Privacy Policy

Who we are

MEMORIES is a brand of Memoria Journeys Establishment (مؤسسة ميموريا جورنيس), a sole proprietorship registered in the Kingdom of Saudi Arabia under Unified National Number 7055186188. This notice explains how we ("MEMORIES", "we", "us") handle personal data through memories.tours, our journey-request forms, the AI concierge on the site, email, WhatsApp and related customer-support channels. We are based in Riyadh, Saudi Arabia. Our privacy contact is memoriesksasupport@gmail.com.

Information we collect

• Identity and contact data, such as your name, email address, telephone number, country code and preferred contact channel.
• Journey information, including destination, dates, traveller type and count, budget, transport, accommodation, experiences, study-abroad needs and any notes you choose to provide.
• Information about companions that you provide. You must have permission to share their information, and please avoid passport, health or other sensitive details unless we specifically ask for them through a secure channel.
• Messages you send to the AI concierge on the site, and anything you write on our feedback page. Feedback needs no name or email unless you want a reply.
• Technical data needed to operate and secure the website, such as IP address, browser and device information, server logs and essential local-storage preferences.
• Marketing preference and newsletter email address, only when you separately choose to subscribe.

Why we use your information

We use your journey information to research and write your travel plan, to answer you, to provide customer service, to prevent misuse, to maintain business records and to comply with legal obligations. Sending a request authorizes service communications about that request; it does not subscribe you to marketing.

Where required, we rely on your consent for optional marketing, and you can withdraw it at any time. We do not sell personal data.

How AI is used, and what it sees

Your travel plan is drafted by an AI system before a person on our team reviews it. To do that, the details you gave us in the form, including your name, dates, traveller count, budget and any notes you wrote, are sent to our AI provider, Anthropic, which processes them to generate the draft. Messages you send to the concierge on the site are sent to the same provider to generate its replies.

This is processing on our instructions for the purpose you asked for. Your information is not used by us or by that provider to train AI models. If you would prefer your request not be handled this way, tell us at memoriesksasupport@gmail.com and we will arrange it manually instead.

A plan is never sent to you on the AI’s say-so alone. A person reviews it first, and the plan itself flags what still needs confirming.

Who we share it with

We use a small number of service providers to run the site and produce your plan. Each receives only what it needs, and none of them may use your information for their own purposes.

• Vercel, which hosts the website and serves the pages.
• Supabase, which stores your request and your plan in our database.
• Anthropic, which processes your request to draft your plan and to power the concierge, as described above.
• Resend, which delivers our emails to you.
• Government, immigration, law-enforcement or regulatory bodies when legally required.
• Professional advisers and technology or security providers bound by appropriate duties.
• A successor organization in a lawful merger, acquisition or restructuring, subject to applicable safeguards.

Who we do not share it with

We do not book travel for you, so we do not pass your details to airlines, hotels, drivers, tour operators or activity providers. When you book, you deal with them yourself and give them your own details on their own terms.

We take no payment for travel and hold no card details for it. The only payment we take is our own planning fee.

International transfers

Our hosting, database, email and AI providers may process data outside Saudi Arabia. Where personal data is transferred internationally, we use the mechanisms and safeguards required by applicable Saudi data-protection law and limit the transfer to what is necessary for the stated purpose.

How long we keep it

Requests that do not become a plan are ordinarily kept for up to 24 months after the last meaningful contact, then deleted or anonymized, unless a longer period is needed for a complaint, a legal claim, fraud prevention or the law.

A plan you have paid for is kept so that your plan link keeps working and so we have a record of what we sold you. Payment and tax records are kept for the period the law requires. Marketing contact information is kept until you unsubscribe or ask us to delete it.

Your choices and rights

Subject to applicable law, you may ask to be informed about our processing, access your data, obtain a copy, correct it, request deletion, withdraw consent or object to certain uses. You can unsubscribe using the link in any marketing email or by contacting us. We may verify your identity and may retain limited information where the law requires it. Send requests to memoriesksasupport@gmail.com. You may also raise a complaint with the competent Saudi data-protection authority.

Security and children

We use reasonable technical and organizational measures to protect information, but no online service is completely risk-free. Please do not submit passport scans, payment-card details or medical information in free-text fields. Our service is not directed to children acting independently; a parent or legal guardian must submit and manage requests involving minors.

Changes to this notice

We may update this notice when our services, providers or legal obligations change. The date at the top shows the latest version, and material changes will be highlighted where appropriate.