Privacy policy
Last updated:
In short: we keep your phone number, your messages and the trip details you shared, to find you a vacation and keep helping before and after it. We never sell your personal information. You can ask to see, correct or delete your data at any time, on WhatsApp or by email.
1. Who we are
The VacayMatch service is operated by The VacayMatch team ("we", "us"), reachable by email at hello@matchofesh.com. The operating company's legal name, state of formation and mailing address will be added here once the company is formed.
This policy covers the VacayMatch website and the WhatsApp service at +1 (276) 300-1021. Using the service means you accept this policy.
2. What we collect
On WhatsApp
- Identification: your phone number and WhatsApp profile name, as WhatsApp passes them to us.
- Message content: text, voice notes, images, documents and locations you send, and the service's replies.
- Trip details: destinations, dates, number and ages of travelers, budget, preferences and, if you told us, where you are.
- Links and clicks: for every link the service sends we keep an id, the supplier, the offer and the quoted price; when it is clicked, also the time, the browser type and the country of the IP address.
- Feedback and alert settings: your answer to whether you booked, the price watches and reminders you asked for, and your STOP and START replies.
On the website
The site is static: no cookies, no analytics, no third-party scripts. The web server keeps a technical access log (IP address, browser type, time and page) for up to 30 days, for security and reliability only. Fonts load from Google Fonts, so your browser contacts Google's servers under Google's privacy policy.
3. Why we use it
- To provide the service: understand the request, search and compare, send replies and links, and remember trip details during and across conversations.
- To send messages you asked for: a price alert, a reminder before you fly, a check on whether you booked, and tips before the trip and after landing.
- To know which offers led to a booking: the link id lets the booking site or its referral network report to us that a booking was made through it. The network does not receive your name or phone number.
- To improve the service, fix faults and prevent abuse.
- To meet legal obligations.
No duty to provide data: you are not required to give us any information. Without your phone number and message content the service cannot work; everything else is up to you, and without it results will be less precise.
4. Who else processes it
We do not sell personal information, and we do not share it for cross-context behavioral advertising. Data is processed on our behalf by providers under processing agreements and our instructions:
| Provider | Role |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Carries messages between your phone and the service, under the WhatsApp Business terms and WhatsApp's privacy policy. |
| Amazon Web Services | Hosting of servers and database, and transcription of voice notes to text. |
| Anthropic | The language model that reads messages and drafts replies. Messages are sent to the model for processing only. |
| Google (Gemini) | Transcription of voice notes to text. |
| Referral networks (Stay22, Admitad, Awin, Partnerize) and booking sites | Receive the link id only, when you click. A booking site receives your details only if you choose to book there, under its own policy. |
We will disclose data to a competent authority when required by law, subpoena or court order.
5. How long we keep it
- Voice notes, images and documents: kept for the trip they concern, unless you ask us to delete them earlier.
- Conversation history and trip details: kept while you use the service, deleted after 12 months without activity.
- Link and click records: kept up to 24 months for reconciliation with booking sites and referral networks, then only in aggregate, without identification.
- Server logs: up to 30 days.
On request we delete earlier (section 6), except data we must keep by law.
6. Your rights
- Access: a copy of the data held about you.
- Correction of data that is inaccurate or out of date.
- Deletion of all your data.
- Opt out of alerts and reminders: reply STOP on WhatsApp and proactive messages end. You can also block the number.
- No sale: we do not sell personal information and do not share it for targeted advertising, so there is nothing to opt out of.
To exercise a right, write to us on WhatsApp from the number you used, or email hello@matchofesh.com. We respond within 45 days; if we need longer, we tell you why and when. We may ask you to verify your identity before releasing or deleting data, for example by confirming from your WhatsApp number. If you disagree with our answer, reply to it and say so: a person reviews the appeal and answers within 45 days. We never treat you differently for exercising a right.
State-specific notes
California: under the California Consumer Privacy Act you have the rights listed above (to know, delete and correct) and the right not to be discriminated against for using them. We do not sell or share personal information, so there is no sale or sharing to opt out of, and we have not done so in the past 12 months. Under the California Online Privacy Protection Act we state that this site does not respond to "Do Not Track" browser signals, and that no third party collects personal information about your activity on this site over time and across other sites.
Nevada: we do not sell covered information as defined by Nevada law.
Texas, Virginia, Colorado and Connecticut: residents have the rights to access, correct, delete and obtain a portable copy of their data, and to opt out of targeted advertising, the sale of personal data and profiling; we do none of those three. Use the contact methods above; appeals are handled as described above, and you may also contact your state attorney general.
7. Security
Data is stored on secured servers with encryption in transit and at rest, role-based access and monitoring. No security is absolute; if a security incident affects your data we will notify you as the law requires.
8. Age
The service is for people aged 18 and over. We do not knowingly collect data from children under 13; if we learn that we have, we delete it.
9. International transfers
Our servers and providers are in the United States, the European Union and Israel, so your data may be processed outside the state or country you live in, with the protections described in section 7.
10. Changes
If we change this policy materially we will say so in the WhatsApp conversation and on this page before the change takes effect. The date of the last update is at the top.
11. Contact
The VacayMatch team
Email: hello@matchofesh.com · WhatsApp and phone: +1 (276) 300-1021
Privacy requests (access, correction, deletion): the same email, subject "Privacy".