Privacy & Cookie Policy

Travia (travia.ai) is an AI-powered travel metasearch engine and marketplace, operated from Kathmandu, Nepal. We help travellers compare and book flights, stays, tours & experiences, car rentals and real estate from local operators and global providers. This policy explains what information we collect, why, and the choices you have.

Account details. When you create an account we store your name, email address and a hashed password (we never store your password in readable form). Signing in with Google shares your Google name, email and profile photo with us.

Optional profile details. You can choose to add traveller details such as your phone number, address, travel preferences and passport information to speed up bookings. Passport numbers are encrypted at rest and are never shown publicly.

Bookings and inquiries. When you book or inquire, we store the booking details (dates, guests, listing, price) and share them with the operator you are booking with — that is what a booking is.

Approximate location.We infer your country from your IP address to show relevant content and default currency. Precise location is used only if you explicitly grant your browser's location permission (for example, "Nearby" suggestions), and is not stored on our servers.

Usage data. With your consent (see Cookies below), we collect anonymised analytics about how the site is used so we can improve it.

We use your information to:

• operate your account and process bookings and inquiries;
• show prices in your currency (NPR or USD) and content in your language;
• send transactional emails such as booking confirmations, verification codes and password resets;
• prevent fraud and abuse (for example, rate-limiting login and verification attempts);
• improve the product through consented, aggregated analytics.

We do not sell your personal information.

We use a small number of cookies and similar technologies, in two groups:

• Strictly necessary — signing you in securely (session cookies), remembering your consent choice, and remembering preferences like language, currency and theme. These are required for the site to work and cannot be switched off.
• Analytics & advertising — set only with your consent. We follow a deny-by-default model: no analytics or advertising cookies are set until you explicitly accept them in the consent banner.

You can change or withdraw your choice at any time via Cookie settings (also linked in the footer of every page). Withdrawing consent is as easy as giving it.

When you use certain features, these providers process data on our behalf or alongside us:

• Google — optional sign-in with Google, Google Maps (maps and places on listing and search pages) and, only if you connect it, Google Calendar for adding trips to your calendar.
• Flight fare providers — flight searches are sent to airline and fare aggregators to fetch live prices. Your search route, dates and passenger counts are shared; your identity is not.
• Analytics — Google Analytics, only after you consent via the cookie banner.

Payments: Travia currently uses pay-at-property / pay-on-arrival. We do not process or store card numbers on our servers.

All traffic to travia.ai is encrypted with TLS. Passwords are stored as salted hashes, sensitive identity fields (such as passport numbers) are encrypted at rest, and access to production data is restricted. No internet service can promise absolute security, but we design for least privilege and defence in depth.

• Access & correction — view and edit your profile details at any time from your account settings.
• Deletion — you can permanently delete your account and personal data from Account → Settings, or by emailing us. Bookings we are legally required to retain (for example, for tax records) are kept only as long as the law requires.
• Marketing — every marketing email includes an unsubscribe link; transactional emails (confirmations, security codes) are sent regardless because the service does not work without them.
• Cookies— change your consent any time via the footer's Cookie settings.

We keep your account data for as long as your account exists. If you delete your account, personal data is removed or irreversibly anonymised, except records we must keep for legal, tax or fraud-prevention reasons, which are deleted when those obligations end.

When we make material changes we will update the date at the top of this page and, where appropriate, notify you in the product or by email.

Questions, concerns or data requests: support@travia.ai. Travia, Kathmandu, Nepal.