Privacy Policy

Jetzo ("Jetzo", "we", "us") is an independent web app that finds travel booking confirmations in your Gmail and organizes them into trips: flights, hotels and other stays, car rentals, trains, buses, ferries, tours and activities, restaurant reservations and event tickets.

Questions, requests or complaints about privacy: gai.zilb@gmail.com.

We request only the Google permissions (OAuth scopes) the app needs:

• Sign in with Google: openid, email and profile. We receive your Google account ID, email address, name and profile picture URL, and use them only to create and identify your Jetzo account.
• Gmail, only if you connect a Gmail account in Settings: https://www.googleapis.com/auth/gmail.readonly (read-only). We use it to search your mailbox for travel booking emails (messages from known airlines, hotels, booking sites, car-rental companies, tour, restaurant, ticket and rail/bus/ferry providers, or with booking-confirmation subjects, from roughly the last 12 months) and to read those messages so we can extract the booking details.

Read-only means we cannot send, delete, label or change any email, and we never do. We do not access your contacts, calendar, Drive or any other Google service. You can also create an account with an email address and password instead of Google sign-in; then we store your email, name and a bcrypt hash of your password (never the password itself).

Gmail data is used for one purpose only: to identify travel booking emails and extract their booking details so we can show your trips, timelines, reminders (for example free-cancellation deadlines), duplicate and overlap checks, spend totals, and price-drop alerts for hotel bookings that still have free cancellation (you can turn this off per booking).

• Each matching email is processed in memory during a sync. A quick filter first skips mail that is clearly not a booking (newsletters, promotions).
• To read a booking email reliably we send its text (sender, subject, date, the message text with styling removed, and the links in it that look like a booking page) to our AI provider, Anthropic, through its API. Anthropic returns structured booking details (type, dates, confirmation number, places, price). Built-in parsers check the result. You can turn AI reading off in Settings; then only the built-in parsers are used.
• Email content is not stored. The subject, body, HTML and attachments are discarded as soon as a message has been processed; they are not written to our database or our logs. Only the extracted booking details and the metadata listed in section 4 are kept.
• Anthropic processes this data on our behalf under its commercial API terms, which do not allow it to use the data to train its models. Neither we nor our AI provider use your Gmail data to train, improve or develop general AI or machine-learning models.
• We do not use Gmail data for advertising, we do not sell it, and we do not use it to build profiles unrelated to your trips.

• Account: Google account ID, email address, name, profile picture URL; or, for email sign-up, email, name and password hash.
• Linked Gmail accounts: the Gmail address and a Google OAuth refresh token, encrypted at rest, so syncs can run. Short-lived access tokens are kept in memory only.
• Extracted booking details: booking type, provider, confirmation number, dates and times, places and addresses, flight/train numbers and airports or stations, price and currency, party size, free-cancellation deadline, car type, the provider's manage-booking link and the property's website when the email contains them, and the trips they are grouped into.
• Email metadata (no content): Gmail message ID and thread ID (to avoid importing the same email twice and to let you open the original email in Gmail), the sender's domain, the date the email was received, and a processing status for message IDs that were already checked.
• Usage records: for each AI request, the model, token counts, cost, time and message ID (no email content); for quality checks, the field values extracted by the AI and by the built-in parsers.
• Preferences: AI reading on/off, display currency, email alerts on/off and the language you choose (used for the app and alert emails). Language and theme are also kept in your browser (localStorage), together with your sign-in token.
• Hotel price watch: for hotel bookings that still have free cancellation, a daily price history (date, price, currency, booking site, room name), the Google Hotels identifier of the hotel and approximate hotel coordinates; your price-drop alerts; and, if you turn on push notifications, your browser's push subscription endpoint and keys.
• Payments, only if you subscribe to a paid plan: your PayPal subscription ID, plan, subscription status and payment records (event ids, amounts and dates). You pay on PayPal's site; your card, bank and PayPal account details never reach our servers.
• Technical logs: error and timing information needed to run the service. They do not contain email content.
• Product analytics in our database: when you signed up, last signed in and were last active, and a short list of steps you took (for example signed up, connected Gmail, created a trip, saw the subscription offer, started checkout, subscribed), each with its time. It is deleted with your account.
• Website statistics: we run our own copy of Umami at stats.jetzo.app, on our server. It counts page views, referring sites, country, browser, device type and the steps listed above. It sets no cookies and stores nothing in your browser, and it does not keep your IP address. No data goes to Google or any other analytics company.

