Privacy Policy

Form data: your name, email or WhatsApp number, travel dates or month, group size and the text of your request or comment.

AI planner requests: what you type, your change requests and the resulting itinerary.

Source tags (for example, which ad or link brought you) — so we know which channels work.

Anonymous visit statistics: which pages are opened, from which country and on which device. They are collected without cookies and cannot identify you.

The site uses the Meta Pixel (Facebook, Instagram). It stores a cookie in your browser and tells Meta that you opened a page or sent a request. This shows us which ads work and lets us show them to people who may be interested. The contents of forms (name, contact, request text) are not sent to Meta. You can opt out in the Facebook and Instagram ad settings or by blocking third-party cookies in your browser.

The Google Ads tag works the same way: it stores a cookie and tells Google about page views and a sent request, without form contents. You can opt out in your Google account ad settings (adssettings.google.com).

These services are switched on only after you agree: a banner is shown on your first visit, and you can change your choice at any time with the "Cookie settings" link at the bottom of the page. If you choose "Necessary only", the Meta Pixel and the Google tag are not loaded.

Please don't include passport, payment or medical details in your requests — we don't need them to plan a trip.

To build and confirm your trip, contact you and send you an offer.

To share with providers (guide, expedition operator, airline, hotel) only what the booking needs: name, contact, dates, group and wishes.

To improve the service: understand which trips people look for and what works on the site.

We never sell your data or use it for third-party advertising. We only send newsletters with your consent.

By submitting a form or an AI planner request you consent to the processing of this data for these purposes. You can withdraw consent at any time by writing to hello@karavanta.com.

Requests, provider applications, AI planner requests and plans are stored in a database on a server located in the Republic of Kazakhstan. Backups are kept there too, encrypted.

Only what is described below leaves Kazakhstan: the text of an AI planner request, and the data of advertising, statistics and email services.

Karavanta's own server in Kazakhstan — stores requests, provider applications, and AI planner requests and plans.

Supabase — the catalogue of tours and providers, servers in the EU (Frankfurt). It holds no customer personal data.

Vercel — website hosting and anonymous visit statistics.

Meta Platforms (Facebook, Instagram) — a pixel that measures our advertising.

Google — the Google Ads tag that measures our advertising.

Anthropic — the Claude model that builds itineraries in the AI planner. It receives only the request text and the tour catalogue, not your contact details. This is processing outside Kazakhstan (in the US): by sending a request to the AI planner you consent to it.

Telegram — short notifications to our team about a new request (number, tour, language), without your name or contacts.

Cloudflare and Google — our domain and the hello@karavanta.com mailbox.

Voice input: if you press “Dictate”, your browser (a Google or Apple service) turns speech into text. The recording never reaches us and is not stored by us; we receive only the text in the field.

The other companies listed (advertising, statistics, hosting, email, AI) may process data outside Kazakhstan, including in the EU and the US, and are bound to protect it under their data processing terms.

Every AI planner itinerary has its own link. Anyone with the link can see the trip plan, but not your name, contacts or the original request text. These pages are hidden from search engines. Write to us if you want a plan deleted.

Requests and correspondence — up to 3 years after your last contact, to help with repeat trips and meet our obligations to providers.

AI planner requests and plans — up to 2 years.

On request we delete data sooner, unless the law or an existing booking requires us to keep it.

You can ask what data we hold about you, correct it, delete it or withdraw consent. Write to hello@karavanta.com — we reply within 30 days.

The site runs over a secure connection (HTTPS) only. Only the Karavanta team can access requests: sign-in is protected by a password and a one-time code, and visitors cannot read other people's data.

The service is intended for adults. Trips with children are booked by parents or legal guardians.

We may update this policy. The current version is always on this page, with its date at the top.