Privacy Policy

1. Overview

This Privacy Policy explains how Voyager ("we", "us") collects, uses, stores, and shares personal information when you use our AI travel planning website and related services ("Service"). We process data to provide trip planning, account management, subscriptions, and product improvements.

2. Information we collect

Account information

When you register, we collect your name, email address, and password (stored in hashed form). If you sign in with Google or another supported provider, we receive profile details permitted by that provider, such as your name, email address, and avatar URL, and we store the provider identifier needed to authenticate you.

Trip and planning data

When you plan a trip, we collect the details you provide — such as origin, destinations, dates, traveller count, budget, interests, accommodation preferences, and itinerary selections — along with AI conversation messages, generated suggestions, packing lists, weather snapshots, and shared trip links you create.

Usage and technical data

We collect information about how you use the Service, including feature usage counters tied to your subscription plan, device and browser type, IP address, log data, and cookies or similar technologies needed for authentication, security, and session management.

Payment information

Paid subscriptions are processed by our payment provider. We receive billing status, plan identifiers, and limited transaction metadata, but we do not store full payment card numbers on our servers.

3. How we use your information

We use personal information to:

• create and secure your account;
• generate and save trip plans, itineraries, and assistant suggestions;
• enforce plan limits and provide customer support;
• process subscriptions and prevent fraud;
• send service-related communications, such as verification or security notices;
• monitor performance, debug issues, and improve the Service;
• comply with legal obligations.

4. AI processing

Trip prompts, follow-up answers, and related context may be sent to AI service providers to generate responses. We instruct providers to process this data only to deliver the Service. AI outputs are automated and should be reviewed by you before making travel decisions.

5. Legal bases (EEA/UK users)

Where applicable, we rely on: performance of a contract (providing the Service you request); legitimate interests (security, analytics, product improvement); consent (where required, such as optional marketing); and legal obligation.

6. How we share information

We do not sell your personal information. We may share data with:

• Infrastructure and AI providers that host our application or process prompts on our behalf;
• Travel data partners used to retrieve accommodation, activity, or weather information relevant to your search;
• Authentication providers when you choose social login;
• Payment processors for subscriptions;
• Authorities when required by law or to protect rights, safety, and security.

Recipients are bound by contractual safeguards appropriate to the data they handle.

7. Trip sharing

If you create a share link, people with that link can view the trip information you chose to expose. Treat share URLs like passwords. You can stop sharing by removing or regenerating links where the product provides that option.

8. Data retention

We keep account and trip data while your account is active and for a reasonable period afterward so you can restore plans or resolve disputes. Usage logs and backups may be retained for a limited time for security and operations. We delete or anonymize data when it is no longer needed, unless law requires longer retention.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport, access controls, and hashed credentials. No online service can guarantee absolute security.

10. Your rights and choices

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based. To exercise these rights, contact us using the details below.

You can update account details in your profile and delete trips from your dashboard where available. You may also lodge a complaint with your local data protection authority.

11. International transfers

We may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses for transfers from the EEA or UK.

12. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page shows when it was revised. Material changes will be communicated where required by law.

14. Contact us

For privacy questions or requests, email privacy@example.com or write to the Voyager data protection contact at the business address published on our website.