Privacy Policy

1. Information we collect

We collect the following information when you use the Service:

• Account and contact information. When you join our waitlist, we collect your name and email address. When you sign in with Google, we receive your email address, name, profile-picture URL, and the standard profile information Google provides.
• Travel preferences. The profile details you choose to give us: your experience style, travel pace, travel timing, dietary needs, mobility needs, home airports, usual travel companions, budget comfort, and free-text notes for your advisor.
• Cards, points, and loyalty. Your credit-card portfolio — the issuer, card name, when you opened or closed it, the annual fee, and any notes you add — along with your points and miles balances, program names, and elite status tiers, and your frequent-flyer and loyalty program names and enrollment numbers. We never collect or store full credit-card numbers, security codes, or expiration dates.
• Trip-planning and advisory data. When you use our planning and advisory features, we store the trip details you provide (such as destinations, dates, trip context, and any fixed anchors) and the advisory itineraries and strategies we generate for you.
• Technical information. Essential cookies that keep you signed in, and standard server logs such as IP address and timestamps.

2. How we use your information

We use your information to provide and operate the Service; to personalize and generate your advisory itineraries and strategies; to communicate with you (including welcome and account emails); to maintain security and prevent abuse; and to improve the Service. We do not use your information for third-party advertising.

3. Cookies and tracking

We use only the essential cookies needed to keep you signed in and to operate the site. We do not use third-party analytics or advertising trackers, and we do not track you across other websites.

4. How we share your information

We do not sell or rent your personal information, and we will not sell de-identified or aggregated data without notice and your consent. We may disclose information when required by law, or to protect the rights, safety, or property of Traveled Out, our members, or others.

We share information only with service providers that help us operate the Service, under contracts that limit how they may use it:

• Supabase — database, authentication, and storage (United States).
• Vercel — website hosting.
• Resend — sending transactional and welcome emails.
• Google — sign-in (OAuth).
• As features launch, we may also use: Anthropic (to process your profile and trip context and generate advisory output); Stripe (to process payments — Stripe handles your payment method and billing address, and we never store full card numbers, security codes, or expiration dates); Cal.com (to schedule advisory calls); and Langfuse (usage and cost telemetry, limited to counts and identifiers, not your profile content).

5. Data retention and deletion

We keep your information while your account is active and as needed to provide the Service and meet our legal obligations. You can request deletion of your account and associated data at any time by emailing admiral@traveledout.com; we will honor your request within 30 days, or as required by law. Deleting your account permanently removes your profile, card portfolio, points, trips and itineraries, and session data.

6. How we protect your information

We use industry-standard measures to protect your information. Connections are encrypted in transit (HTTPS/TLS); your data is stored with Supabase, which encrypts data at rest at the platform level; and access is restricted by row-level security so that members can only access their own data. We also exclude sensitive fields — such as your loyalty and frequent-flyer numbers and your personal notes — from our application logs and diagnostic traces. No system is perfectly secure, but we work to safeguard your information.

7. Your choices and rights

You can review and update most of your information from your profile, and you can request access to, correction of, or deletion of your information by contacting us.

California residents. Under the CCPA and CPRA, you have the right to know what personal information we collect and how we use it, to request access and deletion, to correct inaccuracies, and to opt out of the "sale" or "sharing" of personal information — though we do not sell or share your personal information. We will not discriminate against you for exercising these rights. To make a request, email admiral@traveledout.com.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. International users

The Service is operated from and hosted in the United States. If you access it from outside the United States, you understand that your information will be processed in the United States.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes here with a new effective date, and we may notify you of material changes.

11. Contact

Questions or requests about your privacy? Contact us at admiral@traveledout.com.