We use no cookies for analytics or advertising, and no third-party analytics.

We do not sell, rent or trade your personal data, and we do not share it with advertisers or data brokers. We share data only with service providers that help us run Jetzo, and only as needed for that:

• Anthropic, PBC (AI extraction of booking details from booking emails, as described in section 3).
• PayPal, through the PayPal company that serves your country (payment processing, only if you subscribe to a paid plan). PayPal processes your payment under its own privacy statement.
• Our hosting provider, which runs the server and database in a data center.
• Google (sign-in and the Gmail API, under Google's own privacy policy).
• DataForSEO (Google Hotels price lookups for price watch). We send only the hotel name, approximate coordinates, dates, number of guests and currency; never your name, email, confirmation number or any email content.
• Resend (sends alert emails such as price drops and free-cancellation reminders). It receives your email address and the alert text. You can turn email alerts off in Settings or with the unsubscribe link in every email.
• OpenStreetMap Nominatim (to find a hotel's approximate location once for price watch; we send only the hotel name and city/address).
• Your browser's push service (e.g. Google, Apple or Mozilla), only if you turn on push notifications, to deliver the alert text to your device.

To convert spend totals into a display currency we request public exchange rates from the Frankfurter API (ECB reference rates). Those requests contain only dates and currency codes, no personal data.

We may also disclose information if required by law or a valid legal request, to protect the security of the service or its users, or as part of a merger or sale of the service, in which case this policy, including the Limited Use commitments below, continues to apply.

Some providers process data outside your country (for example in the United States); they are bound by contractual data-protection commitments.

Jetzo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail data only to provide and improve the user-facing features of Jetzo described in this policy (finding and organizing your travel bookings).
• We do not transfer Gmail data to others except as necessary to provide or improve those features (for example to our AI provider for extraction), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
• We do not use or transfer Gmail data for serving advertisements, including retargeting, personalized or interest-based advertising.
• We do not sell Gmail data, and we do not use it to determine creditworthiness or for lending purposes.
• No human reads your Gmail data unless you give us explicit consent for specific messages (for example when you ask for support), it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized for internal operations.
• We do not use Gmail data to train generalized AI or machine-learning models.

We keep your data while your account is active, so your trips stay available.

• Disconnect a Gmail account: Settings → Gmail accounts → remove. Its stored OAuth token is deleted immediately and no further emails are read. Bookings already imported stay in your account until you delete them or your account.
• Delete individual bookings or trips at any time from the trip page.
• Delete your account: Settings → Delete account. This permanently deletes your account, your linked Gmail accounts and their tokens, your trips and bookings, the list of processed message IDs and your usage records. Trips you shared with other members (for example a household using the same mailbox) are handed over to them instead of being deleted.
• Revoke Jetzo's access to your Google account at any time at myaccount.google.com/permissions. Syncs stop working at once; you can then delete your account as described above.
• You can also email gai.zilb@gmail.com to ask for a copy of your data, a correction or deletion. We answer within 30 days.

Copies of the database in server backups may persist for a limited period after deletion before they are removed.

• All traffic to Jetzo uses HTTPS (TLS).
• Google OAuth refresh tokens are encrypted at rest (Fernet: AES with HMAC authentication); the key is kept separately from the database and its backups.
• Passwords are stored only as bcrypt hashes.
• The application runs on a server whose administrative access is restricted to the operator; the database is not exposed to the internet.

No method of transmission or storage is 100% secure, but we work to protect your data and will notify affected users of a breach as required by law.

Depending on where you live (for example under the GDPR or the Israeli Privacy Protection Law) you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a data-protection authority. Use the in-app controls above or contact us to exercise these rights.

Jetzo is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. The effective date at the top shows when it last changed. If a change materially affects how we use Google user data, we will tell you in the app or by email before it takes effect and, where required, ask for your consent again.

Email: gai.zilb@gmail.com