Privacy Policy

Strova OÜ — Last updated: September 2026

1. Who We Are

Strova Tours OÜ is a travel-services company registered in the Republic of Estonia (registry code 17507714, EMTAK 79111). We operate as a single-service mediator, arranging flights, accommodation, and transfers as separate services on behalf of our customers.

2. What Data We Collect

When you interact with us through Facebook Messenger (or, in the future, Instagram or WhatsApp), we collect and store the following information:

• Identity data: your name, profile picture URL, language preference, and timezone as provided by the messaging platform.
• Contact identifiers: your platform-specific user ID (e.g., Facebook Page-Scoped ID) so we can maintain the conversation.
• Conversation data: the text of messages you send and the replies we provide, including timestamps.
• Travel-inquiry data: destination, travel dates, number of travelers, departure city, budget, accommodation preferences, and whether you need visa or flight assistance — only when you share this information with us.

We do not collect payment card details, government ID numbers, or health information through the chatbot.

3. How We Use Your Data

We use the data listed above for the following purposes:

• To respond to your messages and answer your travel questions.
• To qualify your travel inquiry and connect you with a human travel consultant who can provide pricing and finalize arrangements.
• To maintain a record of your conversation so that you do not need to repeat information.
• To improve our service quality and identify gaps in our knowledge base.

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except the technology providers listed in Section 5.

4. Legal Basis (GDPR)

Our legal basis for processing your data is legitimate interest (Article 6(1)(f) GDPR): you initiate a conversation with our business page expecting a response, and we process the minimum data necessary to provide that response and fulfill your travel inquiry. For any future marketing communications, we will obtain your explicit consent.

5. Service Providers

Your data is processed by the following third-party services, all of which act as data processors on our behalf:

• Meta Platforms, Inc. — provides the Messenger platform through which you contact us.
• Supabase, Inc. — hosts our database (EU region, Frankfurt).
• Groq, Inc. — provides the AI language model that generates responses in our chatbot.
• Telegram — used internally for human-handoff notifications to our consultants (your name and inquiry summary may be shared via Telegram to facilitate consultant follow-up).

6. Data Retention

We retain your conversation and inquiry data for as long as your travel inquiry is active or for up to 24 months after your last interaction, whichever is longer. After this period, data is deleted or anonymized. You may request earlier deletion at any time (see Section 7).

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a structured format.

To exercise any of these rights, contact us at privacy@strovatours.com or message our Facebook Page. We will respond within 30 days.

You can also request deletion of your data directly through Facebook's settings. When you do, Facebook notifies us automatically and we delete all data associated with your account from our systems.

8. Data Deletion

When we receive a data-deletion request (whether from you directly or via Facebook), we permanently delete your customer profile, all channel identities, conversations, messages, and travel leads from our database. This action is irreversible. A confirmation code is issued for your records.

9. Cookies

Our chatbot operates entirely within Messenger and does not use cookies. The strovatours.com website may use essential cookies for functionality; no tracking or advertising cookies are used.

10. Children

Our services are not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through our Facebook Page.

12. Contact

Strova Tours OÜ
Estonian Business Registry: 17507714
Email: info@strovatours.com