Privacy Policy
Last updated: 18 September 2026
1. Who we are
TourixAI (“we”, “us”, “our”) operates the TourixAI platform as an AI-powered social media post generation service for travel agencies. We are the data controller for personal data collected through this service.
For privacy enquiries, contact us at hello@tourixai.com.
2. Data we collect
We collect the following categories of personal data:
- Account data: Your name, email address, and profile picture (from Google OAuth or email sign-in).
- Agency data: Your agency name, brand colours, logo, and voice preferences that you enter into TourixAI.
- Usage data: Posts you generate, captions, hashtags, and platform analytics you log (likes, saves, reach).
- Billing data: Your plan, its start and end dates, and records of the payments you make (amount, date, method and reference). Pro is paid by cash or bank deposit, so we never collect card details.
- Connected account data: If you connect an external publishing account, we store an encrypted access token and account identifiers required to sync analytics.
- Technical data: IP addresses, browser type, and session information collected automatically for security and diagnostics.
3. Why we collect it
| Purpose | Legal basis |
|---|---|
| Providing the TourixAI service | Contract performance |
| Recording payments and managing your plan | Contract performance |
| Sending transactional emails (magic links, receipts) | Contract performance |
| Sending weekly digest emails | Legitimate interest / Consent |
| Syncing connected account analytics | Consent |
| Improving the service and fixing bugs | Legitimate interest |
| Fraud prevention and security | Legitimate interest |
| Complying with legal obligations | Legal obligation |
4. Who we share data with
We share data only with the following third-party processors:
- OpenAI: AI image and caption generation (your post inputs are sent to OpenAI's API)
- Cloudinary: Image hosting and transformation
- Neon / Vercel: Database and hosting infrastructure
- Resend: Transactional email delivery
- Sentry: Error monitoring (anonymised stack traces)
- PostHog: Product analytics (anonymised usage events)
- Connected publishing providers: Only if you link an external publishing account
We do not sell your personal data to third parties. We do not use your data for advertising.
5. Data retention
We retain your data for as long as your account is active. When you delete your account, we immediately delete it and everything linked to it: your plan and payment records, posts, brand kits, uploaded and generated images, and feedback you sent while signed in. Copies in our database backups expire within 30 days.
6. Your rights (GDPR)
If you are in the EU or UK, you have the following rights:
- Access: Request a copy of the data we hold about you
- Rectification: Correct inaccurate data
- Erasure: Delete your account and all associated data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Disconnect your linked account or unsubscribe from emails at any time
To exercise any of these rights, email us at hello@tourixai.com. We will respond within 30 days.
7. Security
We protect your data using industry-standard measures: AES-256-CBC encryption for linked account access tokens, HTTPS for all data in transit, and signed Cloudinary upload requests to prevent unauthorised uploads. Our infrastructure is hosted on Vercel (EU regions available) and Neon (US East by default).
8. Cookies
We use minimal cookies:
- Session cookie: Keeps you signed in (HttpOnly, Secure)
- PostHog: Anonymous analytics cookie
We do not use advertising cookies or sell cookie data.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email. Continued use of TourixAI after changes constitutes acceptance.
10. Contact
Questions about this Privacy Policy? hello@tourixai.com