Planlegg reisePriserØnskelisteFordelerPriserBedrift

Privacy Policy

Last updated: 2025

1. Controller

{{FORETAKSNAVN}} AS (Org.nr under registrering), {{FORRETNINGSADRESSE}} is the data controller for personal data processed through Bontrav. Contact: {{KONTAKT_EPOST}}.

2. What data we store

  • Account data: Email address, display name, and authentication provider (e.g. Google OAuth).
  • Loyalty card balances: You manually enter your balances. We never connect directly to any loyalty programme or financial institution. The balance figures are stored solely to calculate your Deal Score bonus.
  • Search history: Your search parameters and viewed destinations, used to personalise suggestions and populate the Bucket list.
  • Price alerts: Email and destination pair, used solely to send you a notification when a price drops.
  • Payment data: Processed by Stripe. We do not store card numbers or payment details on our servers.

3. Legal basis

We process your data based on: (a) contract performance — to deliver the Bontrav service you signed up for; (b) legitimate interests — to improve the service and prevent misuse; (c) consent — for marketing communications, which you can withdraw at any time.

4. Retention

Account data is kept for the duration of your account plus 30 days after deletion. Search history is kept for 12 months. Price alert data is deleted once the alert fires or is cancelled. You can request deletion at any time (see section 6).

5. Third-party sharing

We share data with: Stripe (payment processing), Supabase/Neon (database hosting), and Vercel (hosting infrastructure). All sub-processors are bound by GDPR-compliant data processing agreements. We do not sell your data.

6. Your rights

Under GDPR you have the right to: access your data, correct inaccuracies, request deletion, object to processing, and request a portable copy of your data.

To exercise any of these rights, email {{KONTAKT_EPOST}}. You also have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority) at datatilsynet.no.

7. Cookies

We use strictly necessary cookies for authentication and session management. We use analytics cookies (aggregated, anonymised) to understand how the service is used. You can opt out of analytics cookies in your account settings. We do not use advertising or tracking cookies.

8. Changes to this policy

We will notify you by email or in-app notification if we make material changes to this policy. Continued use of Bontrav after such notification constitutes acceptance of the updated policy.