Privacy Policy

This policy explains what personal data Selerne processes when you use its website, app and related services, why, how long we keep it, and your rights. The Romanian version is the reference text.

1. Who is responsible for your data

Selerne is an independent project based in Romania and is in the process of being incorporated. Until then, the data controller and responsible person is its founder, Apostol-Iordache Matei, reachable at hello@selerne.com. This section will list the company's name, tax ID, registration number and registered office as soon as it is incorporated.

2. Current stage

Selerne is in public beta. You can create an account and plan trips, and a limited group of testers can try booking against the suppliers' test environments. Until the company is incorporated and holds a tourism licence, no real money is taken and no real bookings are made.

3. What we process

• Account: name, e-mail, password (stored only hashed) and, if you add them: date of birth, home town, nationality, phone.
• Preferences and trips: destinations, dates, budget, traveller count, preferences, your conversations with the assistant.
• Bookings: traveller names, date of birth, phone and e-mail the hotel or airline requires; supplier confirmations; the terms you accepted.
• Payments: amount, payment status and the card's last 4 digits. Only the payment processor sees the full card number.
• Technical: IP address, device and browser type, pages viewed, technical errors.
• Messages: what you send us by e-mail, the contact form or “Report a problem”.

4. Why, and on what legal basis

• Contract (GDPR art. 6(1)(b)): your account, planning, bookings and payments.
• Legal obligation (c): keeping accounting records and proof of payment.
• Legitimate interests (f): security, fraud prevention, fixing errors, measuring whether features are used (e.g. which Discover idea you pick).
• Consent (a): analytics cookies and event alert e-mails. You can withdraw it at any time.

5. Who we share data with

We do not sell personal data. We share it only with the categories of providers that help us run the service, each for its own purpose. The named list of providers is available on request at the address below.

• Hosting and database — storing your account, trips and bookings; sign-in
• AI provider — processes your trip descriptions and preferences to generate suggestions
• Booking suppliers (hotels and flights) — receive traveller details only when you book
• Payment processor — card details go straight to it, never to us
• E-mail service — confirmations, password resets, alerts you opted into
• Error monitoring — technical reports, so we can fix problems
• Usage analytics — only if you accept analytics cookies
• Maps, places, events and flight status — receive the place, city or flight number, not your details
• Authorities, only where the law requires it.

When you book, the hotel or airline also becomes a controller of the data it receives and handles it under its own policies.

6. Selerne Systems (for travel agencies)

Agencies using Selerne Systems enter their clients' requests and details (name, e-mail, messages, travel preferences) and e-mail them offers from the app. For that data the agency is the controller; Selerne processes it only on the agency's behalf and instructions, as a processor. If you are an agency's client, contact the agency first; we will also help at privacy@selerne.com.

7. How long we keep data

• Account, preferences and trips: while you have an account. Deleting the account deletes them.
• Bookings, payments and accepted terms: up to 10 years, as accounting law requires, even after the account is deleted — no longer linked to you.
• Messages to us and problem reports: as long as needed to resolve them and follow up.
• Technical data and errors: the providers' standard periods (usually at most 90 days).

8. Transfers outside the EEA

Some providers may process data outside the European Economic Area, mainly in the US. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

9. Your rights

You have the right to access, correct, delete, restrict, object, port your data and withdraw consent. You can download a copy of your data and delete your account from your Profile, or write to privacy@selerne.com. We answer within one month.

You can also complain to Romania's data protection authority, ANSPDCP.

10. Automated recommendations

The assistant uses AI to suggest destinations, stays and itineraries. We make no decision with legal effect on you by automated processing alone: you choose and confirm every booking.

11. Cookies

Details and choices are in Cookie Settings.

12. Security

We use encryption in transit, restricted database access and rules that limit each account to its own data. No method is completely secure.

13. Children

Selerne is not intended for anyone under 16, and we do not knowingly collect their data.

14. Changes

When we change this policy we update the date above and, for significant changes, tell you by e-mail or in the app.

15. Contact

For any data question: privacy@selerne.com.