Privacy Policy

Effective date: 01 July 2026

This Privacy Policy explains how Beeline Technologies Ltd ("Beeline", "we", "us") collects, uses, stores, and shares personal data when you use the Beeline connector and the Beeline travel-booking service. It applies to your use of Beeline through AI assistants and through onbeeline.com.

Note on AI assistants: When you use Beeline through a third-party AI assistant, your conversational inputs to that assistant are first governed by the assistant's own privacy policy. This policy covers the data the assistant passes to Beeline and how we handle it.

1. Who we are

Beeline Technologies Ltd, 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom. For the purposes of applicable data protection laws, Beeline Technologies Ltd is the data controller. For any privacy questions or to exercise your rights, contact us at privacy@onbeeline.com.

2. Data we collect

We collect the following categories of personal data:

• Account data: the information used to create and sign in to your Beeline account, such as your name and email address.
• Traveller and guest details: the personal details you provide to make a booking, such as the names, dates of birth, and contact details of the lead guest or passengers.
• Booking data: the searches you run and the bookings you make, including travel dates, destinations, room or fare choices, extras (such as bags and seats), prices, and booking status and references.
• Payment-related data: limited information needed to process and confirm payment. Card details are entered on a secure checkout page operated by our payment processor and are not collected or stored by Beeline directly.
• Travel-preference data: if you opt in, a short summary of your travel preferences derived from your conversations (see section 3).
• Technical data: basic information generated when you use the service, such as authentication tokens and logs needed to operate and secure it.

Except where you opt in to preference learning (section 3), we do not access your conversation history, the AI assistant's memory, or your files.

3. Learning your travel preferences (optional)

With your consent, Beeline can learn from the conversations in which you use it, not just the searches you run, but the surrounding context, so we can understand your travel preferences and give you better, more relevant results.

If you opt in, we generate a short summary of your travel preferences (for example, that you tend to prefer boutique hotels, aisle seats, or quieter destinations). We derive this summary from the conversation; we do not store the raw conversation text. We use that summary to personalise your own results, and in aggregated or anonymised form to improve how Beeline works for everyone.

This feature is optional and off by default. You can turn it on or off at any time in your settings, and Beeline works fully without it. Turning it off stops further preference learning; to delete preferences already held, contact privacy@onbeeline.com. Because a conversation may mention other people, we keep only travel-preference information and discard incidental details about others. Our legal basis for this feature is your consent.

4. How we use your data and our legal bases

We process your personal data for the following purposes and rely on the legal bases identified below:

5. Payment and how your data is stored

Beeline is the merchant of record for your booking. You pay Beeline, and we arrange your stay or flight with the relevant hotel or airline. Payment is never taken inside the AI conversation. When you are ready to pay, Beeline provides a secure link to a checkout page operated by our payment processor; you complete payment there, outside the assistant. Your card details are entered and handled only on that page, are not visible to the AI assistant, and are not collected or stored by Beeline; we do not pass your card details to hotels, airlines, or any travel supplier.

Your data is stored on secure infrastructure operated by us and our infrastructure providers. We apply technical and organisational measures designed to protect it against unauthorised access, loss, or misuse. Access to authentication is handled through a secure sign-in (OAuth) flow.

6. Third-party sharing

We share personal data only as needed to provide the service, with the following categories of recipients:

• Airlines and hotels (and equivalent travel providers): the travel details required to make and manage the specific booking you request. Bookings cannot be completed without sharing the relevant traveller details with the provider fulfilling them.
• Payment processor: our payment processor processes your payment on a secure checkout page.
• Infrastructure and service providers: providers that host and support our systems, acting on our behalf under appropriate data-protection terms.

We do not sell your personal data. We may also disclose data where required by law or to protect our legal rights.

7. Data retention

We retain your personal data in accordance with applicable law, for as long as it is needed to fulfil the purposes set out in this policy, unless a longer period is required or permitted by law. When we no longer need it, we delete or anonymise it.

The criteria we use to determine how long we keep your data include: the duration of our relationship with you, including whether you have an open account or recent bookings; whether we have a legal obligation to retain it, such as tax and accounting rules that require us to keep financial and transaction records; and whether we need it to establish, exercise, or defend legal claims.

Any travel-preference summary is deleted when you turn the feature off and ask us to delete it, or when you delete your account.

We may keep residual copies in secure backups for a limited period. These are inaccessible in normal use and are deleted or overwritten in the ordinary course; any unnecessary data is removed if a backup is restored.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent where processing relies on it. To exercise any of these, contact privacy@onbeeline.com.

You also have the right to complain to your local data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). If you are in the EU, you may lodge a complaint with your national data protection authority.

9. International transfers

Where we transfer personal data across borders, we put in place appropriate safeguards consistent with applicable data-protection law, such as the UK and EU standard contractual clauses.

10. Children

Beeline is not directed at children under 16. We do not knowingly collect data from children except where their details are provided by an adult as part of a travel booking. If you believe a child has provided us data otherwise, contact us and we will address it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you.

12. Contact and governing law

For privacy questions, contact privacy@onbeeline.com. This policy is governed by the laws of England and Wales.