Privacy policy

Information you provide

We store account information supplied by your sign-in provider, such as your name, email address and profile image, together with sign-in and session records. We also store the trips, places, dates, notes, booking details, photos, files and collaboration choices you enter or import. Travel files can contain personal information about you and other travelers. Only upload information you are entitled to share.

Hosting services process technical request information, such as IP addresses and error logs, to deliver and protect the service. Where enabled, our usage counters record aggregate actions for a trip and day rather than an individual browsing profile.

Connecting Gmail or Hotmail / Outlook

Connecting a mailbox is optional and separate from signing in. You authorize access on Google's or Microsoft's own page. We do not receive your mailbox password. We store the connected account identifier, email address and encrypted access and refresh tokens so the connection can work until you disconnect it or the provider requires authorization again.

Gmail uses the read-only gmail.readonly permission. Personal Microsoft accounts use delegated Mail.Read and offline access. These permissions allow mailbox-wide reading. TappaCiao currently uses them only to find a message you ask to import and retrieve the message you select. A message link you drop can trigger a lookup of that message in your connected mailbox. Lookup results can include message identifiers, subjects, senders and dates.

When you confirm an import, we store a copy of the selected email, including its body and attachments, as a private travel file. We extract text and booking information to help associate it with your itinerary. This mailbox import does not send, change or delete messages in your mailbox, and it does not continuously monitor your inbox. Email and attachment extraction runs on our server without an external AI document service.

TappaCiao's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell mailbox data, use it for advertising, or use it to train generalized AI models.

How information is used and shared

We use your information to authenticate you, organize and display your trips, process your chosen imports, support collaboration, maintain security and respond to requests. We do not sell or rent your personal information.

Trip members with access can see private travel files, including emails and attachments you import into that trip. Public trip views exclude private documents and redact protected booking details. Information you put in itinerary titles or other public fields can still be visible when you share or publish a trip. Trip photos have a different sharing model: anyone with a photo's public URL may be able to open it. Keep sensitive documents in Files.

Service providers process information to run TappaCiao: Vercel hosts the application and file storage, Neon provides the production database, and Google and Microsoft provide sign-in or mailbox authorization as applicable. Information may be processed outside your country. Map, place-search and routing services receive requests needed for their features, such as search terms or coordinates. Loading a remote image in an email preview can contact the image host; these images are hidden until you choose to load them.

Access to Google user data by people is limited to the purposes allowed by Google's Limited Use requirements, such as your explicit consent for support, security investigation, legal obligations or permitted aggregated internal operations. We may disclose information where legally required. If you download, copy or share content with someone else, their copy is outside our control.

Cookies, local storage and security

We use cookies for sign-in sessions and temporary authorization flows. Browser storage also supports preferences and cached or offline trip views. These features are not advertising trackers. On a shared device, sign out and clear this site's browser data if you want to remove locally stored copies.

Mailbox tokens are encrypted in storage. Private-file requests require authorization, and trip permissions control access. These measures reduce risk but cannot guarantee that data will never be lost or accessed improperly.

Retention and deletion

Account and trip information is kept to provide the service until it is removed or you request deletion, subject to records needed for security or legal obligations. Disconnecting a mailbox removes the connection credentials stored by TappaCiao. It does not delete previously imported files or revoke the permission listed in your Google or Microsoft account.

Deleting a file removes it from the trip, but its stored original and recovery information may remain during the 30-day Undo window. After that window, stored files are eligible for cleanup. Cleanup is retried and is not a promise of erasure at an exact time. Backups, service logs, change records and copies held by other people may have different retention periods.

See Delete your data for mailbox disconnection, file deletion and account deletion requests. There is currently no self-service button to permanently erase an entire account. Contact us for a request covering your account, imported data, recovery records or remaining stored copies.

Your choices and requests

You can choose whether to connect a mailbox, what to import and whom to invite to a trip. Subject to applicable law, you can request access to, correction of, a copy of, or deletion of your personal information, or object to or restrict its processing. Write to info@novahourapp.com. We may ask for proportionate identity verification before releasing or deleting data. Never send passwords or authorization tokens.

Policy changes

We will update this page and its date when our practices change.

Travel email discovery is an optional pilot. If you turn it on, we check new inbox message subjects and receipt times to suggest travel confirmations. We keep up to 30 recent suggestions per connected mailbox for up to seven days of successful checks. Turning discovery off, disconnecting, or reconnecting the mailbox clears its suggestions. We retrieve the selected message body and attachments when you confirm import into a trip.