Privacy policy

travaiai, at www.travaiai.com, is operated by Eros Espínola González, an individual based in the United States, who is the controller of the personal data described here. For any privacy question or request, write to hello@travaiai.com.

Your trip (the form, your plan, its earlier versions and your chat), a random identifier and your choices are stored in your browser. The cookie policy lists each item and how long it lasts. Clearing this site’s data in your browser deletes all of it.

• Writing your plan. When you ask for a plan, destination ideas or send a chat message, your answers go to our servers and on to OpenAI: destination and dates, who is traveling, your preferences, any notes you write and your chat messages, with the random identifier. If you share your nationality, it is used only to write entry and visa notes. Basis: providing the service you ask for.
• Fair use and security. Your IP address is used to apply daily limits and keep the service free and safe, and our host keeps standard server logs. Basis: our legitimate interest in preventing abuse and keeping the site running.
• Analytics. Cookieless usage statistics: page visits, time on page, clicks on buttons and links with on-page text masked, page speed, errors, and product events such as a plan being created or a booking site being chosen. Basis: our legitimate interest in understanding and improving travaiai.
• Partner links. The Travelpayouts script on the planner page reads the page address and the booking links on it, which include destination, dates and party size, and uses a cookie to credit bookings made through partner links. Basis: your consent in the EU, EEA, UK and Switzerland; elsewhere our legitimate interest in funding a free service, which you can decline at any time.
• Messages you send us. Your email address and message, to reply. Basis: our legitimate interest in answering you.

Please do not include sensitive information, such as health details or passport numbers, in notes or chat. travaiai does not make decisions about you that have legal or similarly significant effects; the AI only writes travel suggestions.

• Your trip and choices: in your browser, until you clear them.
• Plan and chat content: not stored by travaiai after your request is answered.
• OpenAI: requests are sent with storage turned off; OpenAI may keep them for up to 30 days to detect abuse, and does not use API data to train its models by default.
• IP address for daily limits: about a day.
• Server logs: a short period kept by our host, typically days.
• Analytics events: no more than two years.
• Emails: as long as needed to handle your message.

These providers process data on our behalf or as independent services, under their own terms:

• Vercel hosts the website.
• OpenAI writes plans, suggestions and chat replies.
• Upstash stores the fair-use counters and the spending limit.
• PostHog provides cookieless analytics.
• Travelpayouts and the partner sites it works with credit bookings made through partner links.

We do not sell personal information, and we do not share it for targeted advertising. We may disclose data if the law requires it, or to protect the rights and safety of travaiai, its users or others.

travaiai is operated from the United States, and our providers may process data in the United States and other countries. Where data from the EU, EEA, UK or Switzerland is transferred, our providers rely on safeguards such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework, where they offer them.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its use, and to withdraw consent at any time without affecting what happened before. Because there are no accounts and your plans live in your browser, most of this is in your hands already: clear this site’s data, and change your partner-cookie choice on the cookie policy page.

For anything else, write to hello@travaiai.com. We may need to ask for details to find the data, since we do not hold names or accounts. If you are in the EU, EEA, UK or Switzerland, you can also complain to your local data protection authority.

Residents of California and other US states with privacy laws may request to know, access, correct or delete their personal information, and to opt out of its sale, sharing or use for targeted advertising. We do not sell personal information or use it for targeted advertising. You can opt out of partner cookies on the cookie policy page, and we honor Global Privacy Control signals as an opt-out. We will not treat you differently for using these rights.

The site is served only over HTTPS, access to our provider accounts is restricted, and we keep as little data as possible. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

travaiai is not directed at children under 16, and we do not knowingly process their data. If you believe a child has given us personal data, write to hello@travaiai.com and we will delete it.

If what we process changes, we will update this page and the date at the top, and ask for consent again where it is needed.