Privacy Policy

Sujova ("Sujova", "we", "us") is operated by EiCapp, based in Finland, Business Address available upon request. Our website is https://sujova.com. We act as the data controller for personal data processed through the service.

• Account email and authentication identifiers
• Profile / display name
• Trip content you enter (destinations, notes, preferences)
• AI-generated itineraries linked to your account
• Email addresses of collaborators you invite
• Support messages you submit through /help
• Privacy-friendly analytics events (page views, feature usage)
• Payment / subscription status received from our payment processor

• Create and secure your account
• Generate, save, and adapt itineraries
• Enable trip sharing and collaboration
• Process subscriptions and unlock paid features
• Provide customer support
• Understand product usage in aggregate to improve Sujova
• Protect the service against abuse and fraud
• Comply with legal obligations

We rely on the following legal bases, depending on the activity:

• Performance of a contract (providing the service you signed up for)
• Legitimate interests (security, abuse prevention, product improvement)
• Consent (where required, e.g. optional communications)
• Legal obligation (tax, accounting, lawful requests)

• Supabase / Lovable — hosting, authentication, and database
• Resend — transactional email (invites, support replies)
• Paddle — Merchant of Record and payment processor
• Plausible — privacy-friendly product analytics
• AI model providers — itinerary generation based on your prompts

These providers process data on our behalf under appropriate agreements and only as needed to deliver their part of the service.

We retain account and trip data for as long as your account is active. Support messages are kept as long as needed for support and legal purposes. Payment records are retained by Paddle in line with their own retention obligations. Analytics data is aggregated in Plausible and does not identify you individually. You can request deletion of your account at any time via /help.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us through the in-app support page.

We use reasonable technical and organizational measures — including encryption in transit, access controls, and audit logging — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

For privacy questions or data requests, please use our in-app support form.