Privacy policy

This policy explains what personal data Planamoto ("we", "us") collects when you use our tour planning service ("the Service"), how we use it, and the rights you have. We are the data controller for the personal data we hold about you.

1. Data we collect

• Account data: email address, display name, and an authentication identifier. If you sign in with Google we receive your email address and a unique identifier from Google.
• Tour data you create: tour names, dates, descriptions, itineraries, expenses, checklists, participant names you enter, and notes.
• Technical data: standard server logs (IP address, user agent, request timestamps) used for security and reliability.

We do not knowingly collect special category data (such as health or biometric data). Please do not put this kind of information into your tour notes.

2. How we use your data

• To provide the Service and the features you use.
• To authenticate you and keep your account and data secure.
• To communicate with you about the Service (for example, account verification or material changes to these terms).
• To diagnose problems and prevent abuse.

3. Legal basis

We process your personal data on the following bases under UK GDPR: performance of the contract between you and us (to provide the Service), our legitimate interests (to keep the Service secure and reliable), and your consent where required (for example, optional AI features).

4. Sharing your data

We do not sell your personal data. We share data with the following categories of service providers, only to the extent needed to run the Service:

• Hosting and infrastructure: Amazon Web Services (AWS) for compute, storage, and authentication.
• Identity providers: Google, if you choose to sign in with Google.
• Third-party data providers: map, weather, and exchange-rate providers used to display information inside the Service.
• AI providers: if you use optional AI features (for example, location briefs or itinerary enrichment), the relevant tour data is sent to our AI provider for processing. Your data is not used to train their models.

We may also disclose data where required by law or to protect our rights and the safety of users.

5. International transfers

Some of our service providers are located outside the UK and EEA. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

6. Retention

We keep your account and tour data for as long as your account is active. If you delete your account, we delete your tours, expenses, itineraries, and checklists within 30 days, except where we are required to retain limited records (for example, for legal or accounting reasons). Server logs are retained for a short period for security and operational purposes.

7. Security

We use industry-standard measures including encryption in transit, access controls, and managed authentication to protect your data. No service can guarantee absolute security; you are responsible for keeping your password safe and for the participants you choose to share tours with.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate data;
• Ask us to delete your data ("right to erasure");
• Restrict or object to certain processing;
• Receive a copy of your data in a portable format;
• Withdraw consent where processing is based on consent.

You can exercise most of these rights from inside the Service (editing your profile or deleting your account). For anything else, contact us at the address below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies and local storage

We use a small number of cookies and browser storage entries that are strictly necessary to keep you signed in and to remember your preferences inside the Service. We do not use third-party advertising or tracking cookies.

10. Children

Planamoto is not intended for children under 16. If you believe a child has created an account, please contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. If we make a material change we will let you know through the Service or by email. The "last updated" date at the top of this page reflects the latest revision.

12. Outbound and affiliate links

Planamoto includes outbound links to third-party booking and shopping sites (for example, accommodation, ferries, insurance, and kit). Some of these are affiliate links — if you book or buy through them, we may receive a small commission at no extra cost to you. These commissions do not influence what we suggest, and we do not share your tour data with the destination site beyond what is in the link you click (for example, a city or product name).

13. Contact

Questions about this policy or your data? Email support@planamoto.com.