Privacy and connected accounts
TravelWizard helps you organise trips and import booking confirmations. This page explains the data used by those features and the controls available in your account.
Your account and trips
Email sign-in uses a verification code. Google or Apple sign-in, when available, provides a verified account identifier and email address. TravelWizard uses these to sign you in and associate your trips with your account. TravelWizard does not receive your Google or Apple password.
Trip details, preferences, documents and booking drafts are stored to provide the features you use. Sharing a trip makes the selected trip information available through the sharing controls you choose.
Connecting Gmail is optional
Google sign-in and Gmail booking import are separate choices. Gmail import asks for read-only access to your mailbox. This permission allows TravelWizard to search messages and read matching emails and attachments to identify bookings. It does not allow TravelWizard to send, edit or delete Gmail messages.
TravelWizard searches booking-related messages from the previous two years on the first scan, then checks for newer messages. Travel dates are checked separately so that clearly past bookings are excluded. Uncertain dates, changes and cancellations may need your review. Checks continue while the app or import page is open.
Google connection tokens are stored encrypted on the server. Retrieved booking email content and retained attachments are also encrypted in server storage. Your Google access tokens are not displayed in the app or shared with other users.
AI reading and service providers
When you enable AI reading in booking import settings, relevant email text and supported attachments may be sent to OpenAI to extract booking details. You can leave AI reading disabled. Hosting, storage and email delivery services also process the data needed to operate the features you use.
Google user data is used to provide your booking import features. It is not sold, used for advertising or used to train general-purpose AI models. TravelWizard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Retention and deletion
- Original imported emails and attachments in the import inbox expire after seven days. Import drafts are retained for up to 30 days.
- Bookings and documents copied into saved trips remain until you delete them or your account.
- Encrypted Gmail connection credentials remain until you disconnect the account or delete your TravelWizard account. Hashed message identifiers prevent duplicate imports and are removed when you delete your account.
Pausing booking imports stops new Gmail imports. Disconnecting Gmail stops scans and requests revocation of Google's access token; if Google cannot be reached, TravelWizard pauses the connection and asks you to retry. Imported trips remain available until you delete them.
Your controls and contact
You can pause imports, change AI reading, disconnect Gmail, remove trips and documents, and delete your account in TravelWizard. You can also remove TravelWizard's access in your Google Account connections.
For help or privacy requests, use TravelWizard's support options or contact the team through Jetportal, which creates TravelWizard.