Free for Limited Time: 24/7 AI Travel Concierge — Call (281) 767-9312 for hotels, restaurants, and things to do worldwide.
Sunny's Travel Co.Sign in

Privacy Notice

Last updated: June 20, 2026

1. Who we are

This Privacy Notice describes how Sunny Commerce LLC, a Texas limited liability company with its principal place of business at 2368A Rice Blvd. #435, Houston, TX 77005, USA ("Sunny's", "we", "us"), trading as "Sunny's Travel Co.", collects, uses, shares, and protects your personal data when you use our website, applications, AI planning tools, and related services (the "Service"). Sunny Commerce LLC is the data controller of personal data processed in connection with the Service.

2. Personal data we collect

  • Account data: name, email address, password (hashed), profile photo, account preferences.
  • Trip and itinerary data: destinations, dates, travelers, budget, vibes, prompts, and AI-generated itineraries you create or save.
  • Advisor / business data: agency name, branding assets, client briefs, and other content you upload.
  • Communications: support requests, demo requests, and emails you send us.
  • Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, features used, and timestamps.
  • Cookies and similar technologies: see "Cookies" below.

Payment card details are collected and processed directly by our payment processor, Stripe (see "How we share data"). We do not store full card numbers.

3. How we use personal data

  • provide, operate, and maintain the Service (contract performance);
  • generate AI itineraries, proposals, and other outputs you request (contract performance);
  • process subscriptions, billing, and customer support (contract performance);
  • secure the Service, prevent fraud and abuse (legitimate interests);
  • improve and develop new features, including aggregated/de-identified analytics (legitimate interests);
  • send service-related communications and, where permitted, marketing (legitimate interests or consent);
  • comply with legal and regulatory obligations (legal obligation).

4. How we share data

We share personal data with:

  • Service providers / subprocessors who help us run the Service — including cloud hosting, database, authentication, analytics, customer support, and AI model providers — under contracts that restrict their use of your data.
  • Stripe, Inc., our payment processor, which processes payments, manages subscriptions, handles tax calculation and invoicing, and supports refund processing.
  • Professional advisers (legal, accounting, insurance) where reasonably necessary.
  • Authorities when required by law, legal process, or to protect rights, safety, or property.
  • Successors in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality.

We do not sell your personal data.

5. International transfers

We are based in the United States and our service providers may process data in countries outside your home country. Where personal data is transferred from the UK/EEA to the United States or other jurisdictions, we rely on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy decisions.

6. Data retention

We keep personal data only as long as needed for the purposes described in this Notice or as required by law (for example, tax and accounting records). Account and trip data is retained while your account is active and for a reasonable period after deletion to allow recovery, resolve disputes, and comply with legal obligations, after which it is deleted or anonymized.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. Residents of the UK/EEA have rights under the UK GDPR and GDPR (including the right to lodge a complaint with a supervisory authority); residents of California, Texas, and other US states with comprehensive privacy laws have rights under those laws. To exercise any of these rights, email hello@sunnys.co. We respond within the timeframe required by applicable law (typically within 30 days).

8. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and least-privilege administrative access. No system is perfectly secure; please use a strong password and notify us of any suspected unauthorized access.

9. Cookies

We use strictly necessary cookies to operate the Service (e.g., to keep you signed in) and may use analytics cookies to understand usage. You can manage cookies through your browser settings; blocking strictly necessary cookies may affect functionality.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this Notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

12. Contact

Sunny Commerce LLC, 2368A Rice Blvd. #435, Houston, TX 77005, USA. Email: hello@sunnys.co.