Privacy policy

Who we are

Voyage Threads is run from the United Kingdom, and its operator is the controller of your data under UK GDPR. Questions, requests and complaints: [email protected].

What we collect

• From Google when you sign in: your email address, name and profile picture. We use nothing else from your Google account and never see your Google password.
• What you put in: your trips, bookings (flights, stays, cruises, transfers), itineraries, notes, saved addresses (such as your home) and pictures you upload, whether entered by you or added by your AI agent.
• Sharing: the email addresses of people you invite to a trip, and the view-only links you create (we store only a fingerprint of each link, not the link itself).
• Your AI agent: tokens you create for it (stored as fingerprints), a short log of what it changed, and monthly counts of how much you use lookups and agent calls.

Why, and on what basis

To run the service you asked for: show your trips, let you share them, work out routes and keep your usage within your plan. That is performing our contract with you. We keep security records and limit abuse because we have a legitimate interest in protecting the service. We don't sell your data, show ads or build advertising profiles.

Who else sees it

• Google (sign-in, and Maps, Places and Routes): the places and routes you look up are sent to Google to find places and work out journeys. Google's privacy policy applies to that.
• Wikimedia Commons: a destination name is sent to search for cover pictures.
• People you share with see the trip you shared, including the places and journeys on it. Someone with a view-only link can see the trip without signing in.
• Your AI agent: an agent you connect can read and change your trips with your token. Which agent and what it does with the data is between you and its provider.
• Our hosting and database run on infrastructure we control; we don't pass your trips to anyone else.

Cookies

Only the ones needed to work: a sign-in session cookie, a cookie that lets a visitor with a view-only link keep seeing that trip, and a remembered light or dark choice on your device. No analytics or advertising cookies, so there is no cookie banner.

How long we keep it

For as long as you have an account. You can delete your account in Settings, which erases your trips, addresses, pictures, tokens, activity and usage straight away. Nightly backups of the database are kept for 30 days, so a deleted account disappears from them within that time. We don't restore a deleted account from a backup.

Your rights

You can ask to see, correct, export or erase your data, object to how we use it, or complain to the Information Commissioner's Office (ico.org.uk). Erasing is self-service in Settings; for anything else, email [email protected].

Changes

If we change this policy in a way that matters, we'll say so on the site and update the date above.