Privacy Policy

1. Who we are

Auva ("Auva", "we", "us") is an AI-powered travel platform operated by Mehdi Chamsi, connecting tourists with authentic local experiences in Tunisia. Our platform is accessible at auvatunisie.com. You can reach us at hello@auvatunisie.com.

2. Data we collect

When you use Auva, we may collect the following information:

• Account data: email address and password (hashed) when you register.
• Trip preferences: destination, budget, travel dates, group type, and interests you provide when planning a trip.
• Location data: approximate geolocation if you grant permission, used to show nearby experiences on the map.
• Provider data: name, phone number, city, photos, and service description if you register as a local provider.
• Usage data: pages visited, itineraries generated, and interactions with the platform, collected for product improvement.
• Communication data: messages you send to us via email.

3. How we use your data

• To generate personalised travel itineraries using AI.
• To connect you with relevant local providers in Tunisia.
• To maintain your account and saved itineraries.
• To improve our platform based on aggregate usage patterns.
• To respond to your support requests.

We do not sell your personal data to third parties.

4. Legal basis (GDPR)

If you are located in the European Economic Area, we process your data on the following legal bases: contract performance (providing the service you requested), legitimate interests (improving the platform, preventing fraud), and consent (location access, which you can withdraw at any time in your browser settings).

5. Data storage and security

Your data is stored on Cloudflare infrastructure (KV for sessions, R2 for uploaded images, Google Sheets for provider listings). We apply industry-standard security measures including HTTPS encryption, secure session tokens, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

6. Cookies and local storage

Auva uses session cookies to keep you logged in and browser localStorage to save your itinerary progress between sessions. We use Cloudflare Web Analytics, which collects anonymous visitor statistics without cookies or personal identifiers.

7. Third-party services

• Cloudflare: hosting, edge delivery, analytics.
• Google Sheets: provider listing storage.
• Nominatim / OpenStreetMap: map geocoding (no personal data sent).
• Cloudflare Workers AI (Llama 3.1): itinerary generation — your trip preferences are sent to this model.

8. Data retention

Account data is retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Anonymised aggregate usage data may be retained indefinitely for product analytics.

9. Your rights

Under GDPR and Tunisian Law No. 2004-63, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to processing based on legitimate interests.
• Request data portability.

To exercise any of these rights, email hello@auvatunisie.com. We will respond within 30 days.

10. Changes to this policy

We may update this policy as the platform evolves. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy questions or requests: hello@auvatunisie.com