TravelDoss Privacy Policy.

Last Revised: August 28, 2026

Draft notice: This Privacy Policy is a working draft describing how TravelDoss currently handles information. It has not yet been reviewed by an attorney. Questions may be directed to the contact listed in our Terms of Service.

1. Information We Collect

Account information. When you create an account we collect your email address and a password (stored in hashed form by our authentication provider), or your Google account email if you sign in with Google.

Trip content. Text, itineraries, notes, links, and other content you paste, type, upload, or import in order to generate and edit travel dossiers.

Agreement records. When you accept our Terms of Service, we record the version accepted, the time of acceptance, your IP address, browser user agent, and language locale, so that we can maintain a reliable record of the agreement.

Technical information. Standard server logs and diagnostic information (such as IP address, browser type, and pages requested) generated by operating the Service.

Usage and analytics information. Information about how the Service is used — the pages you view, the page that referred you, an approximate location derived from your IP address, and your device and browser type. See Cookies and Analytics below.

2. How We Use Information

To provide the Service: generating, storing, displaying, and sharing your travel dossiers.
To process your trip content with artificial-intelligence services in order to produce itineraries and related output.
To authenticate you and secure your account.
To maintain legally required records of agreement to our Terms.
To operate, debug, and improve the Service.

We do not sell your personal information.

3. AI Processing

Trip content you submit is processed by third-party AI model providers on our behalf in order to generate dossiers. Content submitted for generation should not include information you consider sensitive.

4. Service Providers

We rely on infrastructure providers to operate the Service, including cloud hosting, database and authentication services, AI model providers, analytics providers, and error-monitoring providers. These providers process data on our behalf under their own security and privacy commitments.

5. Cookies and Analytics

Essential cookies. We set cookies necessary to operate the Service, including keeping you signed in. These cannot be turned off without breaking core functionality.

Analytics cookies. We use Google Analytics 4, a service provided by Google, to understand how the Service is used — which pages are visited, how visitors arrive, and where they run into trouble. It sets first-party cookies (named _ga and _ga_*) that distinguish one visitor from another, and through them collects the addresses of pages you view on our site, the referring page, an approximate location derived from your IP address, and your device and browser type.

What we do not send. Dossier share links are treated as private. Before a page address is transmitted to Google, the portion identifying an individual dossier is removed and replaced with a placeholder — Google records that a dossier page was viewed, but not which dossier. We do not send your email address, your account identifier, or any trip content to Google Analytics.

No advertising. We do not use Google Analytics for advertising, remarketing, or ad personalization, and we do not link it to advertising identifiers.

Your choices. Most browsers let you block or delete cookies through their settings. Google also publishes a browser add-on that prevents Google Analytics from collecting data, available at tools.google.com/dlpage/gaoptout. Blocking analytics cookies does not affect your ability to use the Service.

Google's handling of the information it collects is described in Google's Privacy Policy.

Dossiers you choose to publish are available at their share URL to anyone who has the link. We otherwise do not share your personal information except with the service providers described above, or where required by law.

7. Data Retention

Account information and trip content are retained while your account is active. Dossiers may expire and become unavailable according to the plan under which they were created. Records of Terms acceptance are retained as long as needed to evidence the agreement.

8. Your Choices

You may delete individual dossiers, or stop using the Service at any time. You may opt out of analytics as described in Cookies and Analytics. To request deletion of your account and associated data, contact us via the details in our Terms of Service.

9. Security

We use commercially reasonable safeguards, including transport encryption and access controls, to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children and may not be used by anyone under 18 years of age, as described in our Terms of Service.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date.