Privacy Policy

Itinerax ("we", "our", "us") is a travel planning service operated at itinerax.app. We help travellers generate personalised holiday itineraries and connect them with qualified travel agents for booking. For enquiries about this policy, contact us at itinerax@proton.me.

When you use Itinerax, we may collect the following:

• Trip planning data — destination preferences, budget, passenger numbers, travel dates, activity interests, health and travel restriction flags, and any free-text notes you enter into the planner.
• Contact details — your name, email address and phone number, provided only when you choose to submit an expert booking enquiry.
• Usage data — standard web analytics including pages visited, device type, browser, and approximate location (country/city level). We do not track individual users across the web.
• Agent referral data — if you arrive via an agent link (e.g. itinerax.app/plan?agent=name), we record which agent referred you so your enquiry is routed correctly.

We do not collect payment card details. Any future payment processing will be handled entirely by Stripe and subject to their privacy policy.

• To generate your itinerary — your trip criteria are sent to Anthropic's Claude AI to produce a personalised travel plan. See Section 5 for details on AI processing.
• To route your booking enquiry — if you request expert review, your contact details and trip data are emailed to the relevant travel agent.
• To send you a confirmation — we send a single confirmation email acknowledging receipt of your enquiry. We do not send marketing emails without your explicit consent.
• To improve the service — anonymised usage analytics help us understand how the app is used and where it can be improved.

We process your personal data under the following lawful bases:

• Contract — processing necessary to provide the itinerary generation and booking enquiry service you have requested.
• Legitimate interests — anonymised analytics to improve the service, and routing enquiries to the correct agent.
• Consent — for any optional communications you have agreed to receive.

Your trip criteria are transmitted to Anthropic's API to generate your itinerary. This includes your destination, budget, passenger count, activity preferences and any restriction flags you have selected. We do not send your name, email or phone number to Anthropic.

Anthropic may process this data in accordance with their own privacy policy, available at anthropic.com/privacy. By using Itinerax, you acknowledge that your trip preferences are processed by Anthropic to generate your plan.

Your generated itinerary may include links to third-party booking platforms including Booking.com, GetYourGuide, Skyscanner and Viator. These are affiliate links — if you make a purchase through them, we may receive a commission at no extra cost to you. Clicking these links will take you to third-party websites subject to their own privacy policies. We have no control over their data practices.

We do not sell your personal data. We share data only in the following circumstances:

• Travel agents — when you submit a booking enquiry, your contact details and trip data are shared with the assigned travel agent to facilitate your booking.
• Service providers — we use Resend for transactional email, Vercel for hosting, and Anthropic for AI generation. Each operates under their own data protection obligations.
• Legal requirements — where required by law or to protect the rights and safety of our users.

Trip planning data entered into the planner is not stored on our servers — it exists only in your browser session and is discarded after your itinerary is generated. Booking enquiry data (name, email, phone, trip details) is retained in email records for up to 24 months for the purposes of servicing your booking and resolving any disputes.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact itinerax@proton.me.

Itinerax uses minimal cookies. We use session storage (not persistent cookies) to retain your agent referral ID during your planning session. We use Vercel Analytics, a privacy-friendly, cookieless analytics service that does not track individual users or store personal data, to understand overall usage patterns. No third-party advertising or tracking cookies are set.

Itinerax is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact itinerax@proton.me and we will delete it promptly.

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of Itinerax after changes constitutes acceptance of the updated policy.