Privacy Policy
Last updated: 2026-02-24
1. Who We Are
Liberation.Services is operated by Liberation.Travel LLC, a company registered in the United States. We provide bank account opening and residency permit services in various countries.
Contact: info@liberation.travel
2. What Data We Collect
We collect the following personal data:
- Account data: name, email address, nickname, preferred language
- Contact data: legal address, delivery address, Signal phone number
- Passport data: full name, passport number, nationality, date of birth, place of birth, issue/expiry dates (extracted from MRZ zone)
- Payment data: transaction references processed by Zaprite (we do not store payment card details)
- Technical data: IP address (for language detection), browser user agent
3. Why We Process Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing our services (bank account opening, residency permits) | Contract performance (Art. 6(1)(b)) |
| Processing passport data for document generation | Explicit consent (Art. 9(2)(a)) — passport data is special category data |
| Payment processing | Contract performance (Art. 6(1)(b)) |
| Sending service notifications (Signal, email) | Legitimate interest (Art. 6(1)(f)) |
| Automatic language detection (GeoIP) | Legitimate interest (Art. 6(1)(f)) |
4. Passport Data — Special Category
Your passport scan is processed locally on our server to extract MRZ (Machine Readable Zone) data. The passport image is NOT stored — it is processed in memory only. Only the extracted text data (name, passport number, dates, etc.) is stored in our encrypted database to generate required legal documents (Power of Attorney).
5. Data Security
All personal data is encrypted at rest using AES-256 (Fernet) encryption. Encryption keys are stored in volatile memory (RAM) only and are never written to disk. The database itself is stored on encrypted storage. All connections use TLS/SSL encryption.
6. International Data Transfers
As a US-based company serving EU customers, your data may be transferred to:
- United States — where our company is registered
- Service provider countries (Georgia, Kyrgyzstan, Paraguay, Uruguay, Panama) — only the data necessary for completing your ordered service
For EU residents, these transfers are conducted with appropriate safeguards including your explicit consent at the time of purchase. You will be asked to consent to these transfers before checkout.
7. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion
- Passport data: retained for the duration of service delivery, then deleted within 90 days of order completion
- Payment records: retained for 7 years (legal/tax obligation)
- Consent logs: retained for 5 years (to demonstrate GDPR compliance)
8. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, contact us at info@liberation.travel. We will respond within 30 days.
9. Cookies
We use only essential cookies required for the website to function (session management, CSRF protection, language preference). We do not use tracking or advertising cookies. See our Cookie Policy for details.
10. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EU residents, this is the data protection authority in your country of residence.