Privacy & Cookie Policy

This policy explains what information we handle when you use Vantage, why we handle it, and the choices and rights you have. We have written it in plain language on purpose.

1. Who we are

Vantage is a service operated by Aeterna Systems LLC, a limited liability company registered in the State of Wyoming, United States ("Vantage", "we", "us", or "our"). For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Aeterna Systems LLC is the data controller responsible for the information described in this policy.

If you have any question about this policy or about how we handle your information, you can reach us at privacy@vantageecosystem.com.

2. What Vantage is

Vantage is an AI-powered travel concierge. You describe what kind of trip or experience you are looking for, and an automated assistant suggests options and helps you think through a plan. The assistant is software, not a human travel agent.

Vantage is an independent affiliate. When the assistant suggests a membership or service and you choose to follow a link, you may be taken to a third party's official website (for example, the travel-membership provider we work with), where you deal directly with that provider under their own terms and their own privacy policy. We may earn a commission if you sign up through such a link, at no extra cost to you.

3. What information we process

We have deliberately built Vantage to ask for as little as possible. You do not need to create an account, give your name, or provide an email address to use the concierge. We do not currently operate registration forms, newsletter sign-ups, or payment collection on this website. The information we handle falls into the categories below.

a) Information you type into the chat

When you chat with the concierge, the messages you send are processed so the assistant can understand your request and respond. You are free to keep your messages general (for example, a destination, a season, or a budget range). Because the chat is open text, you could choose to type personal details into it — but you are not required to, and we ask that you do not share sensitive personal information (such as health, financial account, or identity-document details) in the chat.

b) Technical and usage information

Like almost every website, our hosting and server infrastructure automatically records limited technical information needed to deliver the site securely and reliably. This can include your IP address, the type of browser and device you use, the pages or features you access, and the date and time of your visit. This information is generated by the act of connecting to our systems.

c) Information you send us directly

If you email us (for example, at one of the addresses in this policy), we receive your email address and whatever you choose to put in your message, and we keep that correspondence so we can respond and keep a record of it.

4. Why we process it & our legal bases

We process the information above for the following purposes:

• To provide the concierge service — to understand your request and generate a response.
• To operate, secure, and maintain the website — to keep it running, prevent abuse, and diagnose technical problems.
• To improve the service — to understand, in aggregate, how the concierge is used and where it can be more helpful.
• To respond to you — when you contact us directly.
• To meet legal and regulatory obligations — where the law requires it.

Where the GDPR applies, our legal bases are: our legitimate interests in operating, securing, and improving a service you have chosen to use (balanced against your rights); your consent, where we ask for it (for example, for any non-essential cookies, should we introduce them); and compliance with a legal obligation where applicable.

5. AI processing of your messages

The concierge uses a third-party artificial-intelligence provider to generate its responses. This means that the content of the messages you send to the assistant is transmitted to that provider for the sole purpose of producing a reply, and may be processed on servers located outside the European Economic Area, including in the United States (see International data transfers). We do not use your conversations to train third-party AI models, and we ask our providers to handle that data only to deliver the service to us.

Because responses are generated automatically, they may occasionally be incomplete or inaccurate. The concierge is a planning aid, not professional travel, legal, or financial advice. Please see our Terms for more on this.

6. Cookies & similar technologies

A cookie is a small file a website can store in your browser. Vantage takes a minimal approach.

• Strictly necessary / functional only. We use only the limited storage needed for the website and the chat to function during your visit. These are essential to deliver a service you have requested.
• No advertising or tracking cookies at present. We do not currently run third-party advertising cookies, cross-site trackers, or marketing pixels on this website.
• If this changes, for example if we add website analytics or marketing tools in the future, we will update this policy and, where the law requires it, ask for your consent through a cookie banner before any non-essential cookies are set.

You can control or delete cookies through your browser settings at any time. Blocking essential storage may affect how the chat works.

7. Who we share information with

We do not sell your personal information. We share information only with the service providers that make Vantage work ("processors"), and only as far as needed:

• Website hosting (GitHub Pages, provided by GitHub, Inc.) — serves this website and processes technical connection data such as your IP address in standard server logs.
• Our own application server, located in the European Union (Frankfurt, Germany) — runs the software behind the concierge.
• AI provider (OpenAI) — processes the content of your chat messages to generate responses, as described above.
• Email and productivity provider (Google Workspace) — handles email if you contact us.

We may also disclose information if we are required to do so by law, or to protect our rights, safety, or property, or those of others.

When you follow an affiliate link and leave our site, the third-party provider you arrive at (for example, the travel-membership provider) becomes responsible for any information you give them, under their own privacy policy.

8. International data transfers

Some of our providers are based in the United States (for example, our AI and hosting providers). This means your information may be transferred to, and processed in, countries outside the European Economic Area whose data-protection laws differ from those in the EU. Where we make such transfers, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses and/or a provider's certification under an approved data-transfer framework. You can ask us for more detail using the contact address below.

9. How long we keep information

We keep information only for as long as we need it for the purposes described in this policy:

• Technical and server logs are kept for a short period for security and troubleshooting, then routinely deleted or overwritten.
• Chat content is processed to generate a response. Where we retain conversation records to operate and improve the service, we keep them only as long as needed for those purposes and minimise any personal detail they contain.
• Email correspondence is kept for as long as needed to handle your enquiry and for a reasonable period afterwards.

10. Your privacy rights

Depending on where you live, and in particular if you are in the EU, the EEA, or the UK, you have rights over your personal information. These include the right to: access the information we hold about you; ask us to correct it; ask us to delete it; restrict or object to our processing; request portability of information you provided; and withdraw consent at any time where we relied on it (without affecting processing already carried out).

To exercise any of these rights, contact us at privacy@vantageecosystem.com. We will respond within the time the law allows. You also have the right to lodge a complaint with your local data-protection supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH).

11. Children

Vantage is intended for adults and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. How we protect information

We take reasonable technical and organisational measures to protect information against loss, misuse, and unauthorised access, including access controls and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to limit what we hold in the first place.

13. Links to other websites

Vantage contains links to third-party websites and services, including those of the travel-membership provider we work with. We are not responsible for the content or privacy practices of those websites. We encourage you to read the privacy policy of any third-party site you visit.

14. Changes to this policy

We may update this policy from time to time, for example if we add new features or services. When we do, we will change the "Last updated" date at the top of this page, and, where the change is significant, we will take reasonable steps to bring it to your attention.

15. How to contact us

For any privacy question or request, or to exercise your rights, please contact:

Aeterna Systems LLC — operator of Vantage
Registered in the State of Wyoming, United States
Privacy enquiries: privacy@vantageecosystem.com
General enquiries: hello@vantageecosystem.com