1. Information We Collect
We collect the following types of information:
- Account data: Name, email address, and hashed password when you create an account.
- Trip data: Destinations, dates, preferences, and itineraries you generate.
- Booking data: Guest details (name, email, phone) when you make hotel or flight bookings through third-party providers.
- Payment data: Payment processing is handled by Whop. We do not store credit card numbers.
- Usage data: Pages visited, features used, and interaction patterns to improve the Service.
2. How We Use Your Information
- To provide and improve the Service, including AI-generated itineraries.
- To process bookings through third-party providers (LiteAPI).
- To manage your account, credits, and subscriptions.
- To send transactional communications (booking confirmations, password resets).
- To prevent abuse and enforce rate limits.
3. Data Sharing
We share your data only with:
- Booking providers: LiteAPI receives guest details to process hotel and flight reservations.
- Payment processor: Whop processes payments and manages subscriptions.
- AI providers: Groq receives anonymized trip parameters (destination, vibe, budget) to generate itineraries. Your personal identity is not sent.
- Search providers: Serper.dev receives destination search queries (no personal data) for web search grounding.
We do not sell your personal data to third parties.
4. Data Security
Passwords are hashed using bcrypt. Sessions use signed JWTs with HTTP-only secure cookies. All data is transmitted over HTTPS. Database access is restricted and encrypted at rest through our hosting provider (Neon).
5. Data Retention
We retain your account and trip data for as long as your account is active. Booking records are retained for legal and accounting purposes. You may request deletion of your account and associated data at any time by contacting us.
6. Cookies
We use a single session cookie (voyai_session) to maintain your login state. It is HTTP-only, secure in production, and expires after 30 days. We do not use third-party tracking cookies.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Export your trip data.
To exercise these rights, contact us at privacy@voyai.app.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.