Privacy Policy
Last updated October 18, 2026
This policy explains what information insightkAI, the Direct Booking Campaign Studio, collects, how we use it, and the choices you have. It covers hotel and resort teams who use the Service and travelers who view a hotel's itinerary page.
1. Information we collect
- Hotel and business contacts: property name, website, a contact first name and business email (including details published on a property's own website or professional profiles), job title, and the rates, perks and dates a hotel enters.
- Usage telemetry: when a hotel manager opens their insightkAI campaign page we count the visit and record the time. We do not use advertising trackers.
- Traveler emails: if a traveler enters an email on an itinerary page, we store that email, the itinerary they were viewing, and the time.
- Technical data: standard server logs such as IP address, browser type and pages requested, kept for security and troubleshooting.
- Account email and essential cookies: the email address used to subscribe or contact us, plus essential cookies and local storage required to keep you on the right property page.
2. How we use information
- To provide, secure and improve the Service and generate marketing assets for hotels.
- To contact hospitality businesses about insightkAI at their business email addresses. Every message can be declined: reply “unsubscribe” and we will stop.
- To share a traveler's email and the itinerary they viewed with the hotel they showed interest in, so the hotel can follow up about the offer.
- To process payments, prevent abuse, and meet legal obligations.
3. Browser storage
We use your browser's local storage to remember which property you last used so we can return you to the right page after payment, and session storage for the internal admin console. We do not use third-party advertising cookies.
4. Who we share information with
We use service providers to run the Service, including database hosting (Supabase), payment processing (PayPal), and fare and hotel data providers (Google data accessed through SerpApi; these requests contain airport codes, cities and dates, not personal information). We share traveler emails with the relevant hotel as described above. We do not sell personal information.
5. Retention
We keep hotel and traveler records for as long as needed to provide the Service and for legitimate business and legal purposes, then delete or anonymize them. You can ask us to delete your information sooner at any time.
6. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain processing. Travelers can ask us or the hotel to remove their email at any time. To exercise a right, email support@insightkai.com.
7. Payment data security
insightkAI does not collect, process, or store raw credit card numbers or banking details on its servers. All payment transactions are securely processed by our third-party Merchant of Record and payment processors in compliance with PCI-DSS standards.
8. Security
We use access controls, encrypted connections and restricted server-side credentials to protect information. No system is perfectly secure, so we cannot guarantee absolute security.
9. Children
The Service is intended for businesses and adult travelers and is not directed to children under 16.
10. Changes
We may update this policy. The date at the top shows the latest version.
Questions? Email support@insightkai.com.