Privacy Policy
Last updated: July 30, 2026. Effective immediately.
1. Information We Collect
We collect information to provide a better, more personalized travel planning experience. This includes:
- Account Information: When you register locally or via Google, we collect your email address, username, profile name, and system preferences.
- Travel & Itinerary Data: We store your custom trip parameters, including flight paths, accommodation locations, budgets, lists of attendees, and expense splits.
- Usage & Diagnostics: We record successful and failed login attempts (including IP address and user-agent details), system exceptions, and AI prompt counts for security auditing and load monitoring.
2. How We Use Your Information
Your data is strictly utilized to operate the travel planner environment, specifically:
- Generating custom trip itineraries using natural language AI services.
- Finding Ticketmaster events around destinations and dates you ask us to search.
- Distributing transactional notifications and itinerary shares.
- Auditing system security to defend against brute-force attacks and abuse.
3. Cookie Usage & Consent
We use cookies and equivalent browser storage technologies. Cookies are essential for:
- Authentication: Keeping you logged in securely as you browse the site.
- Google OAuth: Facilitating secure handshake redirects with Google authentication services.
- Consent State: Retaining your UI and consent choices so you aren't asked repeatedly.
You can manage cookie settings using our consent banner or in your web browser preferences. Declining critical cookies will restrict registration and login capabilities.
4. Third-Party Data Disclosures
We never sell your personal information. We send only the query and trip context needed for the feature you request to the relevant providers:
- AI Providers: OpenAI and AWS Bedrock may process prompts and relevant trip context used for chat, recommendations, or itinerary generation.
- Flight & Reference Providers: SerpApi processes the route, exact dates, currency, and cabin class needed to retrieve Google Flights results. Travelpayouts supplies public city, airport, and airline reference data.
- Accommodation Providers: Stay22 and the selected accommodation supplier process destination, dates, guest counts, and search filters needed to return lodging offers.
- Activity & Event Providers: Viator, Foursquare, and Ticketmaster process the location and keywords needed for a search. A provider may be skipped when it is unavailable, and the app may show partial results.
- Maps & Location: Google Maps and Geocoding services process addresses, coordinates, and map interactions needed for location search and display.
- AWS SES / Zoho SMTP: Transactional emails are distributed via secure cloud delivery networks.
Flight, accommodation, activity, and event bookings are completed on external provider sites. Their privacy policies apply after you follow an external booking or information link.
5. Your Rights & Access Controls
Under GDPR and CCPA, you retain full ownership of your data. You may request to review, export, modify, or permanently purge your account profile and all linked trips at any time by contacting our support team at [email protected].