Privacy Policy
1. Who we are
Vacanexus is an AI-powered travel discovery platform operated from Luxembourg. We help travelers find their ideal vacation destination through a personalized quiz and AI-generated travel recommendations. For any data-related enquiry, contact us at: hello@vacanexus.com
2. What data we collect
Data you provide directly
- Quiz responses: your travel preferences, budget, group size, travel dates and destination interests — used solely to generate your personalized destination match and itinerary.
- Email address: if you choose to receive your itinerary by email or subscribe to our newsletter. Always optional and based on your explicit consent.
Data collected automatically
- Analytics data: pages visited, time spent, referral source, browser type and approximate location — collected via Google Analytics 4 to understand how visitors use our site.
- Cookies: see our Cookie Policy for full details.
- Server logs: IP addresses and access times, retained for a maximum of 30 days for security purposes.
3. How we use your data
- To generate your personalized AI destination match and travel itinerary
- To send you your itinerary and travel recommendations by email, if requested
- To send our newsletter with travel inspiration, if you subscribed
- To improve our quiz, AI matching algorithm and website content
- To measure website performance and understand visitor behaviour
- To comply with legal obligations
4. Legal basis for processing (GDPR)
- Consent (Art. 6(1)(a)): for email collection, newsletter subscription and non-essential cookies
- Legitimate interests (Art. 6(1)(f)): for analytics and site security
- Contract performance (Art. 6(1)(b)): for delivering the quiz results and itinerary you requested
5. Third-party services and data sharing
We do not sell your personal data. We share data with trusted third-party services only as necessary:
- Brevo: email marketing platform — stores your email address if you subscribe.
- Google Analytics 4: website analytics with IP anonymization enabled.
- Anthropic: AI provider powering our destination matching. No personally identifiable information is transmitted.
- Affiliate partners (Booking.com, Skyscanner, GetYourGuide, Airalo, World Nomads): when you click a booking link, you are directed to their websites which have their own privacy policies. We receive no personal data from these transactions.
6. Data retention
- Quiz responses (without email): not stored — processed in real-time and discarded
- Email addresses: retained until you unsubscribe or request deletion
- Analytics data: 14 months (Google Analytics default)
- Server logs: 30 days maximum
7. Your rights under GDPR
As a resident of the EU/EEA, you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time.
To exercise any of these rights, email: hello@vacanexus.com. We will respond within 30 days.
You may also lodge a complaint with the Luxembourg data protection authority: Commission Nationale pour la Protection des Données (CNPD) — cnpd.public.lu
8. Data security
We implement SSL encryption (HTTPS), restricted access controls and regular security monitoring to protect your personal data against unauthorized access, loss or disclosure.
9. International transfers
Some third-party providers (including Google and Anthropic) may process data outside the EEA. Where this occurs, appropriate safeguards including Standard Contractual Clauses are in place.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website.