Last updated: draft, pending attorney review.
| Data | Why |
|---|---|
| Verify your identity, let you log back in, send trip/event links | |
| Name | Personalize your plan and how you appear to people you invite |
| Trip/event survey answers | Generate your plan |
| Payment details | Handled entirely by Stripe — we never see or store your card number |
| Anything you add to a plan | Bookings, notes, screenshots, edits, group suggestions |
| RSVP status & party size | For events, if the host uses this feature |
When you add a booking by screenshot, we send the image to Anthropic's Claude to read the details (venue, date, time, confirmation number). We store the extracted text on your itinerary — not the original image.
Draft plans are generated using Anthropic's Claude models from the preferences you submit. During our human review step, we may run an AI-assisted polishing pass that uses live web search to verify real details (address, approximate rating, a short description) about places already named in your plan, and to research well-suited restaurant/activity suggestions for your itinerary. This means fragments of your plan's context (place names, destination, general preferences) may be used to construct search queries during that step. We do not send your email, payment information, or full identity to this process — only the plan content needed to research it well. We strive to maintain AI transparency in accordance with FTC guidelines. See Anthropic's privacy policy and their Acceptable Use Policy for how they handle that processing.
For plans with an accommodation on file, we may send your accommodation's address and the addresses of that day's planned stops to Google's Distance Matrix service to estimate travel time. This is a narrow, specific use — we do not send this data to Google's Places, Photos, or Search products, and we do not use Google to source images.
If an event host enables RSVP, an invited guest's response (yes/no/maybe) and party size are visible to the host and, for transparency in a small-group context, to other guests on that same event. This is not used for anything beyond that event.
If you subscribe to the Couples plan and provide a partner's email, we store that email to enable a "+Invite as co-planner" shortcut once that person also has an account. This does not merge your trips or events — each of you keeps separate, independent plans unless you choose to invite each other onto a specific one.
We use a single, cryptographically signed session cookie to keep you logged in to your dashboard. It is set with the HttpOnly, Secure, and SameSite=Lax flags, and contains no readable personal data itself — only a signed reference we verify server-side. Separately, your browser stores a small display-theme preference (light/dark) locally on your own device; this never leaves your device and is not sent to us. We show a brief one-time notice about these essential cookies on first visit. We do not use third-party advertising or tracking cookies. If we later add affiliate booking links (see Planned features), any cookies those partners set would be disclosed and, where required, gated behind your consent before this policy relies on them.
We may add optional automatic parsing of booking confirmation emails (for example, from airlines or hotels) to save you the step of screenshotting them. If we build this, it will be explicit opt-in consent only, scoped to booking-related messages, and clearly explained before you connect anything — we will not read your inbox without your explicit permission. We're also considering adding real photos to published plans; if we do, that will use a dedicated image source and this policy will be updated before it goes live.
We plan to add affiliate booking options (for example, curated lodging via Booking.com and activities via Viator) shown as an optional shortlist inside your plan. If you follow one of those links, the partner's own site and privacy policy govern anything you do there, and any cookies they set will be disclosed here and, where required, gated behind your consent first. We may earn a commission on bookings made through those links, at no extra cost to you.
We rely on trusted third parties to operate securely and efficiently. We share the minimum necessary data with:
We share only the minimum data each service needs to do its job, and we do not sell your personal data or share it for cross-context behavioral advertising.
You can exercise these rights yourself from your account: Settings → Your data → Download my data exports everything we hold about you as a file, and Settings → Account → Delete my account permanently erases it. You can also email hello@anthoway.com for any request, including correction of inaccurate data. Depending on your location, you may be protected under specific privacy frameworks:
We keep your itinerary, event, and account data while your account is active, plus a reasonable period after in case you return. Edit history (used for the "revert to an earlier version" feature) is kept alongside the itinerary it belongs to. You can request full data erasure at any time.
Anthoway is strictly not directed at children. You must be 18 years or older to use our service. We do not knowingly collect, process, or store personal information from anyone under the age of 18. If we discover or are notified that we have inadvertently collected data from a minor, that data and the associated account will be immediately deleted. If you believe a child has provided us with information, please contact us at hello@anthoway.com.
Privacy questions: hello@anthoway.com.