Privacy Policy – Lets2Go

1. Introduction

At Lets2Go (“Lets2Go”, “we”, “us” or “our”) we are committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use, share and protect it, and what rights you have when using our website https://lets2go.com and our mobile application (jointly, the “Services”).

Lets2Go is an AI-powered travel planning platform that lets users discover, plan and book trips worldwide, including flights, accommodations, tours, restaurants and transportation.

Data controller: Lets2Go.
Contact: info@lets2go.com
Website: https://lets2go.com

2. Information we collect

2.1 Information you provide to us

• Account data: name, email, password (stored encrypted), profile picture and any optional information you provide.
• Travel profile: travel style, interests, favorite destinations, languages, dietary preferences and other settings used to personalize your experience.
• Bookings and trip details: destinations, dates, number of travelers, passenger details required by third-party providers and the history of trips you create.
• Subscriptions: chosen plan (Free or Premium), billing cycle, status, expiration date and transaction identifier provided by the app store (Apple App Store or Google Play Store). We do not store your full card number; payments are processed by the corresponding store.
• User content: reviews, ratings, comments and messages you send through the app or the contact form.
• Newsletter and contact forms: email and, where applicable, name and address submitted to subscribe to communications or contact us.

2.2 Information collected automatically

• Device and connection data: IP address, device type, operating system, browser, language, time zone and crash logs.
• Usage data: pages visited, features used, searches performed, AI interactions, click sequences, session duration and approximate performance metrics.
• Geolocation: with your prior permission, we use the approximate or precise location of your device to suggest nearby tours, restaurants and accommodations. You can revoke this permission at any time from your device settings.
• Cookies and similar technologies: see section 6.

2.3 Information from third parties

If you choose to sign in or connect through external providers (for example, Apple, Google or social networks), we will receive the basic profile information you authorize to share, such as name, email and identifier.

3. How we use your information

• Provide and operate the Services: create your account, authenticate you, save your trips and synchronize data across devices.
• AI personalization: generate intelligent itineraries, suggestions and recommendations based on your preferences, history and location.
• Process bookings: send the necessary information to providers (Amadeus, Agoda, Kayak, Viator and other authorized partners) to complete your reservations.
• Manage subscriptions: activate, renew, cancel and verify the status of your Free or Premium plan and apply trials or promotions.
• Communications: send transactional emails (booking confirmations, password resets, account notices) through SendGrid, and marketing emails or newsletters through Mailchimp when you have given your consent.
• Push notifications: if you allow them, send you trip reminders, alerts, recommendations or relevant updates.
• Analytics and improvements: measure performance, usage and stability with Vercel Analytics and Vercel Speed Insights to optimize the platform.
• Security and fraud prevention: detect abuse, prevent unauthorized access and protect users and the system.
• Legal compliance: meet our tax, accounting and regulatory obligations and respond to lawful requests from authorities.

4. Legal basis for processing (GDPR)

When local regulations apply (for example, GDPR in the EEA, UK GDPR, LGPD in Brazil or Dominican Republic Law No. 172-13), we process your data on the following legal bases:

• Performance of a contract: to create your account, process bookings and provide Premium features.
• Consent: for geolocation, push notifications, non-essential cookies and marketing communications. You can withdraw it at any time.
• Legitimate interest: to improve our Services, ensure security, prevent fraud and conduct aggregated analytics.
• Legal obligation: to comply with tax, accounting and consumer protection regulations.

5. Who we share your information with

We do not sell your personal data. We only share it with the following categories of recipients and for the purposes described:

• Booking providers: Amadeus (flights), Agoda (accommodations), Kayak (price comparison), Viator (tours and activities) and other partners required to complete your reservations.
• Payment processors: Apple App Store and Google Play Store, who handle the subscription billing of your Premium plan. We only receive the result of the transaction, not your full card details.
• Email service providers: Mailchimp (newsletter and marketing communications) and SendGrid (transactional emails).
• Analytics and performance: Vercel Analytics and Vercel Speed Insights to understand aggregated usage and improve performance.
• Hosting and infrastructure: cloud providers that host our application and databases under appropriate security agreements.
• Push notification services: Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM) to deliver notifications to your device.
• Authorities: when required by a court order, applicable law or to protect rights, property or safety.
• Corporate transactions: in the event of a merger, acquisition or sale of assets, your data may be transferred to the successor entity, with continued protection.

6. Cookies and similar technologies

We use cookies and local storage technologies to operate the site, remember your preferences and analyze usage. From our cookie banner you can accept all, accept only necessary cookies or set them by category:

• Necessary: essential for the site to work (session, authentication, security and consent storage). They cannot be disabled.
• Analytics: allow us to measure traffic and usage anonymously (e.g. Vercel Analytics, Vercel Speed Insights).
• Marketing: used to show relevant content and measure the effectiveness of campaigns when applicable.
• Functional: remember preferences such as language, region or display settings.

You can change your choices at any time by clearing your browser data or visiting our cookie banner again. You can also configure your browser to block or delete cookies.

7. International data transfers

As we operate globally and use providers based in different countries (including the United States and the European Union), your information may be transferred to and processed outside your country of residence. In such cases, we adopt appropriate safeguards such as Standard Contractual Clauses or our providers’ certifications.

8. Data retention

We retain your personal data only for as long as needed to fulfill the purposes described in this policy, comply with our legal obligations and resolve disputes. As a general guideline:

• Account data: while your account is active, plus a reasonable period to comply with legal obligations.
• Bookings and subscriptions: for the time required by tax, accounting and consumer protection regulations.
• Marketing communications: until you withdraw your consent.
• Logs and analytics: for limited periods, anonymized when possible.

9. Data security

We apply appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), storage of credentials with one-way hashing, access controls, monitoring and least-privilege practices. Even so, no system is completely secure; if you become aware of any incident, please report it to info@lets2go.com.

10. Your rights

Depending on your jurisdiction, you may exercise the following rights over your personal data:

• Access and obtain a copy of your data.
• Rectify inaccurate or incomplete data.
• Delete your data (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time, without affecting prior processing.
• File a complaint with a supervisory authority.

To exercise these rights, write to us at info@lets2go.com. We will respond within the time frame required by applicable law (up to 30 days).

11. Account deletion

You can delete your account at any time:

• From the app, in Account Settings.
• From the web at https://lets2go.com/en/delete-account.

Requests are processed within a maximum of 30 days. Some information may be retained for a longer period if necessary to comply with legal obligations or for legitimate purposes (security, fraud, accounting).

12. Push notifications

If you authorize push notifications, we will use them to send you trip reminders, booking updates, personalized recommendations and administrative messages. You can disable them at any time from your device settings.

13. Minors

Our Services are intended for users aged 13 or older. We do not knowingly collect data from children below this age. If you believe a minor has provided us personal data without authorization, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the app, by email or with a notice on the website at least 30 days before they take effect. The “Last updated” date at the top reflects the latest version.

15. Contact

If you have questions, requests or complaints about this Privacy Policy or the processing of your data, you can contact us at:

Email: info@lets2go.com
Website: https://lets2go.com