Privacy Policy

Last updated: 30 July 2026

touristinfo.ai is a service of Mediatize SRLS, Via Don Narciso Sordo 30, 39100 Bolzano, Italy (VAT IT03241870215). This Privacy Policy describes what personal data we collect through our website at https://www.touristinfo.ai/ and through the touristinfo.ai platform, and how we use and protect it.

If you have questions about this Privacy Policy or about your personal data, contact us at support@touristinfo.ai.

Who We Are and Our Role

For visitors to our website and for the account data of our customers (for example, users of our dashboard), Mediatize SRLS acts as the data controller.

Our customers (tourism destinations, accommodation providers and other businesses) use touristinfo.ai to operate AI-powered assistants on their own communication channels. When you interact with an assistant operated for one of our customers, that business is the data controller of the conversation, and Mediatize SRLS processes the data as a data processor on that business's behalf and according to its instructions.

In that case, the privacy policy of the business you are interacting with applies in addition to this one. Please refer to it for details about that business's own data practices.

Data We Collect on Our Website

When you use the contact form on our website, we process the details you provide, such as your name, email address and message, in order to respond to your inquiry.

When our customers and their team members use the touristinfo.ai dashboard, we process account data such as name, email address and login information in order to provide and secure the service.

Data Processed Through Our Assistants

Depending on the channels a business has enabled, its assistant can be reached through the website chat widget, WhatsApp, Facebook Messenger, Instagram, Telegram and email. Across these channels we process:

  • The content of the conversation, including the messages you send and the assistant's replies.
  • The channel identifiers needed to deliver messages, such as your phone number (WhatsApp), your messaging account or profile name (Facebook Messenger, Instagram, Telegram) or your email address (email).
  • Contact details you choose to share in a conversation, for example to make a request or to be contacted by the business.
  • Technical metadata such as timestamps, language and message delivery status.

We use this data solely to provide the service: to generate replies, to hand conversations over to the business's staff where requested, and to give the business insight into how its assistant is used. We do not sell this data and we do not use it for advertising.

Messaging Platforms and Meta Platforms Data

For WhatsApp, Facebook Messenger and Instagram we access data through APIs provided by Meta Platforms, such as messages, phone numbers, and the settings and message templates of the connected business account. We use this data only to provide and operate the messaging integration for the respective business, in accordance with Meta's terms and policies, and for no other purpose.

For Telegram we use the Telegram Bot API, and for email we use established email delivery providers, in each case only to receive and send messages on behalf of the respective business.

Service Providers (Subprocessors)

We rely on a small number of service providers to run touristinfo.ai, including cloud hosting and database providers, AI language model providers, authentication and email delivery providers, and the messaging platforms listed above. These providers process data only as needed to deliver their service to us and under data processing agreements.

Our AI language model providers process conversation data only to generate replies for the service and do not use it to train their models. We offer our business customers a data processing agreement covering the processing described in this policy.

International Data Transfers

Some of our service providers are located outside the European Economic Area, in particular in the United States. Where personal data is transferred to such providers, we rely on appropriate safeguards to protect it, such as the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

General Data Protection Regulation (GDPR)

The legal basis of Mediatize SRLS for collecting and using the personal information described in this Privacy Policy depends on the personal information we collect and the specific context in which we collect it:

  • Mediatize SRLS needs to perform a contract with you
  • You have given Mediatize SRLS permission to do so
  • Processing your personal information is in the legitimate interests of Mediatize SRLS
  • Mediatize SRLS needs to comply with the law

Mediatize SRLS will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal information we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information we have on you.
  • The right of rectification.
  • The right to object.
  • The right of restriction.
  • The right to data portability
  • The right to withdraw consent
  • The right to lodge a complaint with a supervisory authority. In Italy, this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Server Logs

Like most online services, we keep server logs. They record technical information about requests to our website and platform, such as the IP address, browser type, and date and time of access. We use this information solely to operate, secure and troubleshoot the service, for example to detect abuse and diagnose errors. Log data is kept for a limited period and is not used to profile visitors.

Cookies

Our website and dashboard use only technically necessary cookies, for example to keep you signed in and to remember your preferences. We do not use advertising cookies. You can control or delete cookies in your browser settings.

Data Deletion

You can request access to your personal data, or ask us to delete it, at any time by writing to support@touristinfo.ai. We will comply with your request unless we are legally required to keep the data.

If your request concerns a conversation with the assistant of one of our customers, you can also contact that business directly. We support our customers in fulfilling such requests.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

touristinfo.ai does not knowingly collect any Personal Identifiable Information from children under the age of 14. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Changes to This Policy

We may update this Privacy Policy from time to time, for example when we add new features or channels. We will publish the updated version on this page and adjust the date shown at the top.