Privacy Policy

1. Introduction

VacayNest is operated by Joshu.AI LLC d/b/a Livarya, a Colorado limited liability company (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VacayNest platform at vacaynest.co (the “Service”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information: name, email address, and password
• Household profile data: traveler names, ages, dietary needs, activity pace preferences, and medical considerations you voluntarily enter
• Trip planning inputs: destinations, travel dates, budget ranges, and preferences
• Communications you send to us

2.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction patterns
• Device information: browser type, operating system, and IP address
• Analytics data collected through Vercel Analytics

2.3 Information from Third-Party Services

If you sign in using Google OAuth, we receive your name and email address from Google as permitted by your Google account settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and household profile
• To generate AI-powered trip recommendations personalized to your household
• To operate, improve, and secure the Service
• To send transactional emails (e.g., trip summaries, household invitations) via Brevo
• To analyze aggregate usage trends and improve product features
• To respond to your inquiries and support requests
• To comply with applicable laws and legal obligations

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

4. Artificial Intelligence Processing

VacayNest uses the Anthropic Claude API to generate trip recommendations, budget analysis, and itinerary suggestions. When you interact with AI-powered features, the following data may be transmitted to Anthropic’s API for processing:

• Your household profile, including traveler ages, dietary needs, activity preferences, and any medical considerations you have entered
• Your stated budget parameters
• Your destination preferences and travel dates
• The text of your messages within the trip planning conversation

We are transparent that your planning data is processed by Anthropic’s API to generate your recommendations. Anthropic processes this data pursuant to their API Terms of Service and Privacy Policy. We do not instruct Anthropic to use your data to train their models beyond what is permitted under standard API usage terms.

AI-generated recommendations are suggestions only. VacayNest and Joshu.AI LLC make no representations about the accuracy, completeness, or suitability of AI-generated content. You are responsible for independently verifying travel information including pricing, availability, medical facility access, and safety conditions.

5. Household Profile and Sensitive Information

The Household Profile feature allows you to enter health-related information such as medical conditions, dietary restrictions, and physical limitations to improve the relevance of AI recommendations. This information is:

• Stored securely in our Supabase-hosted database with row-level security controls
• Transmitted to the Anthropic API only when you actively use AI planning features
• Never sold or shared with third parties for any purpose other than operating the Service

You may edit or delete household profile information at any time from your account settings. Providing health-related information is entirely voluntary. The Service will function without it, though recommendations may be less personalized.

6. Data Retention

We retain your account and profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest (such as fraud prevention records). Trip data associated with deleted accounts is permanently removed.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), database row-level security, and access controls. Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. Children’s Privacy

VacayNest is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information may contact us at legal@vacaynest.co.

Note: Adults may enter information about minor household members (such as children’s ages and dietary preferences) within the Household Profile feature for trip planning purposes. This data is treated with the same protections as all other personal data under this policy.

9. Third-Party Services

The Service integrates with the following third-party providers. Each operates under its own privacy policy:

• Supabase — database hosting and authentication infrastructure
• Vercel — application hosting and analytics
• Anthropic — AI language model processing
• Google — OAuth authentication (optional)
• Brevo — transactional email delivery

10. Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account or household profile
• Delete your account and associated personal data
• Export your trip data
• Opt out of non-essential communications

To exercise any of these rights, contact us at legal@vacaynest.co. We will respond within 30 days.

11. Colorado Privacy Rights

If you are a Colorado resident, you may have additional rights under the Colorado Privacy Act (CPA), including the right to opt out of the sale of personal data and the right to appeal a decision we make about your data request. As noted in this policy, we do not sell personal data. For any privacy-related requests or appeals, contact us at legal@vacaynest.co.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the Effective Date above. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy, contact: