Privacy Policy — Itinerably

We respect your privacy. Itinerably is designed to be a low-data service — we don't require account registration.

Contents

Who We Are
Information We Collect
How We Use Your Information
Cookies and Local Storage
Data Retention
Security
Changes to This Policy
Contact

1. Who We Are

Itinerably ("we", "us", "our") operates the travel planning service at itinerably.com. This Privacy Policy explains how we collect, use, store and protect information when you use our service.

By using Itinerably, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly

Information	When collected	Why
Email address	If you download a free guide PDF, submit the contact form, or sign up for notifications	To deliver your requested PDF, respond to your enquiry, or notify you of updates. Guide PDF email addresses are added to our travel planning newsletter — you may unsubscribe at any time.
Name	If you submit the contact form	To personalise our response
Message content	If you submit the contact form	To respond to your enquiry

Information collected automatically

Information	How collected	Why
IP address	Server logs	Security, rate limiting and abuse prevention
Browser type and device	Server logs	Technical compatibility and service improvement
Pages visited and actions taken	Analytics (if enabled)	Understanding how the service is used

Information we do NOT collect

We do not require or create user accounts
We do not store the itineraries you generate
We do not track your travel plans or destinations over time

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide the service — processing your itinerary requests, generating AI content and delivering PDF downloads
To respond to enquiries — replying to contact form submissions
To notify you — if you signed up for feature notifications, informing you when the feature becomes available
To improve the service — understanding how users interact with Itinerably to make it better
To protect the service — rate limiting, abuse prevention and security monitoring

      We do not sell, rent or trade your personal information. We do not use your information for targeted advertising. We do not build profiles about you for commercial purposes.
    

4. Cookies and Local Storage

Cookies

Itinerably uses minimal cookies.

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

Contact form submissions — retained for up to 12 months, then deleted
Server logs — retained for up to 90 days for security purposes
Notification sign-ups — retained until the feature launches and notifications are sent, or until you request removal

6. Security

We take reasonable technical and organisational measures to protect your personal data, including:

HTTPS encryption for all data in transit
API key management through environment variables (never exposed in client-side code)
Rate limiting on our backend to prevent abuse
CORS restrictions limiting which domains can access our API

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. We encourage you to review this page periodically.

If we make material changes that affect how we handle your personal data, we will note this prominently.

8. Contact

If you have questions, concerns or requests regarding this Privacy Policy or how we handle your data, please get in touch:

Privacy enquiries and data subject requests:

We respond to all privacy enquiries within 30 days. Urgent data deletion requests within 5 business days.