Privacy Policy

When you create a Travelado account, we collect your email address and a display name. Travelado signs you in with a magic link sent to your email — we do not collect or store passwords.

The core of the Service is the travel documents you give us. When you forward a confirmation email to your personal @travelado.ai address or upload a document, we collect:

• The forwarded email, including its sender, subject, body, and attachments.
• Documents you upload directly (e.g., PDF confirmations, tickets, itineraries).

The original document is retained so you can always see the source of every extracted fact. Your forwarding address is unguessable and only works for building your trips.

We process your documents to extract structured booking facts, which may include:

• Flight, hotel, transport, and activity details (times, locations, providers).
• Confirmation codes and booking references.
• Traveler names as they appear on bookings.
• Deadlines such as check-in windows and cancellation cutoffs.

Every extracted fact keeps a link to the document it came from, so you can verify anything the AI produced.

Documents are processed by Anthropic's Claude AI models to extract booking facts and check your trips for problems. If you use the AI trip assistant, we store your chat history so the assistant can maintain context. Your data is not used to train AI models. We use Anthropic under a commercial API agreement; Anthropic does not train on API data by default. Anthropic processes data pursuant to its own Privacy Policy.

When you create, join, or are invited to a trip, we store trip membership records (which accounts belong to which trips, and in what role) so we can enforce access control and deliver trip-related notifications to the right people.

If you enable push notifications on iOS, we store a device push token so we can deliver alerts to your device. We also collect limited technical information (such as app version) for debugging and support.

We collect basic usage information to operate and improve the Service, including AI token-usage records associated with your account (used for plan limits and cost monitoring). This usage data does not include advertising identifiers and is not shared with advertisers.

The web application uses only essential cookies and browser storage needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

• Passwords — sign-in is by email magic link only.
• Payment card numbers — if and when paid billing launches, payment details will be handled by a payment processor, not stored by us.
• Precise device location — we do not access GPS data.
• Advertising identifiers or cross-app tracking data.

Trips can be shared with people you invite. Members of a trip can see that trip's content — its timeline, documents, extracted booking facts, and traveler details on that trip. Access is enforced in the database itself (row-level security keyed to trip membership). Do not add documents to a shared trip that you do not want its members to see.

We use the following providers to operate Travelado. Each processes data only to provide its service to us:

• Supabase — database, authentication, and document storage (encrypted at rest with AES-256, TLS in transit; SOC 2 Type II).
• Cloudflare — inbound email routing for your @travelado.ai address and storage of raw inbound email (AES-256 at rest).
• Anthropic — AI processing of document content and assistant chats (not used for AI training).
• Resend — transactional email delivery (magic links, notifications).
• Apple — push notification delivery to the iOS app.
• Vercel — web application hosting.

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Typeone LLC, our users, or the public.

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

You can view your documents, extracted facts, and trip data directly in the app. You may request a copy of the personal data we hold about you by contacting support@travelado.ai.

You can update your account information in Settings and edit or correct trip data in the app, or contact us for help.

Use per-document deletion or account deletion in Settings (see Section 5), or contact support@travelado.ai. We will process deletion requests within 30 days.

You can disable push notifications in your device settings. Transactional emails essential to the Service (such as sign-in magic links) cannot be disabled while you hold an account.

• Contract performance: processing necessary to provide the Service you signed up for, including processing the documents you submit.
• Legitimate interests: improving the product, preventing abuse, and ensuring security.
• Legal obligation: compliance with applicable law.
• Consent: where you have specifically opted in.

Your data may be transferred to and processed in the United States. Where such transfers occur, we rely on appropriate safeguards, including Standard Contractual Clauses where applicable.