belvi

Privacy Policy

Last updated: August 2026

1. Data controller

Belvi is operated by Issam Messaoudi, rue du Chêne 1, 1000 Brussels, Belgium. We act as the data controller for the personal data you provide when using the app and website.

2. What we collect

  • Account details: name, email, date of birth, nationality.
  • Travel documents: passport number and expiry, emergency contact. Collected only to book your trip and to help you abroad.
  • Payment data: handled by Stripe. We never store full card numbers on our servers.
  • Location: only when you explicitly use "Stamp where I am" in your Travel Passport. Used once to detect your country, never stored as a continuous track.
  • Saved spots and itineraries: the places you save and plans you build are stored in your account.

3. How we use it

To manage your account and wallet, process bookings and payments, send booking confirmations and flash-deal alerts (only if you opt in), and to operate your Travel Passport.

4. Legal basis

We process data on the basis of contract (booking and wallet services), legitimate interest (fraud prevention, service improvement) and consent (marketing alerts, location stamping), which you can withdraw at any time.

5. Data sharing

We share data only with service providers that make the service work: Stripe (payments), Supabase (hosting), Resend (transactional email). We never sell your data.

6. Retention

We keep account data while your account is active. You can request deletion at any time; payment records are kept as required by law.

7. Your rights

Under GDPR you have the right to access, rectify, delete, restrict and port your data, and to object to processing. Contact us at hello@belvi.tours. You may also lodge a complaint with the Belgian DPA (Gegevensbeschermingsautoriteit).