Privacy Policy

Last updated: May 8, 2026

1. Who We Are

Voyaro ("we", "us", "our") is a travel memory platform operated by Luiz Fernando Barros Moragas. Our registered contact email is [email protected]. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. What Data We Collect

We collect the following categories of personal data:

  • Account data: your name, email address, and profile picture provided via Manus OAuth login.
  • Travel content: trip titles, destinations, dates, descriptions, photos, and personal notes you upload or create.
  • Usage data: pages visited, features used, and interactions within the platform (analytics).
  • Billing data: subscription plan and payment status. We do not store full card numbers — payment processing is handled by Stripe.
  • Technical data: IP address, browser type, device type, and session cookies necessary for authentication.

3. How We Use Your Data

We use your data to:

  • Provide, operate, and improve the Voyaro platform.
  • Generate AI-powered travel narratives and trip pages from your content.
  • Manage your subscription and process payments via Stripe.
  • Send transactional notifications (e.g., subscription confirmations, anniversary reminders).
  • Comply with legal obligations and prevent fraud.

We do not sell your personal data to third parties. We do not use your travel content to train AI models without your explicit consent.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contract performance: to provide the service you subscribed to.
  • Legitimate interests: to improve our platform and prevent abuse.
  • Consent: for optional features such as public profile pages and sharing.
  • Legal obligation: to comply with applicable laws.

5. Data Sharing

We share your data only with trusted third-party service providers necessary to operate Voyaro:

  • Stripe — payment processing (stripe.com/privacy)
  • Manus — authentication and hosting infrastructure
  • OpenAI / AI providers — AI narrative generation (your content is sent to generate text; it is not stored or used for training by these providers under our agreements)

All third-party providers are contractually bound to process your data only as instructed and in compliance with applicable data protection laws.

6. Public Content

When you create a trip page and choose to make it public, that page is accessible to anyone with the link. Your public username and trip content will be visible. You can make any trip private at any time from your dashboard. Deleting a trip removes it from public access immediately.

7. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days before being scheduled for deletion. You may request immediate deletion at any time by contacting us at [email protected].

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Restriction — request that we limit how we process your data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and does not require consent under GDPR. We do not use advertising or tracking cookies.

10. Security

We implement industry-standard security measures including HTTPS encryption, secure session management, rate limiting, and access controls. However, no system is completely secure. If you believe your account has been compromised, contact us immediately.

11. Children

Voyaro is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending an email. Continued use of Voyaro after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or requests, contact us at:
[email protected]