Legal

Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how Lightspace ("we", "us", "our") collects, uses, discloses, and safeguards information when you use our credit-based AI travel marketplace.

1. Information We Collect

Account data

Name, email address, and hashed password when you create an account.

Order and billing data

Selected credit plan, currency, promo codes, and payment method. For bank transfers, we process transfer confirmations sent to our finance address.

Usage data

Requests made to AI services, credits consumed, timestamps, and device/browser metadata.

Travel inputs

Prompts and preferences you submit to AI services (e.g. destinations, dates, budget).

2. How We Use Information

  • Provide, operate, and secure the marketplace and your credit balance
  • Process orders, refunds, and tax obligations
  • Generate AI responses to your travel requests
  • Send transactional emails (order confirmations, bank details, receipts)
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. Legal Bases (GDPR)

We rely on contract performance, legitimate interests (security, fraud prevention), consent (optional analytics), and legal obligations.

4. Sharing

We do not sell personal data. We share limited data with processors that host our infrastructure, deliver email, and (once enabled) process card payments, under written data processing agreements.

5. Retention

Account and billing records are retained for the period required by tax and accounting laws (typically 6–10 years). AI prompts are retained for 12 months to improve reliability, then deleted or anonymized.

6. Your Rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. To exercise these rights, email [email protected].

7. International Transfers

Where data is transferred outside your region, we use Standard Contractual Clauses or equivalent safeguards.

8. Security

We use TLS in transit, encryption at rest, hashed passwords, and least-privilege access controls.

9. Changes

We will notify material changes by email or in-app notice at least 14 days before they take effect.

10. Contact

Lightspace Polska sp. z o.o. · Aleja Jana Pawła II 27, 00-867 Warszawa, Poland · [email protected]