Privacy policy

Trip Agent is run by Andie Yam. Last updated 2 November 2026.

What Trip Agent is

Trip Agent is a small trip assistant for a group of friends and family. It finds booking confirmations in email you choose to share, builds a shared trip, points out what is missing, and publishes a calendar for that trip. People talk to it in Slack.

What it accesses

• Your Google account basics: your name and email address, to know who you are.
• Your Gmail, read-only: if you connect it, Trip Agent can search and read your messages. It cannot send, change or delete anything. It uses this only for trips you have chosen, and only when someone on that trip asks for a refresh. It never reads your email in the background.
• Slack messages sent to the bot: only messages that mention Trip Agent or use its commands. It does not read other messages in the channel.

What it stores

• Trip facts: for example a flight number, times and places, a hotel and its dates, and a cancellation deadline.
• A pointer to each email: the message id, the sender's domain and the date received. It does not store the email text or attachments.
• Never stored: passport, card, ticket or loyalty numbers. These are filtered out before anything is saved.
• Your Google sign-in token: kept encrypted so the app can read your mailbox when you ask. It is deleted when you disconnect.
• Who is on each trip: your name, your Slack identity, and your choice of which trips your mailbox contributes to.

How it uses your data

Your data is used only to provide the features you can see: building and checking your trips, answering questions about them in Slack, publishing the trip calendar, and posting reminders. It is not sold, used for advertising, or used to build profiles.

Who it is shared with

• The other people on the trip can see the trip facts. They cannot see your email or anything else in your mailbox.
• Anthropic, the provider of the Claude AI model, receives the text of a booking email so that the facts can be extracted, and the text of messages you send to the bot in Slack. Anthropic processes this to provide the service and, under its commercial terms, does not train its models on it. Anthropic may keep inputs and outputs for up to 30 days.
• Slack carries the messages the bot sends and receives.
• Supabase and the server host store the data described above.
• Nobody else, except where required by law or to protect security.

Google API data

Trip Agent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Workspace APIs are not used to develop, improve or train generalised AI or machine-learning models. People do not read your email, except with your permission for a specific message, or where needed for security or to comply with the law.

Trip calendars

Each trip's calendar is served at a long, secret web address. Anyone who has the address can read that trip's calendar, so share it only with people you trust. The trip's owner can revoke an address and create a new one.

Keeping and deleting your data

• Disconnect Gmail: you can disconnect your mailbox at any time. Trip Agent then deletes the sign-in token it holds and stops reading your email. You can also remove its access at myaccount.google.com/permissions.
• Stop contributing to a trip: withdraw your mailbox from a trip, and it will not be searched for that trip again.
• Ask for deletion: email andie.yam.dev@gmail.com and your account, tokens and the facts and email pointers that came from your mailbox will be deleted.
• Trips: trip facts are kept until the trip is deleted or you ask for them to be removed.

Accuracy

Trip Agent uses an AI model to read emails and answer questions. It can make mistakes. Check dates, times and bookings against your confirmation before you rely on them.

Changes

If this policy changes, the date at the top will change. Material changes will be announced to people who use Trip Agent.

Contact

Andie Yam, andie.yam.dev@gmail.com.