Privacy Policy

1. About VAI Tickets

VAI Tickets is a tourism booking platform that connects travelers with local tour operators in French Polynesia. We facilitate last-minute bookings and authentic local experiences across the islands.

2. Information We Collect

2.1 Tourist User Data

When you register as a tourist user, we collect:

• Personal Information: Full name, email address
• Contact Information: WhatsApp number (optional)
• Preferences: User type (tourist/local resident), island preferences, primary language
• Booking Information: Tour bookings, booking references, number of participants, special requirements, dietary restrictions, accessibility needs
• Marketing Preferences: Consent for launch updates and promotional communications

2.2 Operator User Data

When you register as a tour operator, we collect:

• Business Information: Company name, contact person, business address
• Contact Information: Business email, WhatsApp number, phone number
• Operational Data: Islands served, tour types offered, target booking volumes, customer preferences
• Financial Information: Commission rates, revenue data, booking history
• Business Credentials: Business license information, certifications
• Languages: Languages spoken for customer communication

2.3 Booking and Transaction Data

When you make or process bookings, we collect:

• Booking Details: Tour selections, dates, times, participant numbers
• Pricing Information: Tour prices, discounts applied, commission calculations
• Communication Records: Booking confirmations, status updates, customer-operator communications
• Payment Information: Payment status (payments are processed directly between customers and operators)

2.4 Technical and Analytics Data

We automatically collect certain technical information:

• Device Information: IP address, browser type, device type, screen resolution
• Usage Analytics: Page views, click tracking, user interactions (via Google Analytics)
• Marketing Analytics: UTM parameters, QR code tracking, campaign attribution
• Performance Data: App performance metrics, error logs

3. How We Use Your Information

3.1 Service Provision

• Process and manage tour bookings
• Facilitate communication between tourists and operators
• Provide customer support and resolve booking issues
• Maintain platform security and prevent fraud

3.2 Platform Operations

• Manage operator onboarding and approval processes
• Calculate and track commission payments
• Generate business analytics and reporting
• Ensure regulatory compliance (including whale watching regulations)

3.3 Communications

• Send booking confirmations and status updates
• Provide launch notifications and platform updates
• Send marketing communications (with your consent)
• Deliver customer support via WhatsApp and email

3.4 Analytics and Improvement

• Analyze user behavior to improve our services
• Track marketing campaign effectiveness
• Optimize platform performance and user experience
• Develop new features and services

4. Third-Party Services

Service	Purpose	Data Processed	Location
Supabase	Database & Authentication	All user data, bookings, business information	United States
Render.com	Web Hosting	Technical data, app performance	United States
n8n (Self-hosted)	Workflow Automation	Email notifications, booking workflows	Render.com (US)
Google Analytics	Website Analytics	Usage data, demographics, behavior	United States
OpenWeatherMap	Weather Data	Location data for weather services	United Kingdom
WhatsApp Business API	Customer Communication	Phone numbers, message content	United States

5. Data Sharing and Disclosure

5.1 Between Platform Users

• Tourist-Operator Communication: Tourist contact information is shared with operators only after booking confirmation
• Booking Information: Operators receive booking details necessary to provide services
• Privacy Protection: Contact information remains hidden until booking is confirmed

5.2 Business Operations

• Commission Tracking: Financial data is processed for commission calculations
• Performance Analytics: Aggregated, anonymized data for business insights
• Regulatory Compliance: Information may be shared with authorities if required by law

5.3 Legal Requirements

We may disclose your information when required by law, legal process, or to protect our rights and safety.

6. International Data Transfers

We implement appropriate safeguards for international transfers:

• Service Provider Agreements: Contractual protections with all third-party services
• Security Measures: Encryption and secure data transmission protocols
• Limited Processing: Data is processed only as necessary for service provision

7. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication requirements
• Regular Monitoring: Continuous security monitoring and threat detection
• Secure Infrastructure: Professional-grade hosting with security certifications

8. Data Retention

We retain your data based on the following principles:

• Active Accounts: Data is retained while your account is active
• Booking Records: Booking information is retained for 7 years for business and tax purposes
• Marketing Data: Marketing communications data is retained until you opt out
• Analytics Data: Anonymized analytics data may be retained indefinitely
• Legal Requirements: Some data may be retained longer to comply with legal obligations

9. Your Rights

Under French data protection law, you have the following rights:

9.1 Access and Portability

• Access: Request a copy of your personal data
• Portability: Receive your data in a structured, commonly used format
• Transparency: Information about how your data is processed

9.2 Correction and Deletion

• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Restriction: Limit processing of your data in certain circumstances

9.3 Consent and Objection

• Withdraw Consent: Withdraw consent for marketing communications
• Object to Processing: Object to processing based on legitimate interests
• Automated Decisions: Object to automated decision-making

9.4 Exercising Your Rights

To exercise your rights, contact us via:

• WhatsApp: +689 87 26 90 65
• Email: Through our platform contact forms

We will respond to your request within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Google Analytics for usage statistics
• Marketing Cookies: UTM tracking, QR code attribution
• Preference Cookies: Language settings, user preferences

You can control cookies through your browser settings, but this may affect platform functionality.

11. Children's Privacy

Our platform is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Email notification to registered users
• Notice on our website and platform
• In-app notifications

13. Contact Information

14. Specific Provisions for French Polynesia

As a business operating in French Polynesia, we comply with:

• French Data Protection Law: All applicable French privacy regulations
• Tourism Regulations: Local tourism industry requirements
• Business Registration: French Polynesian business compliance