Privacy Notice
Last updated: 22 June 2026
Who we are
Twovel is a service of VintageLabs B.V.
Beemsterstraat 581, 1024 BE Amsterdam, Netherlands
Contact: hello@twovel.com
VintageLabs B.V. is the data controller for any personal data processed through Twovel.
What Twovel does
Twovel is an AI-powered service that gives you recommendations for things to do during your hotel stay, via WhatsApp. You scan a QR code at the hotel, send us a message, and we respond with suggestions tailored to where you are and what you're looking for.
What data we collect
When you chat with Twovel, we receive:
- Your WhatsApp phone number
- The content of your messages
- The hotel you're staying at (from the QR code you scanned)
- The context you share with us (where you are in the city, time available, preferences, group type)
We don't ask for and don't store: your name, payment details, ID documents, precise location, or anything else not listed above.
Why we process this data
We process your messages for one purpose: to give you recommendations during your stay. This is the service you requested when you started the chat. The legal basis is performance of a contract (Article 6(1)(b) GDPR) — processing your messages is necessary to deliver the service you asked for.
We also review anonymised conversation data to improve our recommendations and service quality over time. The legal basis for this is our legitimate interest (Article 6(1)(f) GDPR) in improving the service. You can object to this at any time by contacting us.
We do not use your conversations to train AI models.
Who has access to your data
Your data is processed by VintageLabs B.V. and by service providers acting on our behalf:
- WATI — WhatsApp Business infrastructure
- Supabase — database (data hosted in the EU)
- Anthropic — AI processing for generating recommendations. Data is transferred to the United States under Standard Contractual Clauses. Under Anthropic's commercial API terms, Anthropic does not use your data to train its models.
We do not sell your data. We do not share it with hotels, advertisers, or any third party beyond the processors listed above.
How long we keep your data
- Your phone number is replaced with an anonymised identifier within 15 days of your last interaction with Twovel.
- The content of your messages is deleted after 180 days.
- Anonymised, aggregated data (which recommendations worked, what guests are looking for, patterns over time) is kept indefinitely to help improve the service. This data cannot be linked back to you.
Your rights
Under GDPR, you have the right to access, correct, delete, or export your data, and to object to how we use it.
Your phone number is retained for up to 15 days after your last interaction, then permanently replaced with an anonymised identifier. After that, your conversation data is no longer linked to you in any way. Message content is deleted after 180 days.
If you'd like to make a request within 15 days of chatting, email hello@twovel.com. We will respond within 30 days.
You can also lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.
Changes to this notice
If we update this notice, we will change the date at the top.
Questions
Email hello@twovel.com.