Privacy Policy

Open section navigation
Last updated
November 10, 2026

This Privacy Policy (the “Policy”) explains how LAVOYA (https://lavoya.app, “we” or the “Platform”) collects, processes, uses and protects your personal data. This Policy is made under the Personal Data Protection Act of the Republic of China (Taiwan). The Platform offers its interface in several languages, but the same Policy applies regardless of the language you use or where you are.

Operator of the Platform: [To be confirmed: operating company name]

When you register as a member, we ask you to read and agree to this Policy. When visitors browse the Platform without registering, we handle the related data as described in Sections 1.3 and 1.4. Analytics cookies are used only after you give separate consent.

1.Data we collect

1.1Data you provide

  • Registration data: nickname, name, email address, password, country/region and interface language. Your country/region cannot be changed by yourself after registration.
  • Account details: the last name, first name, date of birth and gender you enter in the member center.
  • Profile: your member avatar and bio.
  • Communication preferences: whether you subscribe to the newsletter and whether you receive service notifications.
  • Third-party sign-in: when you sign in with a Google account, we receive your name, email address and account identifier from Google. We never receive your Google password.

Registration data is required to create an account. If you do not provide it, you cannot register as a member, but you can still browse the Platform’s public content. Account details and profile information are optional.

1.2Content you publish

Travel stories, photos, reviews, saved items and trips that you create, upload or publish on the Platform are stored on our servers.

Publicly published content (such as travel stories and reviews) is shown together with your nickname and avatar, can be seen by other users and visitors, and may be indexed by search engines. Saved items, trips and unpublished drafts are not shown to others unless you make them public or share them. For rules on published content, see Chapter 3 of the Platform’s Terms of Use.

1.3Data collected automatically

  • Technical data: IP address, browser type, operating system, time of visit and referring URL, used to keep the website running, protect information security and troubleshoot problems.
  • Usage data: after you consent to analytics cookies, Google Analytics 4 collects the pages you view, time spent and interactions.

1.4Cookies and browser storage

  • Necessary (no separate consent needed): remembering your chosen language, your sign-in status, your cookie choice and any travel story draft you have not yet submitted. If you choose to stay signed in, your sign-in status is kept in the browser until you sign out; otherwise it is cleared when you close the browser tab. Story drafts stay only in your browser and are not sent to our servers.
  • Analytics cookies (consent required): Google Analytics 4. It is loaded only after you click “Accept analytics cookies” in the cookie banner; if you choose “Necessary only”, it is not loaded.

You can change your choice at any time from “Cookie settings” in the website footer. After you withdraw consent, we stop loading Google Analytics and clear its cookies.

2.Purposes and use

We use your data only for the following purposes:

2.1Providing the services

Creating and managing your account, sign-in verification (including email verification and password reset), storing and displaying the content you publish, providing saved items and trip features, and replying to your inquiries.

2.2Service notifications

Sending service notifications such as content review results and event reminders. You can turn off “Service notifications” in the member center, but emails triggered by your own actions, such as email verification and password reset, will still be sent.

2.3Newsletter and marketing

Only if you subscribe to the newsletter do we send you LAVOYA travel news and event information. You can unsubscribe at any time in the member center.

2.4Service improvement and analytics

Analyzing how the Platform is used in statistical or de-identified form, such as the distribution of users by country/region and language, to improve content and features.

2.5Security and legal obligations

Preventing abuse, fraud and violations of the Terms of Use, and responding to requests from competent authorities or judicial bodies as required by law.

3.Sharing and third-party services

We do not sell your personal data. We provide data to third parties only in the following cases:

3.1Service providers

  • Google: Google account sign-in and Google Analytics 4 traffic analytics (only after your consent).
  • Cloud hosting and database providers: storing your account data, uploaded photos and published content.
  • Email delivery providers: sending verification emails, password reset emails, service notifications and newsletters.
  • Map tile service (OpenStreetMap): when you view a map, your browser downloads map images directly from the tile servers, which therefore receive your IP address.
  • AI service providers: see Section 4 of this Policy.

