What we collect, why we use it, and where it goes.

We collect information you provide directly, including account details, traveler details, booking contact details, search requests, and messages sent through our contact form.

When you register, we collect your email, username, and authentication credentials so we can create and secure your account and support features such as previous searches and Booking Manager access.

To complete a booking, change, or cancellation flow, we may store traveler names, dates of birth, titles, gender, contact email, contact phone, and other booking details required by the airline or provider. In some airline flows, identity document details may also be required.

Card payments are processed by Stripe. Travnexa does not store full card numbers or card security codes, but we may store limited payment references, payment intent identifiers, and booking-level payment status data needed to operate the service.

We use personal data to search and book travel, manage bookings, send transactional emails, authenticate users, investigate support issues, operate Booking Manager, prevent abuse, and improve reliability and service quality.

We also record product and operational events related to search, booking, payment, change, cancellation, and support flows. This tracking is primarily server-side and is not used for third-party advertising profiling.

We share the minimum data needed with providers that help us deliver the service, such as airline connectivity partners, airlines, payment processors, email providers, and hosting infrastructure.

Where a booking or support flow requires it, your data may also be used to confirm schedule updates, cancellations, refund handling, fraud checks, or customer communications.

We do not sell your personal data.

We use short-lived access tokens, secure refresh sessions, and verification flows such as email verification or one-time codes where appropriate.

Sensitive data is protected in transit with HTTPS/TLS, and access to operational data is restricted. We retain operational, support, security, and booking data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain financial and operational records.

You can contact us regarding access, correction, deletion, account support, or privacy questions through the Contact page. We may still need to retain certain records where retention is required for security, accounting, fraud prevention, or legal compliance.

We may update this Privacy Policy at any time to reflect product changes, legal requirements, provider changes, or operational needs. When we do, we will publish the updated version on this page with a revised last updated date.