Privacy policy

Who we are

Louii is a travel-operations board for agencies. When your agency uses Louii, your agency is the data controller for traveller records and Louii is the data processor acting on your instructions.

What we store

• Account data: your name, email, agency name, role and billing country.
• Traveller records: client name, trip title, itinerary, flight numbers and destinations.
• Duty-of-care data you choose to enter: nationality, passport number and expiry, next-of-kin contact details, visa notes and incident notes. This is sensitive personal data — only enter what your agency genuinely needs, and only with a lawful basis.
• Operational logs: flight-status and weather lookups, background job runs and error reports.

Cookies

We set only strictly necessary cookies and local storage: your sign-in session, your chosen interface language and a flag remembering that you dismissed the cookie notice. We do not use advertising or cross-site tracking cookies, and we do not sell data.

Processors we use

• Cloud database, authentication and file storage hosting
• A flight-status data provider for live delays, cancellations and gate changes
• A weather data provider for destination forecasts
• A map tile provider for the board map
• An email delivery provider for digests and disruption alerts

Where data is stored

Traveller data is stored in the European Union. Each agency's records are isolated at the database level: staff can only read rows belonging to their own agency.

Retention

Traveller records stay until your agency deletes them or closes the account. When an account is closed we delete agency data within 30 days, except where we must keep invoices for statutory accounting periods.

Your rights

Travellers may request access, correction, deletion, restriction or a copy of their data. Requests should go to the agency that entered the record; we support agencies in answering them. You can also complain to your national data protection authority.

Security

Access is protected by per-agency row-level security, encrypted transport, and server-side secret handling for third-party API keys. Passport and next-of-kin fields are only visible to signed-in staff of the owning agency.

Contact

Privacy questions: privacy@louii.cloud. For a data processing agreement, write to the same address.