Privacy Policy

Effective October 7, 2026

This Privacy Policy explains how Xprompt Travel handles information on www.xprompttravel.com and in XpromptTravel AI, the reservation organizer linked through My Trips. For questions or privacy requests, contact zeevgarber@gmail.com.

Information we collect

If you sign in with Google, we receive your name, email address and account identifier. Connecting Gmail or Yahoo Mail is a separate, optional authorization. We receive access and refresh tokens so the app can retrieve permitted mailbox information without receiving your email password.

Travel messages may contain sender and recipient information, subjects, dates, message text, traveler names, destinations, travel dates, confirmation numbers, accommodation and transport details, prices and cancellation conditions. We process these details to organize reservations. We also process information you enter or paste, saved trips, manual corrections, chat questions and responses, and technical information needed to operate and troubleshoot the service.

How we use your information

We use information to authenticate you, find travel confirmations, extract reservation details, group trips, answer travel questions, synchronize saved information and protect the service. When available, a connected Gmail account may be checked by scheduled background refreshes for new or updated travel messages. Automatic access continues only while authorization remains valid. A provider's permission may technically cover more messages than the travel-related messages the app aims to process.

Mailbox permissions and forwarding

Ordinary Google sign-in uses identity permissions. Gmail import uses read access; Yahoo import uses read-only mail authorization. These import features do not edit, move or delete your messages. If an optional Gmail forwarding feature is enabled, it requires separate send permission and forwards selected travel emails, potentially including attachments, to the recipient you choose. Automatic forwarding occurs only when you configure it. It is not required for ordinary trip organization.

AI processing and service providers

When AI features are enabled, relevant travel-email text, reservation details and questions may be sent to OpenAI to extract bookings and produce answers. Do not enter information you do not want processed for these features. Hosting and database providers, including Vercel and configured Postgres hosting, process information to operate the app. Google Sites hosts this website; embedded Google Calendar and YouTube content may process information under their own privacy policies. Email providers handle sign-in and authorized mailbox access.

We do not sell personal information or use Google user data for advertising. Google user data is not used to train generalized AI or machine-learning models. Transfers are limited to providing the features described here with your consent, security needs or applicable legal requirements. Human access to Google user data is limited to your explicit consent, necessary security investigation, legal obligations, or aggregated and anonymized internal operations. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, cookies and security

The app uses cookies and browser storage for sign-in, sessions and saved-workspace functionality. Account, reservation and conversation data may be stored in its database; provider tokens are stored server-side and encrypted when persisted. Hosting providers may process network and diagnostic logs. We use reasonable safeguards, but no online service can guarantee complete security. Data processed by service providers may be handled outside your country.

Retention, disconnection and deletion

Saved trip and conversation information remains available until removed through available app controls or a deletion request, subject to necessary security, legal and backup retention. There is no promised automatic deletion period. Signing out or revoking mailbox access does not automatically delete previously imported reservations or conversations.

You can stop future mailbox access by disconnecting through available app controls or revoking access in your Google or Yahoo account settings. To request access, correction or deletion of your stored information, email zeevgarber@gmail.com from the account associated with the app. Identify the account and request, but do not send passwords, tokens or full booking emails. We may verify your identity before acting. Rights depend on applicable law; you may also contact your local data-protection authority.

Children and policy changes

The service is not directed to children under 13. If you believe a child has provided personal information, contact us to request removal. We may update this policy as features and practices change. Material changes will be communicated through the service or an appropriate notice; the effective date identifies this version.

Contact: zeevgarber@gmail.com

Google API Services User Data Policy · Terms of Service