Privacy policy

The data controller is SORATRAVE, Cocody Angré, CHU – Djorobité, Abidjan, Côte d’Ivoire (RCCM CI-ABJ-03-2026-B13-12980).

For any question about your data, contact us via contact@soratrave.com.

• Account: last name, first name, email, phone, encrypted password, preferred language and currency.
• Booking: travellers (last name, first name, date of birth, nationality), dates, preferences and, for international flights, passport number and expiry date required by airlines.
• Payment: amount, currency, status and transaction reference. Card and Mobile Money account numbers are entered with Stripe or Flutterwave; we do not receive them.
• Messages: messages to customer service, partners and the Sora AI assistant.
• Partners: identity of the person in charge, supporting documents and property information.
• Browsing: IP address, device type, pages viewed, technical errors, and audience measurement if you accept it.

• To carry out your booking and pass it on to the provider (performance of the contract).
• To collect payments and prevent fraud and abuse, for example by limiting the number of messages sent to Sora AI (legitimate interest).
• To send you confirmations, tickets, receipts and useful travel information (performance of the contract).
• To suggest services related to your trip after a booking; you can opt out at any time from each email (legitimate interest).
• To send you our newsletter, only if you asked for it (consent).
• To meet our accounting, tax and legal obligations (legal obligation).
• To improve the site through audience measurement, only if you accept it in the cookie banner (consent).

Your data is never sold. It is passed on only to the recipients who need it:

• the providers of your trip: airlines and their distributor (Travelopro), hotels, owners, bus companies, rental companies, restaurants, eSIM provider (eSIM Go);
• payment services: Stripe and Flutterwave;
• our technical processors: hosting (Vercel), database (Supabase), image and document storage (Cloudinary), email sending (Resend), error tracking (Sentry), abuse limiting (Upstash), audience measurement (Microsoft Clarity, with your consent);
• Anthropic, which provides the artificial intelligence model behind Sora AI: messages sent to Sora AI are passed to it to generate answers;
• the authorities, when required by law.

Several of these providers are located outside Côte d’Ivoire, notably in the European Union and the United States. These transfers are necessary to carry out your booking or to run the service; they are governed in accordance with Law No. 2013-450 and ARTCI authorisations.

• Account: while it is active, then 3 years after the last activity.
• Bookings and invoices: 10 years, for accounting and tax obligations.
• Passport data: until the end of the trip, then deleted unless the law requires otherwise.
• Partners’ supporting documents: for the duration of the business relationship, then 5 years.
• Conversations with Sora AI and customer service: 1 year.
• Audience measurement: 13 months at most.

You have the right to access, rectify, object to and delete your data, under the conditions set by Law No. 2013-450.

To exercise them, contact us via contact@soratrave.com stating your request. We may ask you to prove your identity. We reply within one month.

If you believe your rights are not respected, you may contact the Telecommunications/ICT Regulatory Authority of Côte d’Ivoire (ARTCI).

The site uses cookies that are essential for it to work (session, language, currency, security). Audience measurement cookies are only set with your consent, which you can withdraw at any time from the cookie banner.

Exchanges are encrypted (HTTPS), passwords are never stored in plain text and access to data is limited to the people who need it. As no measure is infallible, we will inform you of any breach likely to harm you.

The service is for adults only. A child traveller’s data is entered by the adult making the booking, under their responsibility.