Voyonder Privacy Policy

Last Updated: September 3, 2026

1. Introduction

Voyonder ("we," "our," or "us") is an AI-powered travel planning platform. We help you and your family plan extraordinary trips. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (voyonder.com), mobile application, and related services (collectively, the "Service").

Your trust is fundamental to our mission. We handle sensitive personal data — your travel plans, destinations, travel companions, preferences, and family details. We built Voyonder so that privacy is not an afterthought or a legal checkbox: it is a core product feature and a competitive advantage. Every decision we make about your data is tested against one question: would a user feel betrayed if they learned we did this? The answer must always be no.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Name, email address, and authentication credentials when you create an account.
Travel Planning Data: Destinations, travel dates, traveler profiles (including family members and companions), activity preferences, budget ranges, dietary requirements, accessibility needs, passport and visa information, and other details you share while planning trips.
Communications: Messages you send to our AI travel concierge (Sage), customer support inquiries, and feedback submissions.
Payment Information: Billing details processed through our payment processor (Stripe). We do not store full credit card numbers on our servers.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent, and interaction patterns within the Service.
Device Information: Browser type, operating system, device identifiers, IP address, and approximate location derived from IP.
Cookies and Similar Technologies: See Section 9 (Cookies & Tracking Technologies) for details.

2.3 Information from Third Parties

Authentication Providers: If you sign in through Google or other third-party authentication services, we receive profile information per your authorization settings with that provider.
Travel Data Enrichment: We may receive publicly available information about destinations, points of interest, weather, and events to enhance your trip plans. This is not personal data.

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Generate personalized trip itineraries, activity recommendations, and travel insights through our AI planning engine (Sage).
Improve the Service: Analyze usage patterns to refine our AI models, optimize performance, and develop new features.
Communicate with You: Send service-related notifications, trip planning updates, security alerts, and support responses. Marketing communications are sent only with your consent and you may opt out at any time.
Ensure Security: Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
Comply with Legal Obligations: Meet applicable laws, regulations, legal processes, or enforceable governmental requests.

We do not use your travel planning data to build advertising profiles, sell to data brokers, or train third-party AI models.

4. AI Processing & Automated Decision-Making

Voyonder uses artificial intelligence, including large language models (LLMs), to power our travel planning concierge (Sage) and related features.

How It Works: When you interact with Sage, your trip details, preferences, and conversation history are processed by AI models to generate personalized itineraries, recommendations, and responses.
Model Providers: We use AI models hosted by trusted providers (such as Anthropic and OpenAI) under strict data processing agreements. These providers do not use your data to train their models.
Human Oversight: While Sage operates autonomously for routine planning tasks, our systems are designed with human oversight capabilities. Significant decisions or anomalies are flagged for review.
No Automated Legal or Financial Decisions: We do not use AI to make automated decisions that produce legal or similarly significant effects concerning you without human involvement.
Transparency: You can see the output of our AI at all times — your itineraries are fully visible and editable. You remain in control of your travel plans.

5. Zero Data Retention (ZDR)

Zero Data Retention is a non-negotiable principle at Voyonder. Here is what it means in practice:

Trip Data: When you delete a trip from Voyonder, all associated data — itineraries, traveler profiles within that trip, conversations with Sage, preferences, and media — is permanently and irreversibly deleted from our active systems within 30 days. Backup systems may retain data for up to 90 days before permanent deletion.
Account Deletion: When you delete your Voyonder account, all your data across all trips is permanently deleted within 30 days, with backup retention not exceeding 90 days.
AI Processing: Trip data sent to AI model providers is processed in real-time during your session. We do not store your trip data with AI providers beyond what is necessary to fulfill your immediate request. Provider logs and caches are governed by their respective data retention policies (typically measured in hours or days, not weeks).
Analytics Data: Aggregated, anonymized usage statistics that cannot be linked back to you may be retained indefinitely for business intelligence purposes.
Legal Holds: In the rare event we are legally required to preserve data (e.g., a valid court order), we will retain only the minimum data necessary to comply and will notify you unless prohibited by law.

We designed ZDR so that when you delete your data, it is truly gone. This is our commitment to you.

6. Data Sharing & Third Parties

We do not sell your personal information. Period.

We share information only in the following circumstances:

Service Providers: With trusted vendors who perform services on our behalf — cloud infrastructure (AWS, Vercel), payment processing (Stripe), AI model inference (Anthropic, OpenAI), email delivery (Resend), analytics (PostHog), and error monitoring (Sentry). These providers are contractually bound to process data only per our instructions and for no other purpose.
Legal Compliance: If required by law, regulation, subpoena, court order, or other valid legal process. We will attempt to notify you before disclosure unless prohibited.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any change in ownership or use of your data.
With Your Consent: We may share information for any other purpose with your explicit consent.

We carefully vet all service providers for their security practices and data handling policies. A current list of subprocessors is available upon request at privacy@voyonder.com.

7. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, and destruction. These measures include:

Encryption of data in transit (TLS 1.3+) and at rest (AES-256)
Multi-factor authentication for internal systems access
Regular security audits and penetration testing
Principle of least privilege for all internal data access
Incident response and breach notification procedures

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.
Correction: Update or correct inaccurate or incomplete personal data. You can also do this directly through your account settings.
Deletion: Delete your account and all associated data at any time through your account settings. See Section 5 (ZDR) for deletion timelines.
Objection & Restriction: Object to or request restriction of certain processing activities where applicable.
Data Portability: Receive your data in a portable format to transfer to another service.
Opt-Out of Marketing: Unsubscribe from marketing communications at any time via the link in any marketing email or through your account settings.
Cookie Preferences: Manage cookie preferences through your browser settings. See Section 9.

To exercise these rights, contact us at privacy@voyonder.com. We will respond within 30 days (or the period required by applicable law). We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

9. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

Essential Operation: Maintain your session, remember authentication state, and enable core Service functionality. These cookies are necessary and cannot be disabled.
Analytics: Understand how users interact with the Service to improve the product. We use PostHog, a privacy-focused analytics platform, configured to respect Do Not Track signals and minimize data collection.
Preferences: Remember your theme preferences, language settings, and other customization choices.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We do not use:

Third-party advertising cookies or tracking pixels
Cross-site tracking for advertising purposes
Fingerprinting techniques

10. International Data Transfers

Voyonder is based in the United States, and our service providers operate globally. Your data may be transferred to, stored, and processed in countries other than your country of residence, including the United States.

When we transfer personal data across borders, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs): For transfers from the European Economic Area (EEA), UK, and Switzerland, we rely on EU-approved SCCs and the UK International Data Transfer Addendum where applicable.
Data Processing Agreements: All service providers handling personal data are bound by DPAs with data protection obligations consistent with this policy.
Adequacy Decisions: Where available, we rely on adequacy decisions by relevant authorities.

By using the Service, you acknowledge that your data may be transferred internationally as described in this policy.

11. Children's Privacy

Voyonder is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@voyonder.com. If we learn we have collected personal data from a child under 16 without verified parental consent, we will delete that information promptly.

Travelers under 16 may be included in trip plans created by parent or guardian accounts. In such cases, the parent or guardian is responsible for the information they provide about their children. We treat this information with the same privacy protections as all other trip data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Notify you via email (to the address associated with your account) at least 14 days before the changes take effect
Display a prominent notice within the Service
Update the "Last Updated" date at the top of this policy

Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy. If you disagree with the changes, you may delete your account and data as described in Section 5.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@voyonder.com
Data Protection Officer: dpo@voyonder.com

We take every privacy inquiry seriously and will respond promptly.

This Privacy Policy was last updated on September 3, 2026 and is effective as of that date.