Your data & security
You're trusting us with your travel plans — confirmation codes, where your family sleeps, when you're away from home. Here is exactly how that data is handled, in plain language.
What happens when you forward an email
Your confirmation arrives at your private @travelado.ai address, is parsed into structured trip facts (flight times, confirmation codes, deadlines), and is filed to your trip. The original document is kept so you can always see the source of every fact. Your forwarding address is unguessable and only works for building your trips.
Where your data lives, and how it's encrypted
Documents and trip data are stored with Supabase, and raw inbound email with Cloudflare — both encrypt everything at rest with AES-256 and in transit with TLS. Supabase is SOC 2 Type 2 compliant and ISO 27001 certified. We do not run our own servers and we never store your data unencrypted.
Who can see your trips
Only the people you invite. Access is enforced in the database itself (row-level security keyed to trip membership) — not just in the app — so there is no code path that shows your trip to anyone who isn't a member. Travelado staff do not browse customer data; operational access is limited to debugging with your consent.
How AI is used
Documents are processed by Anthropic's Claude models to extract booking facts and check your trip for problems. Your data is not used to train AI models. Every extracted fact keeps a link to the document it came from, so you can verify anything the AI produced.
Your email is your key
Travelado signs you in with a magic link sent to your email — there is no password to leak or reuse. Your email account is the root of trust (it's where your confirmations already live), so we recommend protecting it with two-factor authentication at your email provider. Optional app-level MFA is on our roadmap.
Deleting your data
You can delete any document (and its extracted facts) from the app, or delete your entire account from Settings. Account deletion removes your documents, stored files, raw forwarded emails, trips you own, and your profile. Trips you own that have other members can be transferred to a member first, so companions don't lose their plans. Deletion is permanent.
Security question or something to report? Email security@travelado.ai.
For the full legal details, see our Privacy Policy and Terms of Service.