1. Who we are
PaymentsAI Technologies S.r.l., Via Placeholder 1, 20121 Milano (MI), Italy (“PaymentsAI”, “we”) is the controller of the personal data processed through ai.payship.io and the PaymentsAI app. You can reach us about privacy at privacy@payship.io.
2. The short version
3. Data we collect
You give us
- Account: your email address and, optionally, your name and home city.
- Travelers: names, dates of birth, contact details and, where a Provider requires it, document details for the people you book for.
- Trips: what you type when planning, your preferences, chosen options, bookings, references and receipts.
- Card and identity: details needed by our card issuing and verification partners. Identity documents and full card numbers are handled by those partners and our payment systems.
- Messages: what you send through the contact form or by email.
We collect automatically
- Technical data: IP address, browser and device information and server logs, used for security and to keep the Service running.
- Approximate location: your city and country derived from your IP address, used only to suggest a home city, which you can change.
4. How we use it and why
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, signing you in, planning, booking and paying for trips, sending confirmations | Performance of a contract (Art. 6(1)(b)) |
| Card issuing, identity verification, anti-fraud and record keeping | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Security, troubleshooting and improving the Service | Legitimate interests (Art. 6(1)(f)) |
| Answering your messages | Legitimate interests (Art. 6(1)(f)) or steps before a contract |
5. AI and your data
To plan a trip, we send your trip description, the conversation and the travel options found to an AI model provided by Anthropic. We send the minimum needed: traveler identities, card details and identity documents are not sent to the model — they are filled into booking forms directly by our systems.
Under our agreement, Anthropic processes this data to provide the service to us and does not use it to train its models. We do not use your data to train our own models.
7. International transfers
Some recipients are located outside the European Economic Area. Where that is the case, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
8. How long we keep it
- Account, travelers and trips: for as long as your account is open; deleted within 30 days after you close it.
- Booking and payment records: up to 10 years where tax or accounting law requires it.
- Security logs: up to 90 days.
- Contact messages: up to 24 months after the conversation ends.
10. Your rights
Under the GDPR you have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw any consent you gave. To exercise them, email privacy@payship.io from the address on your account. We reply within one month.
You can also lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it) — or the authority where you live or work.
11. Security
We use encryption in transit (TLS), encrypted and http-only session cookies, server-side price signing, access controls and minimisation — the AI model never receives card data or identity documents. No system is perfectly secure; if a breach affects you, we will tell you as required by law.
12. Children
Accounts are for adults aged 18 and over. You may add children as travelers on a booking you make for them; their data is used only for that booking.
13. Changes to this policy
We'll update this policy when our practices change and show the date at the top. Material changes are notified in the app or by email. Questions: privacy@payship.io.