What we keep, and why.

If you organize a trip: your name and email address, plus whatever you put into the trip itself — title, dates, location, itinerary, flights, hotels, expenses, files and photos.

If you're invited to one:your name, optionally your email, your RSVP, and anything you add — your flight, where you're staying, photos, chat messages. You do not need an account. An invite link plus a cookie is your identity.

We also keep ordinary server logs. Email addresses are redacted in them.

• We don't sell your data.
• We don't show ads.
• We don't process payments. Settling up hands off to Venmo — we never see a card number or a bank account.
• We don't email your guests anything you didn't trigger.

A short list of services that do a specific job: Resend sends our email, OpenAI powers the concierge and the planners (trip details are sent as context; they are not used to train models), Sentry and PostHog tell us when something breaks and which screens get used. Everything else — your database rows, your uploads — stays on our own server.

Every optional email has an unsubscribe link, and notification settings let you turn categories off. You can delete your whole account from account settings; that releases your email address immediately. If you want a trip's data removed entirely, delete the trip, or email us and we'll do it.

Three kinds, all functional: a signed session cookie when you sign in, a per-trip cookie that remembers which guest you are, and a short-lived referral cookie if you arrived through someone's invite link. No advertising or cross-site tracking cookies.

[email protected]. Questions about your data get answered by a person.