Travelgpt

TravelGPT's advanced AI services rely on robust data handling practices to protect user information while providing valuable travel-related assistance. From secure payment processing to rigorous AI technology integration, this comprehensive overview examines the privacy policies and security measures that safeguard user data throughout the service relationship.

User Data Collection and Use

TravelGPT requires users to provide a minimum of their email address and full name to access the service. Additional personal information is collected only when legally necessary. All users must be at least 18 years old and must register to use the service.

User data security is managed through Firebase Authentication, a Google product that securely manages user information. All user-entered and AI-generated data is stored in Firebase's Firestore Database, which maintains strict security protocols to protect data integrity and confidentiality. Firebase may collect limited data related to user activity, but the platform prioritizes data protection standards.

For payment processing, TravelGPT partners with Stripe, a widely-trusted payment platform known for its robust security measures. Stripe securely handles all transaction-related information, storing only essential data necessary for processing. The company maintains strong data protection policies, with financial information kept confidential and never shared with third parties unless required by law, such as for tax obligations.

The service leverages several advanced AI technologies, including OpenAI, Anthropic, Cohere, and Mistral APIs, which each have their own privacy policies. These providers prioritize user data security and privacy, implementing rigorous security protocols to protect user information.

GPT APIs and Data Security

The platform's integration with advanced AI technologies from OpenAI, Anthropic, Cohere, and Mistral each features comprehensive privacy policies that prioritize user data security. OpenAI maintains strict guidelines on data usage, restricted to operational needs and user consent. Anthropic's approach focuses on transparent communication regarding data collection, with clear explanations of how information is used to improve user experience while maintaining privacy standards.

Cohere implements similar protective measures, detailing data handling processes in their privacy policy. Specifically, they describe the retention of data elements such as session IDs and interaction logs while protecting personally identifiable information. Mistral also follows best practices in data security, though their specific policies detail less about AI integrations than the other providers.

Each provider implements rigorous security protocols to protect user information, though the specifics vary. OpenAI, for example, outlines measures to prevent unauthorized access and data breaches. Anthropic includes similar provisions in their privacy policy, while Cohere describes their security framework in technical detail. Mistral's policy highlights their approach to security but provides fewer technical specifics compared to the other providers.

The platform supports these technical implementations through robust error monitoring by Sentry. While Sentry collects data for debugging and performance optimization, all information is processed securely to protect user privacy. Vercel and DigitalOcean further support platform operations through hosting services that collect minimal data for analytics and performance tracking purposes. Together, these integrated systems form a comprehensive data security framework for the platform's AI services.

Payment Processing and Data Protection

Stripe processes all payment transactions securely, storing only essential information related to the transactions themselves. This includes payment method details, charge status, and transaction ID, while keeping other financial data confidential.

For users who purchase additional credits to extend their free usage, Stripe collects minimal personal information required to complete the transaction. This information is processed and stored exclusively by Stripe according to their own privacy policy. TravelGPT's own privacy policy states that no payment-related personal data is shared with third parties except when required by law, such as for tax obligations.

User data retention follows a strict privacy framework. All personal data, including email addresses and full names, is retained only as long as necessary to provide the Service. The company maintains that data is typically retained for the duration of the service relationship plus an additional period specified by legal requirements.

In accordance with standard practices, payment information is retained according to Stripe's policies, which are designed to balance security needs with privacy protection. TravelGPT's own policies reflect this approach, stating that data retention is governed by legal requirements and service needs. The platform provides users with the ability to request data deletion by contacting their support team at info@relatedcode.com, though legal retention requirements may prevent deletion in all cases.

Third-Party Services and Data Sharing

Sentry collects data related to application errors, performance issues, and user interactions with the Service to debug, improve, and maintain quality. Specifically, Sentry monitors:

• Application errors and crashes

• Performance metrics and response times

• User session data and interaction events

The service uses cookies to track:

• User navigation patterns

• Engagement with specific features

• Common issues or error scenarios

Vercel hosts the website and collects data for analytics purposes, including:

• Website traffic source and volume

• Page views and bounce rates

• Average session duration

• Visitor demographics (age, location, device)

DigitalOcean hosts the Private API and collects data related to:

• Server performance metrics

• Network activity levels

• User interaction logs

• API request patterns

All third-party service data retention follows the principle of necessity, retaining information only as long as required for Service operations or as mandated by law. This includes email addresses, full names, and user-generated content. Personal data is securely stored and accessed through authenticated sessions managed by Firebase Authentication.

Users can request data deletion by contacting the company's support team at info@relatedcode.com. The company processes these requests while considering legal retention requirements and service operational needs. All third-party service providers maintain detailed privacy policies that users can access through the links provided in the platform's documentation, ensuring transparency and accountability in data handling practices.

Data Retention and User Requests

Data retention policies for personal information are designed to balance operational needs with user privacy. Email addresses and full names are retained for the duration of the service relationship plus an additional period specified by legal requirements. This typically covers the time needed to provide the Service, plus any necessary compliance periods.

User-generated content is stored for as long as it remains relevant to Service operations. This includes text inputs, session logs, and any other data generated through interaction with the platform. The company maintains that all personal information is securely stored and accessed through authenticated sessions managed by Firebase Authentication, which ensures that only authorized users can access their own data.

Users have the ability to request deletion of their data by contacting the company's support team at info@relatedcode.com. The company processes these requests while considering legal retention requirements and service operational needs. Notably, some legal retention requirements may prevent complete deletion of records in certain cases.

The platform also maintains a history of user activities and interactions, which is securely stored in Firebase's Firestore Database. This information is used for operational purposes such as billing, error resolution, and service improvement, but is kept confidential and is not shared with third parties without legal mandate.

The company regularly reviews and updates its privacy practices, with changes posted on this page. This ongoing commitment to privacy ensures that users are aware of how their data is handled and protected.