1. Who we are
GenAITrip (“GenAITrip”, “we”, “us”) is an AI-assisted workspace that helps business-to-business travel agents build tour packages: collecting trip details, searching fares, requesting and comparing quotations from destination management companies (DMCs) and sending final quotes to their clients.
GenAITrip is operated by [Registered company name], [Registered office address], India. For privacy questions write to privacy@genaitrip.com.
2. Scope
This policy applies to our website at https://genaitrip.com, the GenAITrip web application and related services (together, the “Service”). It covers:
- Agents: travel agents and agency staff who create an account and use the Service.
- Travellers and client contacts: people whose details agents enter, such as customer names, decision makers and their phone numbers. We process this data on behalf of the agent who entered it, and that agent is responsible for having a lawful basis to share it with us.
3. Information we collect
3.1 Account information
Your name, work email address, agency name and password. Passwords are stored only in hashed form.
3.2 Package and trip data you provide
What you type in the chat or enter in the Service: customer or group names, departure city, destination, passenger counts, travel dates, hotel category, budget, food and liquor preferences, the decision maker’s name and phone number, itineraries, fares, DMC and airline quotations, visa fees, markups, and the logo and design you upload for your quotes.
3.3 Data from your Google account
Only if you choose to connect Gmail. See section 4.
3.4 Messages you send to clients
When you send a quote on WhatsApp from the Service, we process the recipient’s phone number, the message and attachment, and the delivery and read status returned by WhatsApp.
3.5 Usage, device and log data
IP address, browser type, pages and features used, timestamps and error reports. We use this to run, secure and fix the Service.
3.6 Cookies and local storage
We use your browser’s local storage to keep you signed in and to remember the package you last opened. We do not use advertising or cross-site tracking cookies.
4. Google user data
You can connect your Google account so that GenAITrip can work with your Gmail on your behalf. Connecting is optional; the rest of the Service works without it. You sign in through Google’s own consent screen, and GenAITrip never sees or stores your Google password.
4.1 What we access and why
| Permission (scope) | Why GenAITrip requests it |
|---|---|
openid, email, profile | Identify which Google account you connected and show its email address in GenAITrip. |
https://www.googleapis.com/auth/gmail.readonly | Search your inbox for past conversations with DMCs to build your DMC directory, and read DMC replies (including attached quotations) to the itineraries you sent. |
https://www.googleapis.com/auth/gmail.send | Send the itinerary emails you approve to the DMCs you choose, from your own Gmail address. |
https://www.googleapis.com/auth/contacts.readonly | Find DMC email addresses saved in your Google Contacts. |
4.2 How we use Google user data
We use Google user data only to provide features you can see and control in GenAITrip:
- Building your DMC directory. When you ask us to, we search your inbox for conversations with DMCs and save the company name, contact name, email address and destinations they cover. A scheduled re-scan looks only at mail received since the last scan.
- Sending itineraries. When you confirm, we send the itinerary email from your Gmail address to the DMCs you selected and record the thread ID.
- Reading DMC replies. We read replies in those threads, including attached quotations, to extract prices, inclusions and currency so you can compare quotes.
We do not use Google user data for advertising, we do not sell it, and we do not use it to determine credit-worthiness or for lending purposes.
4.3 What we store
- OAuth access and refresh tokens, encrypted at rest.
- DMC contact details identified from your mail, marked with “inbox scan” as their source.
- Gmail thread and message IDs for emails sent or received about a package.
- The quotation details we extract and the quotation attachments you receive from DMCs, attached to the relevant package.
Emails that are not related to DMCs or to your packages are processed only long enough to decide that, and are not stored.
4.4 AI processing of Google user data
To identify DMCs and extract quotations, relevant email content is sent to our AI model provider, which processes it on our behalf and returns structured results. Google user data is not used to develop, improve or train generalized or non-personalized AI or machine-learning models, by us or by our providers.
4.5 Human access
Our staff do not read your Gmail data, unless: you give us explicit permission for specific messages (for example, when you ask support to look at a problem); it is necessary for security purposes, such as investigating abuse; it is required to comply with applicable law; or the data has been aggregated and anonymized for internal operations.
4.6 Sharing of Google user data
We share Google user data only with the service providers listed in section 7 that help us provide the features above, when required by law, or as part of a merger or acquisition with prior notice to you. We do not transfer it to data brokers or other third parties.
GenAITrip’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4.7 Disconnecting and deletion
You can disconnect Gmail at any time from your GenAITrip settings, or remove access from your Google account at myaccount.google.com/permissions. When you disconnect, we delete your Google tokens immediately and stop accessing your Gmail. DMC contacts and quotations already saved to your packages remain in your account until you delete them. To have all data that came from your Google account deleted, write to privacy@genaitrip.com; we will complete deletion within 30 days.
5. How we use information
- To provide the Service: capture trip details, generate itineraries, search fares, request and compare quotations, calculate final prices and deliver quotes.
- To operate your account, authenticate you and keep each agency’s data separate.
- To communicate with you about the Service, including support and important changes.
- To secure the Service, prevent abuse and fix errors.
- To comply with legal obligations.
6. AI processing
The Service uses an AI model to understand chat messages, extract trip details, draft itineraries and read quotation documents. The content needed for each task is sent to our AI model provider, which processes it on our behalf and does not use it to train its models. AI output is validated by our software before it is saved. Prices, currency conversions and totals are calculated by our software, not by the AI model. AI output can contain mistakes, so please review it before sharing it with clients.
8. Data retention
We keep account and package data while your account is active. If you delete a package it is removed from the Service. If you close your account we delete your data within 30 days, and remove it from backups within 90 days, unless we must keep some of it to meet legal obligations. Server logs are kept for up to 90 days.
9. Security
Data is encrypted in transit with TLS and encrypted at rest. Google tokens are stored encrypted. API keys stay on our servers and are never sent to the browser. Access to production systems is restricted to authorised staff, and each agency’s data is isolated from other agencies. No method of transmission or storage is completely secure, but we work to protect your data and will notify you of a breach where the law requires.
10. Your rights and choices
Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct, update or erase your personal data, withdraw consent you have given, and nominate another person to exercise your rights. You can also disconnect Gmail at any time (see section 4.7). To make a request, write to privacy@genaitrip.com. Travellers whose details were entered by an agent can contact that agent, or us, and we will help.
11. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal data from children through accounts. Agents may enter details of travellers who are children, such as a child’s inclusion in a family booking, as part of building a package.
12. International transfers
Our service providers may process data outside India, including in the United States. Where we transfer data, we do so in line with applicable law and use providers that protect it under contractual terms.
13. Changes to this policy
We may update this policy. We will post the new version here with a new effective date, and for material changes we will notify you by email or in the Service before they take effect.
14. Contact and grievances
Privacy questions and requests: privacy@genaitrip.com
Grievance Officer: [Grievance Officer name], grievance@genaitrip.com, [Registered office address], India. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
See also our Terms of Service and Contact page.