Your privacy

Current planning preview · updated September 13, 2026

Accounts and requests

Account email addresses, passwords and sign-in sessions are handled by Supabase. Passwords are sent directly to Supabase over HTTPS; Aurevoya does not keep a password database. When available, social sign-in shares the account information you authorize with that provider.

If you send a support request, we store your account identifier, email, topic, message and request status so the support team can handle it. Access is restricted to configured administrators. Avoid sending sensitive documents or payment details.

Trip planning

Saved plans, favorites and preferences use storage in this browser. They do not automatically follow you to another device. Remove a plan from My trips or clear this site's browser data to remove that local copy.

Passport images, document numbers, names and dates of birth entered through traveler autofill stay in the browser session. The document reader runs locally; we do not upload those documents. Reviewed details clear when you reload or close the page.

Searches and location

If you allow location access, the browser uses it to suggest a nearby airport. Coordinates are not stored or sent to a geocoding service. Flight and hotel searches send the required airports or destination, dates, party counts and preferences to SerpApi. Search results may be cached. Do not enter personal identifiers into search fields.

Service providers and browser storage

The site is hosted through OpenAI Sites on Cloudflare. These services process technical connection data needed to deliver the site. Supabase provides accounts. SerpApi supplies search results. Transactional email delivery uses the configured email provider when enabled. Browser storage keeps sign-in sessions and the plans you save. This version does not add advertising trackers or marketing analytics.

Your choices

You can refuse location access, enter trip details manually, sign out, and remove saved plans. Use Help to request access to or deletion of your account data. We review requests to verify ownership and identify any records that must be retained. We do not promise immediate deletion of every service provider's technical logs.