1. Scope and privacy contact
This Privacy Policy explains how TisVisitor (“we,” “us” or “our”) collects, uses, discloses, retains and protects personal information when you use TisVisitor. It covers website visitors, users of Free and Premium visit tools, purchasers, newsletter subscribers and support contacts.
Privacy contact: TisVisitor Privacy Team, requests@tisvisitor.com. Effective date: October 10, 2026.
2. Privacy principles
We aim to collect only the information needed for a clear purpose, explain how it is used, protect it appropriately, limit how long we keep it and give you practical choices. No public account is required for visit preparation. Privacy practices and legal rights depend on your location and the features you use.
3. Information you provide
Depending on your choices, we may collect:
- Destination searches and the place you select.
- Visit purpose, companions or group composition, transport mode, accessibility or assistance preferences and planned visit date and time.
- Optional free-text notes.
- Your email address, if you ask us to email a Playbook, make a purchase or subscribe to updates.
- Purchase references and entitlement details.
- Support requests, Playbook feedback and newsletter preferences with consent records.
Sensitive information
We do not need medical records, diagnoses, passport numbers or full card numbers for ordinary visit preparation. Please avoid submitting unnecessary sensitive information about yourself or others.
4. Information collected automatically
When you use the website, our hosting and security systems process your IP address, browser and device type, approximate network location, request timestamps, pages requested, technical errors and security events. We use this to deliver pages, prevent abuse and fix problems.
We do not currently use third-party analytics or advertising trackers. We do not collect precise device location unless you choose to share it for a feature that asks for your permission.
5. Location and map searches
Destination search sends the text you type, and an approximate area if you choose to share your location, to Geoapify, our mapping and geocoding provider. If you choose to use your device location, your browser asks for permission first; it is always optional. Searching for a place is not proof that you visited it.
6. How we use information
We use personal information to search and identify destinations; generate and deliver Free Briefs and Premium Playbooks; personalize guidance; assess source reliability; process payments and track visit credits; protect access to purchased Playbooks; provide support; prevent fraud and abuse; maintain performance and security; meet legal, tax and accounting duties; and, with your consent, send optional updates.
We do not use your visit preferences to make decisions about eligibility for healthcare, admission, benefits, insurance or employment.
7. AI processing and model providers
TisVisitor uses artificial intelligence (AI) models and supporting technology services to generate personalized visitor guidance. Relevant information about a selected destination and the details you choose to provide may be processed to generate your Visit Brief or Premium Playbook. We aim to limit the information shared with AI service providers to what is reasonably necessary to deliver the requested service. Please avoid submitting unnecessary sensitive personal information.
Ask TisVisitor, our destination assistant, processes the question you type, the selected destination, recent messages in the same conversation and, if you allow it, your current visit details, together with public pages from the destination’s official website or its official parent organization. These messages are sent to our AI processing service provider to generate each answer, so they do leave your browser; please do not include health details, ID numbers or other sensitive information. To find official websites, we look up the destination’s public details (not your messages) in open data sources such as OpenStreetMap and Wikidata. We do not send your email address or payment details to the assistant. Conversation text is kept only in your browser for the current session and is not stored on our servers; we keep a short-lived question counter linked to a scrambled network identifier to limit usage, and cached copies of public destination pages for up to 7 days. If you use My Arrival Passport with a Premium Playbook, we store your checklist ticks and any tasks you add, linked only to that visit's private link.
AI output can contain errors and should be verified for important decisions.
8. Payments and purchase records
Payments are handled by Stripe. We receive transaction identifiers, payment status, amount, currency, billing country, the email entered at checkout, limited payment-method details and refund or chargeback status. Full card details are handled by Stripe and are not stored by TisVisitor. Payment and tax records are kept as required by law. Stripe’s own privacy policy applies to its processing.
9. Email, verification and marketing
TisVisitor uses email delivery services to send requested Visit Briefs, Premium Playbooks, purchase confirmations, verification messages and important service communications, from the tisvisitor.com domain.
Newsletter and product-update emails are separate marketing messages. They are only sent after you tick an unticked consent box and confirm from the email we send. We record the consent wording, version, time and source; every update includes an unsubscribe link; and after you unsubscribe we keep a minimal record so you are not added again by mistake. Unsubscribing does not stop emails about your Playbooks or purchases. We do not require you to subscribe to marketing emails to use TisVisitor or purchase a Premium Playbook.
10. Cookies and similar technologies
We use only the storage needed for the Service to work:
- Language preference: stored in your browser so pages stay in English or French. Kept until you clear it.
- Planner and checklist progress: kept in your browser session so your answers are not lost while planning.
