Voyai TravelVoyai Travel
||
Legal

Privacy Policy

Updated: 8 October 2026

1. Who we are

Voyai Travel is an AI travel assistant in WhatsApp and Telegram and the website voyai.fi. The controller of your personal data is Aivomaa Oy (Business ID 3592993-6), Kankarepolku 5 F B 335, 00770 Helsinki, Finland. Contact: info@aipoweredsolutions.fi.

This policy explains what we process when you chat with Voyai or visit voyai.fi, why, who else receives the data and what rights you have under the EU General Data Protection Regulation (GDPR).

2. What data we process

  • Messenger identifiers: in WhatsApp your phone number and profile name; in Telegram your user ID, username and the name in your profile.
  • The content of your messages, including Telegram voice messages, which are converted to text.
  • Travel details you choose to share: places, dates and times, flight numbers, number of travellers, luggage, citizenship when you ask about visas, and special needs such as child seats or reduced mobility.
  • When you book a transfer: first name and surname of the lead passenger, email, mobile number, flight number and time, pickup and drop-off address or hotel, number of passengers and suitcases, children's dates of birth and special requirements (for example child seats or a wheelchair), and the payment status and amount.
  • Technical data: time of messages and delivery status; on the website, the server log of the hosting provider (IP address, browser, time of visit).

Please do not send passport or ID numbers, payment card details or health information that is not needed for your question.

3. Why we process it and on what legal basis

  • To answer your questions and help you plan your trip, at your request — Article 6(1)(b) GDPR.
  • To keep the context of the conversation so that you do not have to repeat yourself — Article 6(1)(b).
  • To keep the service secure, prevent misuse and fix errors — our legitimate interest, Article 6(1)(f).
  • To book, pay for, change or cancel a transfer you order and to send you the voucher — Article 6(1)(b).
  • To keep booking and payment records as required by the Finnish Accounting Act — Article 6(1)(c).

If you tell us about a health condition or reduced mobility, we use it only to answer that question, on the basis of your explicit consent given by sending it — Article 9(2)(a). You can withdraw consent at any time.

4. How the assistant works

Your message travels through WhatsApp or Telegram to our automation platform. An AI language model generates the answer. When an answer needs current facts (routes, schedules, prices, visa and entry rules, disruptions), the assistant sends a search question to a web-search service. The search question contains the travel details needed for the search, not your name or phone number. Telegram voice messages are transcribed to text by the AI provider.

Under their API terms, the AI and search providers do not use data sent through the API to train their models.

AI answers can contain mistakes. Check important information, such as visa and entry rules, with the official source before you travel. Voyai does not make decisions that have legal or similarly significant effects on you.

You can book transfers in the chat. Voyai Travel (Aivomaa Oy) sells the transfer to you and collects the payment; the transfer is operated by Suntransfers (ST Services Iberia, S.L., Spain) and the local transport company it assigns. After you confirm the booking summary, Voyai sends you a payment link. Once Stripe confirms the payment, the booking details are sent to Suntransfers and you receive the booking number and voucher.

Tours and tickets: Voyai is an affiliate partner of Viator (Viator, Inc., a Tripadvisor company). To find tours, Voyai sends Viator only the destination, date and type of activity, never your name or contact details. Tour links in the chat contain a Voyai partner code; if you book through them, Viator pays Voyai a commission and the price for you stays the same. You book and pay directly on Viator, which processes your data and sets its own cookies under its own privacy and cookie policies. Viator reports to Voyai only the bookings made through Voyai links and the commission, not your contact or payment details.

5. Who receives the data

Processors acting on our instructions:

  • n8n GmbH, Germany — automation platform on which the assistant runs.
  • OpenAI (OpenAI Ireland Ltd and OpenAI, L.L.C., USA) — generation of answers and transcription of voice messages.
  • Perplexity AI, Inc., USA — web search for current travel information.
  • ST Services Iberia, S.L. (Suntransfers.com), Spain — performs the transfers you book; it passes the passenger details needed for the trip to the local transport company that drives you.
  • The hosting provider of voyai.fi — website server logs.

Stripe Payments Europe, Limited, Ireland, processes your payment as an independent controller under its own privacy policy (stripe.com/privacy).

Independent controllers under their own terms: Meta Platforms Ireland Ltd (WhatsApp) and Telegram, which deliver the messages.

When you open voyai.fi, fonts are loaded from Google Fonts (Google Ireland Ltd) and animation scripts from jsDelivr; these services receive your IP address.

We do not sell personal data and do not use it for advertising.

6. Transfers outside the EU

OpenAI and Perplexity process data in the United States. Transfers are based on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's standard contractual clauses.

If you book a transfer in a country outside the EEA, the passenger details are passed to the local transport company in that country because this is necessary to perform the transfer you ordered (Article 49(1)(b) GDPR).

7. How long we keep data

  • The assistant keeps the most recent part of the conversation (up to about 30 messages) in temporary working memory so that it can continue the conversation. It is not kept in a separate archive.
  • Successfully processed messages are not saved in the platform's execution logs. Logs of failed runs, which may contain the message, are kept for a limited time for troubleshooting and deleted automatically.
  • OpenAI may keep data sent through its API for up to 30 days to detect abuse and then deletes it.
  • Booking, payment and invoice records are kept as long as the Finnish Accounting Act requires, generally six years from the end of the financial year, and then deleted.
  • Your messages stay in your WhatsApp or Telegram chat under the rules of those apps; you can delete them in the app.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability and to withdraw consent. Write to info@aipoweredsolutions.fi; we answer within one month. You can also lodge a complaint with the Data Protection Ombudsman of Finland (tietosuoja.fi).

9. Children

Voyai is not intended for children under 13. A younger child should use it together with a parent or guardian.

10. Security

Access to the systems is limited to people who need it, and connections are encrypted.

11. Changes

We update this policy when the service changes. The date of the current version is shown at the top of the page.