Privacy Policy

We collect the following categories of information:

• Account information. When you create an account, we collect your name, email address, and (for email/password sign-ups) a securely hashed password.
• Social login data. If you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider, along with an authentication token. We never receive or store your social account password.
• Trip content. Trips, itineraries, budgets, bookmarked places, notes, comments, and documents you upload or create.
• Uploaded documents. Files you upload (e.g. booking confirmations, tickets) are stored in cloud object storage. We extract structured data from them to power features such as the document vault and AI assistant.
• Usage and device data. Basic technical information such as IP address (used for security and rate limiting) and standard server logs.

• To provide, operate, and maintain the Service.
• To authenticate you and keep your account secure (including email verification and password resets).
• To generate AI-powered itineraries, recommendations, document extraction, and chat responses.
• To enable collaboration features, such as inviting travelers and sharing trips.
• To send transactional emails (verification, password reset, trip invitations).
• To protect against fraud, abuse, and unauthorized access.

We rely on trusted third-party providers to operate the Service. These providers process data only as needed to perform their functions:

• Authentication: Google and Facebook (social login).
• AI processing: Azure OpenAI and OpenAI, used to generate itineraries, recommendations, document extraction, and chat responses.
• Cloud infrastructure & storage: our hosting provider, managed database, and cloud object storage for uploaded files.
• Maps & places: Google Maps and Google Places.
• Email delivery: our transactional email provider.

We do not sell your personal information to third parties.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, scoped data access (your data is isolated to your account), and rate limiting on authentication endpoints. Uploaded files are stored in access- controlled cloud storage and are never stored in our database.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

We use cookies that are essential to the Service, primarily to keep you signed in and maintain your session. We may also use cookies to remember your preferences. You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in.

Depending on your location, you may have the right to access, correct, export, or delete your personal data. You can update much of your information directly in your account settings.

You can request deletion of your account and all associated personal data at any time. This includes data we received from social login providers such as Facebook and Google.

To request deletion, you have two options:

• In the app: go to your account settings and use the account deletion option, or
• By email: send a deletion request from your registered email address to support@minogo.ai with the subject "Data Deletion Request."

Once we verify your request, we will permanently delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal or security purposes.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data, except where we are required to retain it for legal or security purposes.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at support@minogo.ai.