- Payment security: when you open checkout, Stripe loads its own scripts and cookies to process the payment and prevent fraud.
- Operator sign-in: only TisVisitor staff signing into the administration area store a sign-in session.
Optional technologies
We do not currently use analytics, personalization or advertising cookies. If we add any, we will list them here first and, where required, keep them switched off until you consent, with a way to change your choice later.
11. Sharing and service providers
TisVisitor works with trusted technology providers to operate and improve the service. These may include payment processing (Stripe), cloud hosting and storage, destination search and mapping (Geoapify), AI processing, email delivery and security services. We share personal information with service providers only as reasonably necessary to deliver the relevant service, maintain security, meet legal obligations or support authorized operations.
We may also disclose information when required by law, to protect rights and security, or in a legitimate business transaction subject to legal safeguards. We do not sell personal information.
12. International processing and transfers
Some providers may process or store information outside Canada, including in the United States. Where this occurs, information may be subject to the laws of the countries in which it is processed. We use appropriate contractual, technical and organizational safeguards to protect personal information.
13. How long we keep information
We keep information only as long as reasonably necessary for the purpose collected, purchase entitlements, legal obligations, security and dispute resolution. We generally apply the following retention practices:
- Destination searches and temporary visit information: retained only as needed to generate guidance, operate the service, maintain security or resolve technical issues, then deleted or anonymized.
- Visit Briefs and Premium Playbooks: retained as needed to deliver the requested guidance and provide access to purchased content.
- Purchase and payment records: retained for the period required by applicable tax, accounting and other legal obligations.
- Newsletter information: retained while you remain subscribed, with necessary consent and unsubscribe records kept where required for compliance.
- Support and privacy requests: retained as reasonably necessary to resolve the request, keep appropriate records and meet legal obligations.
- Technical and security information: retained for limited periods appropriate to security, troubleshooting and service operations.
Deletion limits
Deletion from active systems may happen before protected backups expire. We cannot promise immediate deletion of records we must keep by law or to honour a purchase.
14. Security
We use reasonable administrative, technical and organizational safeguards, including access controls, encryption in transit, restricted service credentials, rate limits, hashed access tokens and server-side permission checks. No internet service is completely secure. If we become aware of a security incident, we will assess it and notify affected people and regulators where required by law.
15. Your choices and privacy rights
Depending on applicable law, you may request access to, correction of or deletion of your personal information; withdraw consent for optional processing; unsubscribe from marketing; ask how your data is used or disclosed; and raise a privacy complaint. Withdrawing consent may limit optional features and does not affect earlier lawful processing or legally required retention.
To exercise your privacy rights, including requesting access to, correction of or deletion of your personal information where applicable, contact TisVisitor at requests@tisvisitor.com. We verify your identity before disclosing or changing data, never reveal another visitor’s information, and respond within applicable legal timeframes. Requests are handled by a person; there is no automatic deletion tool.
16. Quebec, EU and UK rights
Quebec residents may have additional rights under Quebec privacy legislation, including rights concerning automated decisions, data portability where in force, confidentiality incidents and cross-border processing. If EU or UK privacy laws apply to a particular processing activity, additional disclosures may be needed, including lawful bases, representative details, transfer mechanisms and rights to object, restrict processing and complain to a supervisory authority. These rights are being confirmed with counsel before launch in those markets.
17. Children and sensitive information
TisVisitor is not designed to knowingly collect personal information directly from children below the age at which they can consent under applicable law. Adults may include limited companion details, such as the number and age range of children, to plan a visit, but should avoid entering children’s names, diagnoses or other sensitive identifiers. If we learn we have collected information contrary to children’s privacy requirements, we will remove it or obtain valid authorization.
18. Third-party sites and official sources
The Service links to destination websites and other external resources. Those third parties set their own privacy practices. Please review their notices before giving them personal information.
19. Automated recommendations and profiling
TisVisitor uses the visit preferences you choose to produce automated recommendations, checklists and readiness guidance. These are planning aids and are not used to make legally or similarly significant decisions about you. Where law requires additional notice or rights for automated decisions, we will provide them.
20. Changes to this Privacy Policy
We may update this Policy as the Service or legal requirements change. We will post a revised effective date and give additional notice or seek consent where required for material changes. Previous versions are kept for accountability.
21. Contact and complaints
Privacy contact: TisVisitor Privacy Team. Email: requests@tisvisitor.com. Operator: TisVisitor. Effective date: October 10, 2026. You may also contact the Office of the Privacy Commissioner of Canada or another applicable privacy regulator if you believe your privacy rights have been infringed. We welcome the opportunity to address concerns directly first.