Privacy Policy

This Privacy Policy describes how Ottimo Travel Ltd. ("we," "us," or "our"), the operator of Ottimo.AI and the data controller for personal data processed through the ottimo.ai platform (the "Service"), collects, uses, and protects your personal information. Ottimo Travel Ltd. is registered in England and Wales under company number 17426779, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. By using the Service, you agree to the practices described here.

1. Information We Collect

Account information: When you register, we collect your email address and a password (stored in hashed form via AWS Cognito). We do not collect your real name, phone number, or physical address unless you voluntarily provide them.

Trip preferences: When you create a trip, we collect the destinations, travel dates, budget range, activity preferences, and any free-text requirements you enter. This data is used to generate your personalised itinerary.

Travel Favs: When you save a Travel Fav, we store the link you pasted (rebuilt without its tracking parameters), the public details the platform shares about that post (its title or caption and the creator's name), the title, description and destination we write for it, and any note you add. To read those details, our servers ask the platform for them; that request does not include your personal information. Travel Favs are private: only you can see them. We never download or store the videos or images themselves: they stay on YouTube, TikTok, Instagram or Pinterest.

Ottimo Trip Ideas (blog emails): If you choose to get Ottimo Trip Ideas, our weekly email with new trips from the Ottimo blog, we store your email address, your language, where and when you said yes (when creating your account, in My Profile & Trips, or on the blog) and, if you have an Ottimo account, a link to it. The links in our emails carry a random code instead of your address. If you subscribe on the blog, nothing is sent until you confirm your address from the email we send you; if you do not confirm within a week, the request expires, and an address we did not already have is deleted. If you decline the invitation in My Profile & Trips, we keep that answer with your account's email address, so that we do not ask again. The emails contain no tracking pixels or tracked links, so we do not know whether you open them. You can unsubscribe from any email with one click, without signing in, or with the switch in My Profile & Trips. When you unsubscribe, we keep your address marked as unsubscribed, so that it is never emailed again by mistake; you can ask us to delete it completely through the contact channels below.

Usage data: We collect standard log data such as your IP address, browser type, device type, pages visited, and timestamps. This data is used to maintain security, diagnose technical issues, and understand how the Service is used in aggregate.

Cookies: We use essential cookies required for authentication and session management. We do not currently use advertising or third-party tracking cookies. If this changes in the future, we will update this policy and, where required, request your consent.

2. How We Use Your Information

We use your information to: operate and improve the Service; generate personalised itineraries using AI; display publicly shared trips to other users (only when you opt in); communicate with you about your account or the Service; send you Ottimo Trip Ideas, our weekly blog email, if you asked for it; prevent fraud, abuse, and security threats; and comply with legal obligations.

3. AI Processing

Your trip preferences are sent to third-party AI providers (such as Anthropic or Google) to generate itineraries. When you add a Travel Fav, the post's public title or caption and the creator's name are sent to Anthropic to check that the post is about travel and to write its short title, description and destination. When the platform shares no text for a post, its public link is sent to Anthropic instead, and Claude looks the post up on that platform's own website with Anthropic's web search. These providers process this data under their own data processing agreements. We do not send your email address or account credentials to AI providers: only the trip-related inputs you provide and the public details of the posts you save. We encourage you to review the privacy policies of these AI providers if you have concerns about how they handle data.

4. Third-Party Booking Links

When you click a booking link on Ottimo.AI (for example, to Booking.com, Viator, or an airline), you leave our platform and enter the website of a Third-Party Provider. At that point, the Third-Party Provider's privacy policy governs how your data is collected and used. We may include affiliate tracking identifiers in these links to attribute bookings for our referral programmes. These identifiers do not contain your personal information. We strongly encourage you to review the privacy policy of any Third-Party Provider before providing them with personal or payment information. Ottimo.AI does not receive, store, or have access to any payment card details, passport information, or other sensitive data you share with Third-Party Providers.

Affiliate links and attribution. Some booking links are affiliate links through which Ottimo Travel Ltd. may earn a commission. When you click such a link, an anonymous identifier for the trip or creator you were viewing may be included in the link so that the provider can attribute any resulting booking to Ottimo.AI. This identifier does not contain your name, email address or any other personal information, and we do not share your account details with providers.

5. Data Storage and Security

Your data is stored using Amazon Web Services (AWS) infrastructure, including DynamoDB for trip data, Cognito for authentication and Amazon Simple Email Service (SES) for the emails we send. Data is encrypted in transit (TLS) and at rest. We implement reasonable technical and organisational measures to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal information. We share data only in the following circumstances: with AI providers to generate your itineraries and describe your Travel Favs (only the inputs described above); with service providers who assist in operating the platform (such as AWS); when required by law, regulation, or legal process; and to protect the rights, safety, or property of Ottimo.AI, our users, or the public.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and request data portability. You can delete your trips and Travel Favs at any time from My Profile & Trips. You can unsubscribe from Ottimo Trip Ideas from any of its emails, without signing in, or with the switch in My Profile & Trips. To request account deletion or exercise other rights, please contact us via the channels listed on ottimo.ai. We aim to respond to all rights requests within 30 days.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (such as fraud prevention). Anonymised, aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement.

9. International Transfers

Your data may be processed in countries outside your country of residence, including the United States (where AWS infrastructure is located). Where such transfers occur, we rely on appropriate safeguards such as AWS's data processing agreements and standard contractual clauses.

10. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where practicable, notify registered users. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out via the contact channels listed on ottimo.ai. You may also write to Ottimo Travel Ltd., 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.