隐私政策

1. Scope and platforms

This Privacy Policy describes how we collect, use, and share information when you use Planner on the web, mobile (including progressive or installed app experiences), or desktop where offered (collectively, the “Service”). Capitalized terms used but not defined here have the meaning given in our Terms of Use.

2. Information we collect

• Account and profile: identifiers from your login provider (e.g. email, user id), display preferences, and optional profile fields you choose to provide.
• Trip workspace data: destinations, dates, budgets, notes, saved options, and similar content you add to Planner.
• AI interaction data: when you use optional AI-assisted features (such as the Planner Assistant or companion experiences), we process your prompts, follow-up messages, and—where you allow it—limited trip context that we attach to a request so the model can answer usefully. Do not submit sensitive categories of information you are not comfortable having processed by us and our providers.
• Technical data: device or browser type, IP address, approximate location derived from IP, timestamps, diagnostic logs, and cookies or similar technologies needed for authentication, security, and basic analytics.
• Support communications: messages you send us and related metadata.

3. How we use information

We use the information above to:

• Provide, secure, and improve the Service across web, mobile, and desktop clients;
• Authenticate you and prevent fraud or abuse;
• Operate optional AI Features: generate responses, apply safety and abuse checks, measure reliability, and debug failures (including aggregated or de-identified analytics where feasible);
• Communicate about the Service, including transactional messages and (where allowed) product updates;
• Comply with law and enforce our terms.

4. AI processing and model providers

When you invoke AI Features, portions of your prompts and limited structured trip context may be sent to third-party model providers (and their subprocessors) for inference. Those providers act as our processors where applicable and are contractually required to use data only to provide the service we instruct, subject to their technical and organizational measures. Their privacy notices and terms also apply to their handling of data they receive directly from our systems.

We do not use your content to train third-party foundation models for their general public models unless we clearly disclose a separate program and, where required, obtain consent. If we introduce optional training or fine-tuning on customer content, we will describe it and provide controls where required by law.

We may retain inference-related logs for a limited period for security, abuse prevention, and product improvement. Retention periods vary by system; contact us for deletion requests where applicable law applies.

5. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on appropriate bases such as contract (providing the Service you request), legitimate interests (security, product improvement, and internal analytics balanced against your rights), consent where required (e.g. certain cookies or marketing), and legal obligation. Where AI Features process prompts you voluntarily submit, processing is generally necessary to perform the contract or is based on legitimate interests in operating optional assistance features; you can avoid submitting prompts if you do not wish that processing.

6. Sharing

We may share information with:

• Service providers who host data, run infrastructure, provide authentication, maps, travel data, analytics, email delivery, customer support, or AI inference, bound by confidentiality and processing terms;
• Authorities when required by law or to protect rights, safety, and integrity; and
• Business transfers in connection with a merger, acquisition, or asset sale, with notice where required.

We do not sell your personal information as “sale” is defined under the CCPA/CPRA.

7. Retention

We retain information as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. AI interaction logs may be kept for shorter operational periods than trip workspace data. You may request deletion where applicable; some copies may persist in backups for a limited period.

8. Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. Contact us to exercise these rights. If AI Features are optional for your workflow, limiting use of those features limits associated processing. We will respond consistent with applicable law.

10. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps.

11. International transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

12. Cookies

We and our partners use cookies and similar technologies for session management, preferences, security, and analytics. You can control cookies through browser settings; disabling some cookies may limit Service functionality.

13. Changes to this policy

We may update this Privacy Policy. We will post the new version and revise the “Last updated” date. Material changes may require additional notice where required by law.

14. Contact

For privacy requests or questions, contact Planner using the contact or support method provided in the Service or your account materials.