These service providers may process your data only to provide their respective services.

3.2External links and partners

Pages on the Platform such as places and events may link to partner websites (for example, accommodation or ticketing sites). We add parameters to these links that identify the source (such as utm_source), but we do not send your personal data. Once you visit a partner website, the partner handles your data under its own privacy policy, which you should review.

3.3Legal requirements

We may disclose your data to meet legal obligations, including responding to lawful requests for information, court orders or government investigations.

3.4Business transactions

In the event of a merger, acquisition or transfer of assets, your data may be transferred as part of the transaction. The recipient must continue to protect your data under this Policy.

3.5Transfers outside Taiwan

Some service providers have servers outside Taiwan (for example, in the United States), so your data may be transferred abroad for processing and storage. We do so only to the extent necessary to achieve the purposes of this Policy.

4.AI features

4.1Data sent

When you use AI features such as the AI travel companion, we send what you enter in that feature, such as destinations, trip length, preferences and conversation content, to the AI service provider to generate a response.

4.2Account data is not sent proactively

We do not proactively send account data such as your name or email address to the AI service provider. However, if you include such information in your input yourself, it will be sent along with it, so please avoid entering unnecessary personal data.

4.3Service provider

The AI features are currently provided by OpenAI, and the data is processed in the United States. The data sent is used only to generate trips and travel suggestions, and we do not authorize the service provider to use it for marketing or other purposes.

4.4Consent and choice

Before you use an AI feature for the first time, we inform you and obtain your consent. AI features are optional, and not using them does not affect your use of the Platform’s other features.

5.Data retention

  • Account data, profile and content you publish: kept until you delete your account.
  • After account deletion: we delete or de-identify your personal data, except where retention is required by law or necessary to handle disputes or prevent abuse, in which case it is kept for the necessary period. Data in backups is cleared at the end of the backup cycle.
  • Analytics data: kept according to the Google Analytics data retention settings.
  • Data stored in your browser (language, sign-in status, drafts, cookie choice): kept on your device, and you can clear it yourself.

6.Security measures

  1. 6.1All data transmitted by the Platform is encrypted with HTTPS.
  2. 6.2Only personnel who need it for their work can access personal data.
  3. 6.3We collect only the data needed for the purposes of this Policy and continually review and improve our security measures.
  4. 6.4No method of transmission or storage over the internet is completely secure. If an incident occurs in which personal data is stolen, leaked or tampered with, we will notify you as required by law and take the necessary response measures.

7.Your rights

Under Article 3 of the Personal Data Protection Act of Taiwan, you may exercise the following rights over your personal data:

  • To make inquiries and request to review it.
  • To request copies.
  • To request supplements or corrections.
  • To request that collection, processing or use be stopped.
  • To request deletion.

How to exercise your rights:

  • You can view and edit your profile, account details, language and email notification settings directly in the member center. Your country/region cannot be changed by yourself after registration; to correct it, please email us.
  • For other requests (including account deletion), please email service@lavoya.app. We will first verify your identity and reply within the statutory period. Where the law allows us to refuse a request, we will explain why.
  • Withdrawing consent: you can withdraw consent to analytics cookies from “Cookie settings” in the website footer, and unsubscribe from the newsletter in the member center. Withdrawal does not affect processing carried out before it.
  • If you request that we stop processing or delete data required to keep an account, we will no longer be able to provide you with member services.

8.Contact us

If you have any questions, requests or concerns about this Policy or how we handle your personal data, please contact us by email:

service@lavoya.app

We will respond to your inquiry as soon as possible and help you exercise your rights.

9.Changes to this Policy

We may update this Policy as our services, laws or technology change. Updates will be announced on this page and the “Last updated” date will be revised. For material changes, we will make a prominent announcement on the website or notify members by email. If you continue to use the Platform after this Policy is updated, you agree to the updated version.

The Traditional Chinese version of this Policy prevails. Versions in other languages are for reference only; in case of any discrepancy, the Traditional Chinese version prevails.