Privacy Policy

1. Introduction

ItinereHub ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us, including:

• Email Address: Required to create and manage your account
• Travel Documents: Documents forwarded to your ItinereHub address
• Account Preferences: Language, timezone, and other settings
• Communication Data: Emails sent to and from your ItinereHub address

We also collect information automatically, including:

• Analytics Data: Page views, user interactions (via Google Analytics 4)
• Device Information: Browser type, IP address, device type
• Log Data: Access logs, error messages, timestamps

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your requests and transactions
• Send transactional and administrative emails
• Understand usage patterns and improve user experience
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Access controls and authentication mechanisms
• Regular security audits and penetration testing
• Employee training on data protection

5. Data Retention

We retain personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. You may request deletion of your account and associated data at any time by contacting us.

6. GDPR Compliance (EU/EEA Users)

If you are located in the EU/EEA, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data (with exceptions)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities

To exercise these rights, contact us at: privacy@itinerehub.com

7. LGPD Compliance (Brazilian Users)

If you are a Brazilian resident, you are protected by the Lei Geral de Proteção de Dados (LGPD). You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data (subject to legal requirements)
• Request information about how your data is being used
• Object to non-consensual processing

To exercise your LGPD rights, contact our Data Protection Officer at:
dpo@itinerehub.com

8. Third-Party Services

We use third-party services for analytics, security, and infrastructure:

• Google Analytics 4: Usage analytics (anonymized IP)
• Google reCAPTCHA v3: Bot detection
• Google Cloud: Data hosting and processing

These third parties have their own privacy policies, and we recommend reviewing them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and posting the revised policy.

10. Contact Us

For questions about this Privacy Policy or our data practices:

• Email: privacy@itinerehub.com
• General Support: support@itinerehub.com