Packy Privacy Policy Last updated: October 27, 2025 1. Introduction This Privacy Policy explains how Packy (“Packy,” “we,” “our,” or “us”) collects, uses, and protects your personal information. It forms part of and is subject to the Packy Terms & Conditions. By using our services, you consent to the practices described here. 2. Information We Collect We collect (a) information you provide (e.g., name, email, billing data, uploaded itineraries); (b) automatic data (e.g., IP address, browser type, usage analytics, and cookies); and (c) information from integrations with third-party platforms (e.g., Travefy, Stripe, Twilio). 3. Use of Information We use personal data to operate and improve our Service, personalize recommendations, process payments, communicate with you, enforce our Terms, and comply with legal obligations. We never sell personal data to third parties. 4. Legal Basis for Processing For EU/UK users, we process data under GDPR legal bases: contract performance, legitimate interests, legal compliance, and consent (where required). 5. Data Sharing & Processors We share data only with authorized subprocessors providing core functions: Stripe (payments), Twilio (communications), Travefy (integrations), OpenAI (AI generation), and AWS/Vercel (hosting). Each subprocesssor is bound by confidentiality and data protection agreements. 6. International Data Transfers We operate primarily in the United States. When transferring personal data internationally, we rely on Standard Contractual Clauses (SCCs) and comparable safeguards as required under GDPR. 7. Data Retention We retain personal data as long as necessary for service provision, compliance, or legitimate business needs. Upon account termination, user data is retained for 30 days then securely deleted unless required by law. 8. Cookies & Analytics Packy uses cookies and similar technologies to analyze usage and improve user experience. You may adjust cookie preferences in your browser settings. We use aggregated analytics for performance insights only. 9. Your Rights You may request access, correction, deletion, portability, or restriction of your data. You can object to certain processing or withdraw consent. California residents may exercise CCPA rights to access or delete personal data and opt out of its sale or sharing. 10. Security We maintain administrative, technical, and physical safeguards designed to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security. 11. Children’s Privacy Packy does not knowingly collect information from individuals under 16. If you believe a minor has provided data, contact us to remove it. 12. Updates We may update this Policy periodically. Material changes will be communicated via email or within the Service. Continued use constitutes acceptance of the updated Policy. 13. Governing Law & Disputes This Policy is governed by the laws of the State of California. Any disputes shall be handled in accordance with the arbitration and venue provisions of the Packy Terms & Conditions. 14. Contact For questions or to exercise privacy rights, contact: info@hellopacky.com or Packy, Los Angeles, California.