Privacy Policy

This Privacy Policy explains how Butterfly International LLC ("Mapapu", "we", "us") collects, uses, shares and protects personal data when you use the Mapapu website, mobile application, and related services (the "Service"). Mapapu is a service operated by Butterfly International LLC, a company registered in Iowa, United States.

1. Data We Collect

Account information

• Name, email address, password (stored as a hash).
• Optional profile details you provide (photo, preferences).

Traveler and booking information

• Traveler names, dates of birth, gender, nationality, passport or ID document numbers when required by the Supplier or by law.
• Contact details (email, phone) associated with a booking.
• Itinerary details (dates, destinations, product selections).

Payment information

• Card and payment data are collected and processed by our payment provider, Stripe. Mapapu never stores full card numbers on its own servers. We only retain limited transaction metadata (e.g. last 4 digits, brand, transaction ID) required to service your booking.

Technical data

• Device information, IP address, browser type, approximate location derived from IP, and usage logs.
• Cookies and similar technologies used for authentication, session management, and analytics.

2. How We Use Your Data

• Create and manage your account.
• Search for, book, confirm, modify and cancel travel products with Suppliers.
• Process payments and prevent fraud.
• Provide customer support, including responding to your enquiries.
• Send transactional messages (booking confirmations, receipts, changes from Suppliers).
• Improve the Service through analytics and product research (using aggregated or de-identified data where possible).
• Comply with legal obligations and enforce our Terms of Service.

3. Sharing with Suppliers and Processors

Because Mapapu acts as an intermediary, we must share traveler and booking information with the relevant Suppliers (airlines, hotels, tour operators, eSIM providers, insurance providers) strictly to fulfill your booking. Suppliers process this data under their own privacy policies.

We also rely on the following processors:

• Supabase — hosting, authentication and database services.
• Stripe — payment processing.
• Analytics, error monitoring and communication providers acting on our behalf.

We do not sell your personal data. We may disclose personal data when legally required (e.g. valid legal process) or to protect our rights, the safety of our users, or the integrity of the Service.

4. International Data Transfers

Because travel is inherently international, your data may be transferred to and processed in countries other than the one where you reside, including the United States. Where applicable, we rely on appropriate legal mechanisms for such transfers.

5. Data Retention

We retain account and booking data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, tax and dispute-resolution obligations (typically up to 7 years for financial records). Aggregated or de-identified data may be retained for longer.

6. Your Rights

Subject to applicable law, you have the right to access, correct, update, port or delete your personal data, and to object to or restrict certain processing. You may exercise these rights by contacting support@mapapu.com. We may need to verify your identity before responding.

Please note that deletion of certain data (e.g. completed booking records) may be limited by our legal obligations.

7. Security

We implement technical and organizational safeguards designed to protect your data, including encryption in transit, restricted access controls, and use of vetted processors such as Stripe and Supabase. No system is 100% secure; you are responsible for keeping your account credentials confidential.

8. Children

The Service is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us so we can delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.

10. Contact

For privacy-related requests or questions, contact us at support@mapapu.com.