PRIVACY POLICY

Clear information about your information.

Effective August 14, 2026. Vafaro collects only the information needed to provide the early trip-check experience, evaluate review applications, deliver accepted reviews, respond to messages, and operate the website.

Information we collect

The free scan stores the family profile and report in your browser. Vafaro receives that trip profile only if you submit a founding-family application. An application may include your name, email, trip timeframe, price interest, and the trip information attached to the report. If Vafaro makes a review offer, we record the scope, price, delivery and refund terms presented to you, your acceptance, and payment status. The contact form collects your name, email, topic, and message.

Our hosting and security systems may process technical information such as browser type, pages viewed, approximate location, and IP address. Contact, application, and offer endpoints store a one-way hash of the requesting IP address for rate limiting rather than the raw address.

How we use information

We use information to provide the website, evaluate and respond to applications and messages, prevent abuse, understand aggregate product usage, improve Vafaro, and meet legal obligations. Do not submit diagnoses, medical records, passport numbers, payment details, or other sensitive information.

Service providers and sharing

Vafaro uses service providers including Vercel for hosting and privacy-focused website analytics, Neon for database storage, Resend for transactional email delivery when notifications are enabled, and Stripe for secure payment processing when checkout is enabled. Stripe processes payment information under its own privacy terms; Vafaro does not receive your full card number. These providers process information to operate their services for Vafaro. We do not sell personal information or use trip profiles for targeted advertising.

Retention and security

We keep information only as long as reasonably necessary for the purposes described here, security, recordkeeping, and legal obligations. No online system can guarantee absolute security, but we use encrypted connections, restricted server-side database credentials, input limits, abuse controls, and data minimization.

Your choices

You can clear locally stored scan data through your browser settings. You may ask to access, correct, or delete information submitted to Vafaro. Select “Privacy request” on our contact form. We may need to verify your identity before completing a request.

Children and changes

Vafaro is intended for adults planning travel and is not directed to children under 13. Please do not submit a child’s contact information. We may update this policy as the service changes and will revise the effective date when we do.