Privacy Policy
Effective date: 23 October 2026 · Version privacy-2026-10-23
1. Who we are
Bitravel Information Systems Ltd., an Israeli company (“Bitravel”, “we”, “us”), builds AI travel assistants for travel agencies and companies. Our assistant is called Alex.
This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights. Questions: [email protected].
2. Our role
- Bitravel Lite (self-serve, for travel agents) and this website: we decide how your data is used. We are the “controller”.
- Bitravel for agencies and companies (Classic and enterprise): we process data for the agency or company that hired us. That customer is the controller, and our contract with them (and a Data Processing Agreement, where signed) applies. If you travel with such a company or agency, ask them first. We will help them answer you.
3. What we collect
3a. Website visitors
- Booking a call (Cal.com): name, email, and anything you add.
- Emailing us: your email address and message.
- Signup and waitlist forms: what you type (see 3b). A copy goes to our team inbox.
- Usage data: cookieless, aggregate analytics (Cloudflare Web Analytics): pages, referrer, country, device type. Our host processes IP addresses to serve and protect the site, and our forms use bot protection (Cloudflare Turnstile).
3b. Travel agents (Lite)
- At signup: name, agency name, WhatsApp number, ZIP code, email, and optionally a trade credential (CST, IATA, ARC or CLIA), your booking system or host agency, and how you heard about us.
- Waitlist: if all seats are taken, your name, email and WhatsApp number, so we can invite you when a seat opens. Joining the waitlist does not create an account.
- Phone check: you send a code to Alex from your WhatsApp number. We do not verify your email address.
- If you ask to move to Classic: your PCC and booking system details, your agency’s legal name and address, and the name and email of the contacts you give for your booking system and billing.
- Account and money records: your balance, packs bought, and charges. When you buy credit, our payment provider (Stripe) collects your card details and billing address, and uses the address to calculate sales tax. We never receive or store card numbers.
- Your messages with Alex.
3c. Travelers
- We hold nothing about you until you message Alex yourself, through your travel agent’s link (Lite), or until your agency or company sets you up (Classic and enterprise).
- What you send: your WhatsApp number, your messages, images and voice notes, and your trip requests.
- To make a booking: names, birth dates, passport details, contact details and travel preferences. If you send a passport photo, we read its details automatically.
- Learned preferences: from your requests, we keep simple travel preferences (for example a preferred airline or seat), so Alex can suggest better options next time.
- Booking records: reservation codes and itineraries, and flight change alerts if you or your agent turned them on.
3d. Employees of our corporate customers
- Name, email, phone, role, travel policy and trips.
4. Why we use it
| Purpose | Legal basis |
|---|---|
| Run Lite and our services: answer you, find options, prepare bookings and briefs, send messages | Contract |
| Create reservations in the booking system you or your agency use | Contract |
| Bill credit, keep accounting records | Contract; legal obligation |
| Prevent abuse: one free trial per phone, bot protection, security | Legitimate interest |
| Improve Alex: analyse conversations and fix mistakes | Legitimate interest |
| Remember travel preferences to suggest better options | Legitimate interest. You can ask us to delete them |
| Reply to enquiries and schedule calls | Legitimate interest; steps at your request |
| Comply with law and protect our rights | Legal obligation; legitimate interest |
We do not sell personal data. We do not use it for advertising and do not share it for cross-site behavioral ads.
5. AI processing
- Alex is an AI assistant, not a person.
- Your messages, images and voice notes are processed by AI models to understand you and reply. If you send a passport photo, an AI model and a document-reading service read its details.
- Our AI providers’ business terms say they do not use our customers’ data to train their models.
- Alex makes no decision with legal or similarly significant effect on you. Your travel agent, or you, decide and approve every booking.
6. Who we share it with
Service providers (processors). They act only on our instructions:
| Provider | What for |
|---|---|
| Amazon Web Services (USA) | Hosting, databases, file storage, email delivery, document reading (Textract), AI models (Amazon Bedrock) |
| OpenAI (USA) | AI models: replies, reading images (including passport photos), voice transcription |
| Anthropic (USA) | AI models: replies |
| Vonage and WhatsApp / Meta | Sending and receiving WhatsApp messages |
| Cloudflare | Website, gateway in front of our service, bot protection, cookieless analytics |
| Google (Workspace) | Our email inbox and calendar |
| Cal.com | Scheduling calls |
| Stripe | Payments for Lite credit: card details, billing address, email, tax calculation. Stripe also acts under its own privacy policy for fraud prevention and legal duties |
| SerpApi | Web searches Alex runs for general travel questions. The search text may include words from your message |
Travel suppliers. To create a reservation, we send passenger details to the booking system your agency uses (for example Sabre). The airline or supplier then holds them under its own policy.
Your travel agent or company. If you travel through a Lite agent, an agency or a company, they see your requests, the options, your booking details, and any conversation handed to them.
Others. We share data where the law requires it, to protect rights and safety, or with a buyer or successor of our business. This includes a Bitravel company in the United States that may take over our service.
7. International transfers
We are based in Israel. Our providers process data mainly in the United States. We rely on our providers’ contracts and safeguards when data moves between countries.
8. How long we keep it
| Data | How long |
|---|---|
| Live conversation state | 3 hours |
| Unfinished Lite signups | 72 hours |
| Images you send (temporary copy) | 24 hours |
| Messages waiting to be sent | 7 days |
| Escalations to your agent | 30 days |
| Learned travel preferences | 90 days after last use (account-level summaries: 180 days) |
| Flight change alerts | Until shortly after the trip, at most about 90 days |
| Conversation history | We keep it to analyse and improve Alex, with no fixed end date, until you ask us to delete it |
| Account, profile, passport images, booking records | While your account is in use, and until you ask us to delete them |
| Waitlist details | Until you join Lite or ask us to delete them |
| Technical logs | No fixed time limit at present |
| Money records (amounts only) | As long as accounting law requires |
| A one-way code made from your phone number (to keep “one free trial ever”) | Permanently. It cannot be reversed to reveal your number. Agents who joined before the free launch may also have a second code of the same kind |
When you ask us to delete your data, we delete your account, profile, conversations, passport images, preferences, waitlist details and our inbox copies. We release the records that stop one number from registering twice. We keep only the money records and the one-way code above. Data already sent to an airline or to your agent’s booking system stays with them.
9. Security
We use encryption in transit, private storage with public access blocked, access limited to people who need it, and secrets kept in a secrets manager. No system is perfectly secure. If a breach affects your data, we tell you and the authorities as the law requires.
10. Your rights
Depending on where you live, you may ask to:
- see the data we hold about you, and get a copy;
- correct it;
- delete it;
- object to some uses, or withdraw consent;
- ask us to stop sending you WhatsApp messages.
How: email [email protected] from the email you used, or tell us the WhatsApp number you used. We may need to confirm it is you. We answer within 30 days. We will not treat you differently because you used your rights.
US residents. We do not sell or “share” personal data, and we do not use sensitive data to infer things about you. If your state’s privacy law applies to us, you have the rights that law gives. You can use them as above, or through an authorized agent.
Israel. You may also contact the Privacy Protection Authority.
11. Children
Our services are for businesses and adult travelers who book through them. They are not directed to children under 16. A child’s travel details are processed only when an adult, or the child’s travel agent, books for them.
12. Cookies
Our website sets no cookies of its own and uses no advertising trackers. The scheduler (Cal.com) may set its own cookies when you open it.
13. Changes
We will post changes here and update the date at the top. For important changes, we tell Lite agents on WhatsApp or by email at least 30 days before they apply.
14. Contact
Bitravel Information Systems Ltd. · [email protected]