Privacy Policy

1. Who we are

The data controller is AskSantorini.ai / Noustelos Studio, an independent AI travel concierge for visitors to Santorini.

For any privacy request, you can contact us at info@asksantorini.ai.

2. What data we collect

We keep data collection to the minimum needed to run the service:

• Email address — collected only when you request a discount code, so we can deliver it to you.
• Chat messages — the questions you type into the AI chat, used to generate a reply and to improve AI response quality.
• Usage analytics — how the site is used, collected only if you choose "Accept all" (see sections 6–7).
• Basic technical data — such as IP address, user-agent and timestamp, handled by our hosting and security providers for reliability and abuse prevention.

Please do not submit sensitive personal data, payment card details, passport or health information through the AI chat.

3. How we use your data

• Email: used only to deliver your discount code and its activation link. The activation link is one-time use.
• Chat messages: used to generate AI responses to your questions. They are stored only if you accept analytics (see section 7).
• Analytics: collected only if you choose "Accept all," and used to understand overall usage and improve the service.

4. What we do not do

• We do not sell your data.
• We do not use your email for marketing.
• We do not share your data with third parties — except the affiliate you selected, and only to process the discount you requested.

5. AI chat and automated responses

When you send a message to the chat, it is sent from the website to a Cloudflare Worker and processed through Google Gemini technology in order to generate a reply.

AI-generated answers may be incomplete, inaccurate or outdated. Please verify current details such as schedules, prices, availability, weather, bookings and transport directly with the relevant provider or official source.

AskSantorini.ai is an independent visitor guide and is not an official tourism authority.

6. Cookies and local storage

We use your browser's local storage — not advertising cookies — for: your language preference; your cookie/consent choice; interface preferences; and a session identifier that keeps your chat conversation coherent during your visit. This identifier is included in analytics records only if you choose "Accept all."

We do not use advertising or profiling cookies, and we do not share your data with advertisers.

Analytics are off by default. We collect the analytics described above only after you select "Accept all." If you select "Necessary only" — or make no choice — no analytics data leaves your browser.

7. Data retention and deletion

• Booking data: when you reserve a discount, we store your email and booking details to manage and honor the reservation. We keep these records until you ask us to delete them.
• Chat messages: your messages are always processed momentarily to generate a reply. They are stored only if you accept analytics — in which case your messages and the assistant's responses are saved to our analytics records to help us improve the service, and are automatically deleted after 90 days. If you choose "Necessary only," your chat is not stored. Please avoid entering sensitive personal information into the chat.
• Technical logs: short-lived logs (e.g., rate-limiting, security) are kept briefly by our hosting and security providers and are not used to identify you.

To request access, correction, or deletion of your data, email info@asksantorini.ai. We will action your request and confirm once done.

8. Your rights

Under the GDPR, you may have the following rights, where applicable:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to object
• right to data portability
• right to withdraw consent where processing is based on consent

You can exercise your rights by contacting info@asksantorini.ai.

9. Supervisory authority

If you believe the processing of your personal data violates applicable law, you have the right to lodge a complaint with the Hellenic Data Protection Authority:

www.dpa.gr

10. Changes to this policy

This Privacy Policy may be updated periodically. The latest version is always available at this page.

Questions? Contact info@asksantorini.ai.