Free for Limited Time: 24/7 AI Travel Concierge — Call (281) 767-9312 for hotels, restaurants, and things to do worldwide.
Sunny's Travel Co.Sign in

Trust & Security

This page is maintained by Sunny Commerce LLC ("Sunny's") to answer common security and privacy questions about Sunny's Travel Co. It describes controls we currently have in place and is not an independent certification or audit report.

Account access & authentication

  • Sign-in is handled through our managed authentication provider using email & password and Google sign-in.
  • Passwords are never stored in plaintext; they are managed and verified by our authentication provider.
  • Sessions use short-lived tokens that refresh automatically and can be revoked by signing out.

Payments

  • All card payments are processed by Stripe. Sunny's never sees or stores your full card number.
  • Subscriptions, renewals, and refunds are managed through Stripe's billing system.
  • The 5% Sunny's-funded UNICEF contribution on every Premium payment is tracked automatically per invoice — see our Impact page.

Data protection

  • Your account data, trips, and itineraries are isolated per user through database row-level security policies.
  • Traffic to Sunny's is served over HTTPS/TLS.
  • Production secrets (API keys, service credentials) are kept server-side and are not exposed to the browser.

Subprocessors & integrations

We rely on a small set of vetted providers to run the Service, including our hosting platform, managed database and authentication provider, and Stripe for payments. See our Privacy Notice for the full list of categories of data shared with each.

Data retention & your rights

You can request access, correction, or deletion of your personal data at any time. Details and contact information are in our Privacy Notice.

Reporting a security issue

If you believe you have found a security vulnerability or are concerned about suspicious activity on your account, please email hello@sunnys.co with details. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and respond.

Shared responsibility

Security is a shared responsibility. Sunny's secures the platform and your data within it; you are responsible for protecting your account credentials, using a strong unique password, and keeping the email address on your account up to date.