Privacy Policy

1. Introduction & Data Controller

Preyio is the controller of the personal information collected. Privacy contact: team@preyio.com

2. Information We Collect

A. Information you provide directly:

• • Name and email (registration)
• • Hotel booking details: hotel name, dates, price, currency
• • Uploaded files (PDF, images, Excel)

B. Information collected automatically:

• • IP address
• • Browser type and device
• • Pages visited and session duration
• • Usage events (analytics tools)
• • Technical cookies for authentication

C. Information we do not collect:

• • Payment details (managed by Paddle)
• • Passwords in plain text
• • GPS location

3. How We Use Your Information

4. Sub-processors & International Transfers

International transfers. Your data is processed in the EU, the US, and Israel. Transfers to the US rely on the EU–US Data Privacy Framework (where the recipient is certified) and on the European Commission's Standard Contractual Clauses (2021/914) with supplementary measures (encryption in transit and at rest, access controls). Transfers to Israel rely on the European Commission's adequacy decision of 31 January 2024. A copy of the SCCs or details of safeguards used for any specific transfer is available on request from team@preyio.com.

5. Data Storage & Deletion

After account closure, all data is deleted within 30 days.

6. Your Rights

To exercise your rights: team@preyio.com . We respond within 30 days.

US state privacy rights (CCPA / CPRA / CO CPA / VA VCDPA / CT CTDPA / TX TDPSA / UT UCPA / OR OCPA)

For California, Colorado, Connecticut, Virginia, Utah, Texas, and Oregon residents. You have the right to know what personal information we collect, to request deletion or correction, to opt out of the sale or sharing of your personal information, to limit use of sensitive personal information, and to be free from retaliation for exercising these rights.

We do not sell your personal information for money. We do not share it for cross-context behavioural advertising.

To exercise any right, email team@preyio.com with subject "Privacy Request". We respond within 45 days. You may also appoint an authorized agent. We do not knowingly process the personal information of consumers under 16.

7. Cookies

Manage via browser settings.

8. Data Security

• • SSL encryption on all communication
• • Encrypted passwords
• • Minimal access permissions
• • Encrypted backups

Data breach: we will notify affected users and authorities within 72 hours.

9. Children

Preyio is not directed to children under 16 and we do not knowingly collect personal information from anyone under 16. The service requires an account; users must be 18 or older to register. If we learn we have collected information from a child under 16 without verified parental consent, we will delete it. Parents/guardians may email team@preyio.com.

10. Changes

Material changes will be communicated by email 30 days in advance.