We take the protection of your data seriously. Travuso is operated by a company registered in Germany and follows the EU General Data Protection Regulation (GDPR), one of the strictest data protection laws in the world. This policy explains what we collect, why, and your rights.
Legal
Privacy policy
Last updated 30 October 2026
Who is responsible
The controller for this website and the Travuso platform is Trimowa UG (haftungsbeschränkt), Ursulinenstraße 35, 66111 Saarbrücken, Germany. Email: hello@travuso.com.
Visiting our website
When you visit travuso.com, our servers automatically process technical data your browser sends, such as your IP address, date and time, the page requested, the referring page and your browser and operating system. We need this to deliver the website securely and to detect misuse. Server logs are deleted after 14 days at the latest. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). To show prices in your currency, our server also looks up the country of your IP address in a database from DB-IP that is stored on our server. Your address is not sent anywhere or kept for this.
Travuso and our clients’ websites are hosted on servers of Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany, in data centres in Germany. Contabo processes data only on our behalf and under a data processing agreement (Art. 28 GDPR). Fonts are served from our own servers, so no data is sent to font providers. Security certificates come from Let’s Encrypt; no visitor data is sent there.
Visitor statistics
To see which pages of travuso.com are read and how visitors find us, we use Umami, which runs on our own server in Germany (analytics.travuso.com). Umami sets no cookies and does not store your IP address. It records the page, the referring website, the browser, the device type and the country, and counts visits with an identifier that is created from a one-way hash and changes every day, so visitors cannot be recognised across days. No data is passed to third parties. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is improving our website.
Demo requests and enquiries
When you book a demo or send us an enquiry, we process the details you enter (such as name, email, phone number, business name, website and message) to answer you and arrange the demo. Legal basis: Art. 6(1)(b) GDPR (steps before a contract) and Art. 6(1)(f) GDPR. We delete requests that do not lead to a contract after 24 months at the latest.
Your Travuso account
When you sign up, we process your business name, email address, password (stored only in encrypted form), chosen plan and design, and the country of your business. We use this data to provide the service, to contact you about your account and to meet legal duties. Legal basis: Art. 6(1)(b) and (c) GDPR. We keep account data for as long as your account exists, and invoices and accounting records for the periods required by German commercial and tax law (up to 10 years).
Emails
We send emails about your account and, on behalf of our clients, to their guests (for example enquiry and booking confirmations, reminders before a trip and review requests) through Resend (USA). Resend receives the recipient’s address, the subject and the content of the email, and sends it from servers in the EU (Ireland). Resend is certified under the EU–US Data Privacy Framework and processes the data on our behalf under a data processing agreement with standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR, and for guests the processing on behalf of our clients described below.
Payments and billing
Subscriptions and Travuso Payments are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe receives the data needed to process payments, such as name, email, billing address and card details; card details never reach our servers. Stripe may also process data in the USA under the EU–US Data Privacy Framework and standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR. See Stripe’s privacy policy.
AI writer and website translation
When you use the AI writer, the notes you type and the name of the tour or destination are sent to Anthropic, PBC (USA), which generates the draft. When a client shows their website in more languages, the texts of the website (tours, pages, menus) are sent to Anthropic for translation. Please do not enter personal data about guests in your notes or website texts. Anthropic processes the text on our behalf and does not use it to train its models. Transfers to the USA are covered by standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR.
Websites of our clients
Our clients run their own travel websites on Travuso. For data that guests enter on those websites, such as enquiries and bookings, the client is the controller and we process the data on their behalf as a processor (Art. 28 GDPR), under our data processing agreement. Each client website has its own privacy policy. Guests should contact the travel company directly about their data. The free addresses of client websites (…mytourdawn.com) use the DNS service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which only resolves the address and does not receive the content of the websites; Cloudflare is certified under the EU–US Data Privacy Framework.
Videos
Help centre videos, where shown, are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com) or from Vimeo. The video provider only receives data once you start a video.
Who receives your data
We share data only with the service providers named in this policy, and only as far as needed. We never sell personal data. Service providers outside the EU are used only with appropriate safeguards under Art. 44 et seq. GDPR.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to data portability (Art. 20) and to object to processing based on our legitimate interests (Art. 21). Where you gave consent, you can withdraw it at any time for the future.
To use your rights, email hello@travuso.com. You also have the right to complain to a data protection authority, for example the authority responsible for us: Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.
Security
All connections to Travuso are encrypted (HTTPS). Passwords are stored only as secure hashes, and access to client data is limited to the people who need it.
Changes
We update this policy when our services change. The current version is always on this page. See also our imprint and terms of service.