Privacy Policy

Envoyage is a travel planner operated by Shashwat Koranne, an individual based in California, USA (“Envoyage”, “we”, “us”). This policy explains what we collect when you use envoyage.com and its pages, why, and the choices you have. For people in the European Economic Area, the UK and Switzerland, we are the “controller” of your personal data.

Questions or requests: koranne0303@gmail.com.

When you sign in with Google

Your name, email address and profile photo. We never see your Google password.

What you choose to tell us

• Profile: a bio, home city and airport, nationality, links to your social profiles, and personal interests.
• Travel preferences: things like pace, budget, food, places to stay, flight preferences, who you usually travel with, children’s ages, and accessibility or walking needs.
• Trips: destinations, dates, must-see places, itineraries, messages you send to the trip planner, places you save, your wishlist, and bookings you track (including any notes, addresses or confirmation links you add).

All of this is optional except what a feature needs to work (a trip needs a destination, for example). Accessibility needs and children’s ages are only used to plan trips that work for you, and you can remove them at any time in your profile.

Collected automatically

• Usage counts: anonymous page views through Vercel Web Analytics, which uses no cookies.
• Security data: your IP address, used for a short time to limit abuse (for example, too many requests in an hour).
• Records of AI use: how much AI processing each request used, so we can keep costs and fair-use limits in check.

We don’t use your device’s GPS location. Where we show things near you, we use the home city you gave us.

• To plan, save and update your trips, and to show the right flights, stays and things to do for your dates.
• To personalise recommendations, for example places that suit your interests or are close to home.
• To keep the service secure, prevent abuse and enforce fair-use limits.
• To understand, in aggregate, which features are used, so we can improve them.
• To reply when you contact us.

Envoyage gets better as more trips are planned. When an itinerary is created, the places in it (their names, locations and categories) are added to a shared library used to plan future trips for everyone. Generated itineraries may also be reused for another traveller who chooses exactly the same destination and settings.

Neither includes your name, email, profile or anything else that identifies you. Avoid writing personal information into must-see places or trip notes.

We don’t sell your personal information or share it for advertising. We share it only with the services that run Envoyage for us, and only what each one needs:

• Anthropic (AI): your trip details, preferences and planner messages, to write and edit itineraries. Under its commercial terms, Anthropic doesn’t use this data to train its models.
• Vercel (hosting and anonymous analytics), Neon (database) and Cloudflare (image storage): to store and serve the app and your data.
• Google: sign-in; Maps and Places, to show maps and look up places (your browser loads Google Maps directly).
• OpenStreetMap, Open-Meteo, Wikipedia and Viator: place names, coordinates or destinations, to find locations, weather, photos and things to do. They receive no account information.

Booking partners. When you follow a link to Google Flights, Booking.com, Viator or another partner, you leave Envoyage and that partner’s privacy policy applies to anything you give them. Some links tell the partner the visit came from Envoyage, so we may earn a commission. They don’t tell the partner who you are.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of transferring the service to a new owner, who would have to honour this policy.

We use one kind of cookie: the one that keeps you signed in. It’s required for the service to work. We don’t use advertising or cross-site tracking cookies, and our analytics use none, which is why you won’t see a cookie banner.

Your browser also stores a few conveniences locally, such as photos already loaded or a card you dismissed. Clearing your browser’s site data removes them.

• Your account, profile and trips: until you delete them or ask us to delete your account.
• A trip you delete is removed with its itineraries straight away.
• When you ask us to delete your account, we delete your personal information within 30 days, apart from anything we must keep by law.
• Security records that include your IP address (rate limits) are deleted within two days.
• The shared library of places doesn’t identify you, so it stays.

Wherever you live, you can:

• See and edit your profile and preferences in your profile settings, and download them as a file.
• Delete any trip from My trips.
• Ask us for a copy of your data, to correct it, or to delete your account, by emailing koranne0303@gmail.com from the address you sign in with.
• Object to, or ask us to restrict, how we use your data.

We’ll reply within 30 days. We may need to confirm the request comes from you. Using these rights never changes the service you get.

The European Economic Area, the UK or Switzerland

We use your data to provide the service you asked for (contract), to keep it secure and improve it (legitimate interests), and, for optional profile details such as accessibility needs, because you chose to give them to us (consent, which you can withdraw by removing them). You have the rights of access, correction, deletion, restriction, portability and objection, and you can complain to your local data protection authority.

California

In the last 12 months we have collected the categories described in “What we collect”: identifiers, account and profile information, preferences, trip activity and usage information, for the purposes in “How we use it”. We don’t sell or share personal information as the CCPA defines those terms, and we use sensitive information only to provide the service. You have the right to know, delete and correct your information, and you won’t be treated differently for using those rights.

Elsewhere

Many countries, including Canada, Brazil, India and Australia, give you similar rights. We honour the requests above for everyone.

Envoyage and the services above process data mainly in the United States. When data leaves your country, we rely on safeguards such as the European Commission’s standard contractual clauses that these providers offer.

Data is encrypted in transit, sign-in is handled by Google, and access to the database is restricted. No service is perfectly secure; if a breach affects you, we’ll tell you as the law requires.

You must be at least 16 to create an account. We don’t knowingly collect information from anyone younger. If you think a child has signed up, email koranne0303@gmail.com and we’ll delete the account. Children’s ages that a parent adds to plan a family trip are used only for that.

If we change this policy, we’ll update the date at the top. If a change materially affects how we use your information, we’ll tell you in the app before it takes effect.

Shashwat Koranne, California, USA. Email koranne0303@gmail.com.