Privacy Policy
Last updated: 23 October 2026 · Version 1.1
CARAVONA is a technology platform for travel and tourism companies and agencies (each an “Agency”). For each Agency it builds an AI assistant that works on the Agency’s own website, under the Agency’s name and brand, answers travellers’ questions around the clock, prepares complete requests and sends them to the Agency’s WhatsApp, together with a request inbox where the Agency follows up its customers. Travellers deal with the Agency alone; CARAVONA works in the background as the Agency’s technology provider.
This policy explains to Agencies how we handle their account data, and the data of their visitors that we process on their behalf to run the assistant.
1. Our role and the Agency’s role
- Agency visitors and travellers: the Agency is responsible for their data (the controller); we process it on the Agency’s behalf and on its instructions, only to run the service.
- Agency accounts and staff: we are the controller.
- The Agency must inform its visitors, in its own privacy policy, that it uses an AI assistant and technology service providers.
2. Data we process
- The content of visitors’ conversations with the Agency’s assistant, and the trip details they share.
- Request details: name, WhatsApp number and request summary, only when a visitor chooses to send a request and expressly agrees.
- Limited technical data: a one-way hashed form of the IP address, browser type, and a necessary cookie that keeps the conversation going.
- Agency account data: name, email address and sign-in records for security.
3. Purposes
- Running the assistant and answering visitors’ questions.
- Preparing requests and delivering them to the Agency after the visitor agrees.
- Protecting the service against abuse and excessive use.
- Measuring and improving quality with aggregated statistics that identify no person or Agency.
We do not sell data, use it for advertising, or use conversations to train AI models.
4. Separation between Agencies
- Each Agency’s data is technically isolated; no Agency can see another Agency’s data.
- No Agency’s visitors or requests are used for any purpose other than running that Agency’s service, and they are contacted only through the Agency itself.
5. Cookies
We use strictly necessary cookies only: to keep a conversation going and to sign Agency staff in. We do not use advertising or tracking cookies.
6. Service providers
- Hosting: Vercel.
- Database: Neon.
- AI model: Anthropic.
- Fonts: Google Fonts.
They work for us and only as needed. We may disclose data to authorities where the law requires it.
7. International transfers
Data may be stored or processed on servers outside the Agency’s or the visitor’s country by the providers listed above, with appropriate safeguards.
8. Retention
- Conversations and requests: up to 12 months by default, or a shorter period set by the Agency, then deleted automatically.
- Voice recordings, if any: up to 30 days.
- Sign-in and security records: up to 90 days.
- Agency accounts: for the duration of the subscription, deleted within a reasonable period after it ends.
9. Data-subject requests
If a visitor asks to access, correct or delete their data, we help the Agency fulfil the request within 30 days. Agencies and their staff can write to us about their own data at privacy@caravona.com.
10. Security
We use encrypted connections, isolation of data between Agencies, sign-in with an authenticator-app code, and limits on sign-in attempts. No system is 100% secure, but we protect data to recognised industry standards and notify the affected Agency without undue delay of any incident involving its data.
11. Laws and changes
This policy is written with regard to Egypt’s Personal Data Protection Law No. 151 of 2020 and comparable laws in the countries where we offer the service. We may update it and will show the date of the update at the top.
12. Operator and contact
The CARAVONA platform is operated and provided by LTC — Al Lewaa Tours (LEWA TOURS), an Egyptian travel company licensed under licence no. 611, Category A, with its office at 19B Adly Street, Cairo, Arab Republic of Egypt. CARAVONA is run as a technology service separate from LTC’s travel business.
Privacy: privacy@caravona.com · Support: support@caravona.com.