Legal

What we collect

When you request a preview or purchase an itinerary, we collect the email you provide, your marketing-consent choice, and the trip details you enter in the intake — including destinations, dates, party composition (which may include the ages of travelers), mobility needs, dietary needs, budget range, and preferences. Payment is processed by Stripe; we do not see or store your card number.

Why we use it

To build and deliver your itinerary, to email you about your trip, to take payment, and — only if you opt in — to send occasional marketing. Building your itinerary is the performance of the service you requested; marketing relies on your consent, which you can withdraw at any time.

If you have an account, we also save the durable parts of your trip details — who travels with you and how you like to travel, not where or when you’re going — to your account, so we can pre-fill your next trip and save you the retyping. You can view, edit, or clear these any time from your traveler profile.

Who processes it for us

We use a small set of service providers who process data on our behalf: Supabase (database and accounts), Stripe (payments), Resend (email delivery), Anthropic (itinerary generation), Vercel (hosting), and Google Analytics (aggregate usage measurement). We do not sell your data, share it with the venues we recommend, or use it for third-party ad targeting.

Cookies and analytics

We use Google Analytics to understand how the site is used in aggregate so we can improve it. Analytics only runs after you opt in: the first time you visit, a banner asks, and we load Google Analytics — which may set cookies — only if you choose Accept. If you decline, no analytics cookies are set. We remember your choice in a single first-party cookie, and you can change it any time from the “Cookie settings” link in the footer. We do not use cookies for cross-site advertising and we do not sell analytics data.

How long we keep it

If you request a preview and don’t purchase, and you didn’t opt into marketing, we delete your email and intake within about 90 days. If you opted into marketing, we keep your contact until you unsubscribe or after a long period of inactivity. If you purchase, we keep your itinerary and the records of your order for as long as your account is active, and retain limited transaction records where the law requires.

Your choices and rights

You can ask us to show you the data we hold about you, correct it, or delete it, and you can opt out of marketing at any time. If you have an account, you can download or delete your data yourself from your account’s data page — or, either way, email privacy@itinerist.co and we’ll handle it. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those.

International transfers

We operate from the United States; if you contact us from elsewhere, your data is processed in the U.S. by us and the providers above.

Contact

Questions or requests about your data: email privacy@itinerist.co.

Terms

Purchases are covered by the Itinerist Accuracy Warranty described on the site: if a recommendation is closed, unbookable, or materially wrong, we replace the affected part of your itinerary free of charge. Our full Terms of Service cover service scope, refunds, the warranty, liability, and governing law.