,” “we,” “us,” and “our” refer to the operator of the ZIAROS travel-planning service.

This policy does not govern third-party websites, transportation providers, accommodations, restaurants, attractions, booking services, or other external businesses that may be referenced or linked through a ZIAROS itinerary. Their own privacy policies govern their collection and use of information.

The information we collect depends on how you interact with ZIAROS. It may include the following categories.

If you provide information about another traveler, you should have permission to share that information with ZIAROS.

We may use information to:

• Create, authenticate, secure, and maintain your ZIAROS account.
• Generate personalized itineraries based on your destination, dates, budget, interests, and preferences.
• Save, display, edit, refine, restore, and delete your journeys.
• Search travel options, organize booking selections and confirmations, and verify provider information where available.
• Read travel-related attachments you submit and extract relevant itinerary or reservation details.
• Provide destination search, maps, routes, weather context, location information, and travel imagery.
• Respond to support requests, privacy requests, feedback, and account-related communications.
• Detect misuse, protect accounts, investigate errors, and maintain the security and reliability of the Service.
• Understand aggregate product performance and improve the design and functionality of ZIAROS.
• Comply with applicable laws, enforce our Terms of Service, and protect the rights and safety of ZIAROS and others.

Where applicable law requires a legal basis, processing may be based on performance of our agreement with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, or your consent.

ZIAROS relies on specialized providers to operate the Service. The information sent to a provider depends on the feature you use and is limited to what is reasonably necessary to deliver that feature.

• Account and application infrastructure. Supabase supports authentication, databases, and file storage; hosting and delivery providers operate the website and application.
• Artificial intelligence. OpenAI processes prompts, trip preferences, itinerary context, and files you submit to generate plans or extract travel details.
• Maps, places, routes, weather, and media. ZIAROS includes Google Maps features and content, including Google Places content. Google and other search or mapping providers may process searches, coordinates, route requests, and related technical information to return location-aware results. This policy incorporates, as applicable to Google's processing, the then-current Google Privacy Policy. Use of Google Maps features and content is also subject to the Google Maps/Google Earth Additional Terms of Service.
• Travel inventory and booking. Providers such as Duffel, Expedia Group, Viator, and Headout may process search criteria, traveler or selection details, and booking-related information when you use their supported features or follow a partner checkout link. Information you enter after leaving ZIAROS for an external provider's checkout is collected under that provider's privacy policy. ZIAROS may receive limited referral, transaction-status, or confirmation information from a provider when supported by its program.
• Reliability and product analytics. Sentry and Vercel may process diagnostic, performance, request, device, and usage information to help us secure and improve the Service.

We may disclose information in the following circumstances:

• Service providers. To vendors that host, operate, secure, monitor, or support ZIAROS.
• Legal and safety reasons. When reasonably necessary to comply with law, legal process, or governmental requests; enforce our agreements; investigate fraud or security threats; or protect rights, safety, and property.
• Business transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction, subject to appropriate confidentiality and legal protections.
• With your direction or consent. When you ask us to share information or otherwise authorize the disclosure.

ZIAROS uses essential cookies and similar technologies to maintain authenticated sessions, protect accounts, remember necessary application state, and operate the Service.

Essential authentication cookies are required for signed-in features to work. Blocking them may prevent you from creating an account, signing in, saving journeys, or using account-specific features.

ZIAROS uses limited product analytics to understand visits and feature performance, including whether a partner checkout was opened or a traveler reports completing a booking. A partner site may use its own cookies or similar technologies under its privacy policy after you leave ZIAROS. We do not currently use third-party advertising cookies on ZIAROS. If advertising or marketing technologies are added later, we will update this policy and provide legally required choices.

We retain account and journey information for as long as your account remains active or as reasonably necessary to provide the Service. You may delete individual journeys or permanently delete your ZIAROS account through the available account controls.

When an account is deleted, ZIAROS initiates deletion of the account and associated application records. Limited information may remain temporarily in encrypted backups, security records, diagnostic logs, or service-provider systems until ordinary retention cycles expire.

We may retain limited information longer where reasonably necessary to satisfy legal obligations, resolve disputes, prevent fraud, enforce agreements, protect users, or establish and defend legal claims.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

• Authenticated access controls for account-specific information.
• Supabase Row Level Security policies for protected application records.
• Encrypted network connections where supported by our infrastructure providers.
• Restricted server-side access to privileged credentials and service keys.
• Monitoring and diagnostics intended to identify errors, abuse, and security problems.
• Account deletion and session-management controls.

No method of storage or transmission is completely secure. We cannot guarantee that unauthorized access, loss, or misuse will never occur. You are responsible for using a strong, unique password and protecting access to your email account and devices.

You may:

• Review and update your full name through your ZIAROS account settings.
• Review, edit, or delete saved journey information using available trip controls.
• Delete your ZIAROS account through the account deletion feature.
• Request access, correction, deletion, restriction, portability, or other privacy rights where applicable law provides those rights.
• Object to or withdraw consent for certain processing where applicable, without affecting processing that occurred before withdrawal.

Depending on where you live, you may have additional rights under state, national, or international privacy laws. We may need to verify your identity before completing a request. Certain information may be exempt from a request where retention or processing is permitted or required by law.

Submit privacy requests to privacy@ziaros.com.

We will not discriminate against you for exercising a privacy right provided by applicable law.

ZIAROS and its service providers may process information in the United States and other countries. These locations may have privacy laws that differ from those in your country of residence.

Where required, ZIAROS and its providers may rely on contractual, organizational, or other recognized safeguards for international transfers of personal information.

ZIAROS is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to ZIAROS without appropriate authorization, contact privacy@ziaros.com so that we can investigate and take appropriate action.

We may update this Privacy Policy as ZIAROS changes, new features are introduced, service providers change, or legal requirements evolve.

The “Effective” date at the top of this page identifies the current version. If a change materially affects your rights or how we use personal information, we may provide additional notice through the Service or by email where appropriate.

For questions, concerns, or requests relating to privacy or personal information, contact:

You may also permanently delete your account through Account Settings while signed in.