Privacy Policy
Last updated 31 October 2026
This page explains what we collect, why, how long we keep it, who sees it, and what you can ask us to do about it. There is no small print and no “we reserve the right” clause. If a sentence here is unclear, email us and we will rewrite it until it isn’t.
1. What we collect
1.1 What you give us
- Contact form: first name, last name, email, subject, message.
- Email: the content of messages you send us and any attachments.
- AI adviser: the text of the question you type. If you paste a URL into a question, we record the domain only (e.g. example.com). We do not fetch or store the page.
- Paid services: order details (which service, amount, date) and the transaction reference returned by the payment provider. We never see or store your card number or payment password — payment happens on the provider’s platform, not here.
1.2 What the system records automatically
- Server logs: IP address, browser type, time, requested path. Generated by the hosting provider by default, used for security and fault-finding.
- Anonymous AI memory: described in section 4.2.
This site currently runs no third-party analytics, advertising or profiling tools — no Google Analytics, no Baidu Tongji, no Meta Pixel, no heatmaps. We cannot see which part of a page you clicked or how long you stayed. If that ever changes, this page will be updated and an opt-out published first; nothing will be switched on quietly.
2. Why we process it
| Purpose | Basis | Data involved |
|---|---|---|
| Replying to your enquiry | Your request | Form, email |
| Answering AI adviser questions | Your request | Question text |
| Delivering a service you paid for | Performance of a contract | Order, correspondence |
| Site security and fault-finding | Legitimate interest | Access logs |
| Retaining transaction records | Legal obligation | Order and payment records |
3. What we do not do
- We do not sell, rent or trade your personal information.
- We do not run ad targeting or build profiles.
- We do not add your email to any list unless you tick the subscribe box on the form. That box is empty by default, and every email we send has an unsubscribe link.
- We do not use your questions to train our own models.
- We do not hand your contact details to third parties.
4. How the AI adviser handles your question
This gets its own section because it is the only place on the site where text you type leaves our server.
4.1 Your question goes to a model provider
Questions are sent to the DeepSeek API to generate an answer. DeepSeek is operated by Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd., with servers in mainland China. What is sent is your question plus the passages of our own knowledge base that match it. Your name, email address, IP address and any account details are not sent — we do not include those fields in the request.
4.2 The memory is stored in two pieces
So that a follow-up question can pick up where you left off, two things are kept:
- In your browser: a random ID (in localStorage, not a cookie) and the last eight turns of the conversation. This stays on your device; our server does not have it.
- On our server: an anonymous memory holding your last six questions (truncated to 90 characters each), up to three domains you pasted, and one line of conclusion. It is keyed to that random ID, not to your email, capped at 200 entries, and expires after 45 days.
4.3 How to clear it
Press “Clear” in the AI panel, or clear your browser storage. Once cleared, we have no way to connect that memory back to you.
4.4 What not to type in
ID numbers, card numbers, passwords, admin login details — we never need these and they cannot help us answer your question. If something claiming to be our AI adviser asks for them, it is not our AI adviser.
5. Who sees it
| Recipient | Purpose | Location |
|---|---|---|
| DeepSeek | Generating AI answers | Mainland China |
| Hosting provider | Site and database hosting | Named here at launch |
| Email provider | Sending and receiving enquiries | Named here at launch |
| Payment provider | Processing payments | Mainland China |
The hosting and email providers will be named on this page at launch. We use providers located in the People’s Republic of China, so your data is not transferred abroad by our operation of this site. (If you buy your own domain or hosting, those providers handle your data under their own policies — that is separate from us.)
6. How long we keep it
| Data | Retention |
|---|---|
| Form submissions and emails | 24 months |
| Anonymous AI memory | 45 days |
| Server access logs | Up to 30 days |
| Orders and transaction records | As long as the law requires (usually 5 years) |
After that we delete or anonymise it. We do not keep it indefinitely “just in case”.
7. Cookies and local storage
No advertising or analytics cookies are used. What the site does use:
- Essential cookies: WordPress uses these to keep you signed in, validate form submissions and remember the result of a submission.
- Consent record: remembers whether you chose “Accept all” or “Essential only”, so you are not asked every visit.
- Local storage: the AI adviser’s random ID and conversation history (see 4.2). This is not a cookie and is never transmitted to us.
You can choose “Essential only” in the banner, or clear all cookies in your browser. The site and all the guides keep working either way.
8. Your rights
For anything we hold on our servers that can be traced to you, you may:
- Ask what we hold.
- Ask us to correct it.
- Ask us to delete it — including form records and anything in the anonymous AI memory that can be traced back to you.
- Withdraw consent — this does not affect processing that already happened.
- Unsubscribe — the link is at the bottom of every email.
Email support@voyagecited.com and say what you need. We reply and act within 15 working days. Exercising these rights is free.
9. Children
This site is for adults and does not knowingly collect information from anyone under 16. If you are a parent or guardian and believe a child has submitted information, contact us and we will delete it.
10. Security
The whole site runs over HTTPS. Database access is limited to the operator, and two-factor authentication is enabled on the admin account. No system is perfectly secure: if a breach occurs that could affect your rights, we will notify affected people within 72 hours of discovery, via a notice on the site and by email, and explain what was exposed and what you can do.
11. Changes to this policy
Any change updates the date at the top. Changes that materially affect your rights will be flagged prominently on the site for at least 14 days — not slipped in silently. Services already paid for are governed by the version in force at the time of payment.
12. Contact
Questions, requests or complaints about privacy: support@voyagecited.com. One business day.