Privacy Policy
Effective Date: December 15, 2025
1. Introduction
Welcome to RAFINYA SASU (“RAFINYA,” “we,” “us,” or “our”). We operate an AI-powered travel companion service that connects international tourists visiting Africa with vetted local suppliers.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our AI, visit our website, or use our booking services.
By using RAFINYA, you consent to the data practices described in this policy.
2. Information We Collect
To provide personalized travel recommendations and facilitate bookings, we collect several types of information:
A. Information You Provide Directly
Identity Data: Name, surname, and contact details (email address, phone number).
Conversational Data (AI Interactions): When you chat with the RAFINYA AI, we process the content of your messages. This includes your travel preferences, dietary restrictions, interests, budget, family status, and specific dates.
Transaction Data: Details about payments to and from you and other details of products and services you have purchased via our “safe booking links.”
B. Information Collected Automatically
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system.
Usage Data: Information about how you use our website and AI interface.
C. Payment Information
We do not store your complete credit card numbers or banking credentials. We generate safe payment links processed by third-party payment processors (e.g., Stripe, PayPal, or local banking partners). These processors handle your financial information in accordance with their own Privacy Policies and PCI-DSS compliance standards.
3. How We Use Your Information
We use your data for the following specific purposes:
AI Analysis & Recommendations: To analyze your “Conversational Data” to understand your unique tastes and interests, allowing our algorithms to recommend suitable itineraries and experiences.
Service Fulfillment: To connect you with our Vetted Suppliers and facilitate the booking of tours, accommodations, and activities.
Communication: To send you booking confirmations, payment links, itinerary updates, and support messages.
Improvement: To train our AI models to provide better recommendations for future travelers.
Security: To detect and prevent fraud or unauthorized access.
4. Sharing Your Information
As a two-sided marketplace, sharing specific data is essential to fulfill our service. We share your information with:
Vetted Local Suppliers: We share necessary details (e.g., your name, travel dates, dietary requirements, and interests) with the local guides, hotels, or agencies you choose to book, so they can provide the service.
Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data analysis, and email delivery.
Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency in Morocco).
Note on International Transfers: As our suppliers are located across Africa, your personal data may be transferred to countries outside your country of residence to fulfill your travel contract.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. This includes using encryption for data transmission (SSL) and vetting our suppliers to ensure they understand the importance of user privacy.
6. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
7. Your Legal Rights
Depending on your location, you may have specific rights regarding your data.
For Users in Morocco: In accordance with Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, you have the right to access, rectify, and object to the processing of your data.
For International Users: We strive to respect global privacy standards (such as the GDPR). You generally have the right to request access to your personal data, request correction or deletion, and withdraw consent.
To exercise any of these rights, please contact us at leyla@rafinya.com.
8. Third-Party Links
Our AI may generate links to third-party websites or payment gateways. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. As stated in our Terms & Conditions, if a revision is material, we will try to provide at least 30 days' notice.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: