Privacy Policy
Last updated: October 4, 2026
1. Who we are
voyAIage (“we,” “us,” “our”) runs voyaiage.com, a travel planning site that uses AI, our own price tracking and third-party data to help you plan trips. For privacy questions or requests, email info@voyaiage.com.
2. What we collect
What you give us:
- Trip details: cities, dates, budget, travel style, group type and anything else you type into the planner or our tools.
- Email address: only if you sign in, subscribe to the newsletter or a price alert, or ask us to email you a plan or packing list.
- Account content: if you sign in (by an emailed link; there is no password), the trips you save, your travel profile (including the name you choose to show, which appears on your public traveller page and to the people you plan a trip with), messages to the Trip Companion about a saved trip, photos you add to a trip, bookings you import, and what you add to a trip’s story (done / skipped marks, short notes, which photos and whether your first name show).
- Text you submit for review, for example a plan pasted into Check My Trip.
What we collect automatically:
- IP address and basic device data (browser, operating system), used for security, rate limits and abuse prevention.
- Clicks on partner links, recorded so we know which links work. This is not linked to your name.
- Analytics and advertising cookies: only if you accept them (see section 5).
We do not collect payment details. Bookings happen on our partners’ sites.
3. How we use it, and why we're allowed to
- To give you what you asked for (a plan, a price alert, an email, your saved trips). Legal basis: performing our service for you.
- To keep the site safe and working: rate limits, bot checks and fixing errors. Legal basis: our legitimate interest in a secure service.
- Newsletter and price alerts, only after you opt in; every email has an unsubscribe link. Legal basis: your consent.
- Analytics and ads, only if you accept cookies. Legal basis: your consent, which you can withdraw at any time.
We do not sell your personal information, and we do not use it to make decisions that have legal or similarly significant effects on you.
4. Who we share it with
We use these providers to run the site. They get only what they need for their part:
- Anthropic (Claude) and Google (Gemini): the trip details or text you submit, to generate plans, chat replies and reviews; booking screenshots, confirmation text or emails you forward to your private voyAIage address, read once to pull out the booking details and not kept; and screenshots you add to a trip to find the places on them, read once for the place names and not kept.
- Resend also receives the booking emails you forward to your voyAIage address and passes them to us; we don’t keep the email itself.
- Supabase: database, sign-in and file storage.
- Vercel: website hosting.
- Resend: sending emails.
- Mapbox and Google Maps: maps shown in your browser, which receive your IP address when they load.
- Google Analytics and Google AdSense, and Travelpayouts (partner-link tracking): only after you accept cookies.
- Data sources such as Google Places, Tripadvisor, Agoda, Travelpayouts and Open-Meteo, which we query for places, prices and weather. We send them place names or city names, not your personal details.
Booking partners (Expedia, VRBO, GetYourGuide, Agoda, Points.com and others): when you follow a partner link you leave our site, and that partner’s own privacy policy applies. We may earn a commission.
We may also disclose information if the law requires it, to protect our rights or users’ safety, or as part of a sale or merger of the business.
Our providers may process data in the United States and other countries. Where the law requires it, we rely on the transfer safeguards they offer, such as Standard Contractual Clauses.
5. Cookies
We use a small number of first-party cookies and browser storage that the site needs to work: your cookie choice, your sign-in session, and edit keys that let your browser change trips you made without an account.
Analytics, advertising and partner-tracking cookies load only after you accept them. Visitors in the EU, EEA, UK and Switzerland make that choice through Google’s certified consent message; everyone else uses our cookie banner. You can change your choice at any time under Cookie settings in the footer.
6. How long we keep data
We delete data on a weekly schedule once these periods pass:
| Data | Kept for |
|---|---|
| Trips made without an account (and anything attached to them) | 12 months after creation |
| Trips saved to an account, with their chat, photos, likes and saves | Until you delete them, or ask us to delete your account |
| Bookings you add to a trip (what, when, where, price and booking reference; never names, emails or card details), kept privately and never shown on shared links; on a trip you plan together, the co-planners you invited see them too | Until you remove them or delete the trip |
| Your trip story (done / skipped marks, one short note per day, the cover and photo choices, whether the story is shared and who shows their first name), kept privately and visible only to the people on that trip; once the organiser shares it, anyone with the link sees the plan plus only the notes, photos and first names you chose to show, never bookings, costs or emails | Until you change it or delete the trip |
| Who plans a trip together (each co-planner’s account and the name they chose to show, and a short list of recent changes such as “edited the plan”), visible only to the people on that trip | Until they leave or are removed, or the trip is deleted |
| A note that the organiser removed someone from a trip (their account, the date, and which invite link was live), so the old link can’t bring them back | Until the trip is deleted |
| Your private address for forwarding booking emails | Until you make a new one, or ask us to delete your account |
| Ideas pitched on a trip planned together (the change, who pitched it, who voted), visible only to the people on that trip | The latest 30 per trip, until the trip is deleted |
| Shared costs on a trip planned together (“Settle up”: what each expense was for, the amount, who paid and who it’s split between, and payments marked as made), visible only to the people on that trip; we never handle the money | Until it’s deleted or the trip is deleted (entries stay if someone leaves, under their name) |
| Your PayPal.me or Venmo username, if you add one so your group can pay you back (shown only to people on trips you plan together) | Until you remove it, or ask us to delete your account |
| Group chat between the people planning a trip together (name and message), visible only to them; not archived | Cleared 6 hours after the conversation goes quiet (any left behind are swept within a week) |
| Instagram giveaway entries and winners’ payout details (see section 7) | Deleted within 90 days after the giveaway ends, except records we must keep for tax or accounting |
| Newsletter subscription | Until you unsubscribe; the record is deleted 30 days later |
| Price alerts | Until you cancel (cancelling deletes it), or 12 months at most |
| Partner-link click records | 13 months |
| Bot-check and rate-limit records (include IP address) | 14 days |
| Admin sign-in attempts | 90 days |
| Admin action log (for example, a trip deleted on a user’s request) | 12 months |
| Internal system logs | 180 days |
| Service cost records, and Claude / ChatGPT connector usage (tool, city and assistant name; no personal data or conversation text) | 24 months |
| Emails you ask us to send once (a plan or packing list) | Not stored after sending |
| Google Analytics data | Google Analytics’ retention setting (14 months) |
7. Instagram giveaway
If you enter our Instagram giveaway (official rules), we handle this to run it:
- Your Instagram handle, and the comments, story shares and reels that tag @voyaiage, which we view to check entries and draw winners.
- Payout details from winners only, such as the email address of your PayPal account, which you send us when you confirm a prize.
We use it only to run the giveaway, contact winners and pay prizes, and we don’t add it to the newsletter or share it beyond the payment provider. Legal basis: running the giveaway you entered. We delete it within 90 days after the giveaway ends, except records we must keep for tax or accounting. Instagram’s own privacy policy covers what you post there.
8. Your rights
Depending on where you live (including under the GDPR, UK GDPR and California law), you can ask us to:
- give you a copy of your data, or send it to you in a portable format;
- correct it or delete it;
- stop or limit a use of it, or object to a use based on our legitimate interests;
- withdraw consent (unsubscribe links, or Cookie settings for cookies).
Email info@voyaiage.com and we will reply within 30 days. We will not treat you differently for using these rights. If you are unhappy with our answer, you can complain to your local data protection authority.
9. Children
voyAIage is not meant for anyone under 16, and we do not knowingly collect their data. If you think a child has given us personal information, contact us and we will delete it.
10. Security
We use HTTPS, restricted database access, bot checks and rate limits to protect data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a breach affects you, we will tell you where the law requires it.
11. Changes
We may update this policy. We will change the date at the top, and for significant changes we will give notice on the site (and by email if you have an account or subscription) before they take effect.
12. Contact
For privacy questions or requests, email info@voyaiage.com.