Privacy Policy

1. Data we process

2. Why we use it

To run the service: to make and manage bookings, take payments and make refunds, apply your company’s policy and approvals, prepare expense reports, answer your requests, find and fix errors and keep the service secure. We do not sell your data.

3. Who we share data with

Each recipient gets only what it needs for its part of the work:

• booking suppliers — airlines, hotels, transport providers and booking aggregators: traveller and trip details for a specific booking;
• the acquiring bank — what it needs to process a card payment and a refund to the card;
• hosting and database providers — storage and running of the service;
• the AI assistant — chat messages are processed by the AI provider so that the assistant can answer;
• email delivery — sending emails;
• technical monitoring and security — error reports (section 4);
• messaging and notification services — the messengers you connect for trip notifications and your browser’s push service, if you turn notifications on;
• product analytics — only if you allow analytics: usage events linked to an internal identifier, without your name, email, document numbers or payment amounts (section 4);
• receipt recognition — receipt images you upload are processed by the AI provider to read the amount, date and merchant;
• voice input — your browser or phone’s speech service turns speech into text before it reaches ITNA;
• your calendar — only if you connect it yourself.

4. Technical monitoring and security

We use Sentry to monitor errors. It records technical details about an error — its type, where in the application it happened and diagnostic data.

ITNA does not run product analytics without your consent. If product analytics (PostHog) is used, it runs only after you choose “Accept analytics” in a cookie banner; it records which pages and features are used, linked to an internal identifier — not your name, email, document numbers or payment amounts; screen recording is off, IP addresses are not stored, and the data is stored in the European Union. There are no advertising trackers.

5. International transfers

The hosting, the database and some of the services ITNA runs on are located outside Uzbekistan, so your data may be transferred to and processed in other countries. Each recipient receives only what it needs for its work. Analytics data, if you allow analytics, is stored in the European Union. We do not collect biometric data.

6. Retention and deletion

We keep data while your account exists.

To delete your account, write to support@itna.ai from the email of the account; the steps are described at itna.ai/delete-account. After deletion, the account data is deleted or anonymised, except records we are required to keep by law — bookings, payments, refunds and accounting records — for the period the law sets.

7. Your rights

You can ask what data of yours we process and get a copy, correct inaccurate data, ask us to delete it, restrict or object to its processing, and withdraw your consent. To exercise a right, write to legal@itna.ai.

8. Cookies

We use only cookies and browser storage that the service needs to work: for sign-in and the session; to remember your language, currency, display density and trip mode; to remember your analytics choice (“Accept analytics” or “Necessary only”); a short-lived cookie while you connect a calendar; and in-browser storage of the step you are on (for example, a selected flight or the payment stage).

If product analytics is used, analytics cookies are set only after you choose “Accept analytics” in the cookie banner; your choice is kept for 12 months and can be changed at any time with “Cookie settings” at the bottom of the site. There are no advertising cookies.

9. Contact

For questions about your data, write to legal@itna.ai.