Legal

Privacy Policy

Last updated: April 9, 2026

Your privacy matters to us. This Privacy Policy (“we,” “our,” or “us”) collects, uses, stores, and protects your personal information when you use our travel planning platform and related services.


01Information We Collect

Information you provide

  • Account details: name, nickname, email address, and password (hashed)
  • Trip data: destinations, dates, itineraries, journal entries, packing lists, and photos
  • Preferences: travel interests, wishlist items, and budget information
  • Payment information: processed securely by our third-party payment processor — we do not store full card numbers
  • Communications: messages you send to us for support or feedback

Information collected automatically

  • Device information: browser type, operating system, and device identifiers
  • Usage data: pages visited, features used, and interaction patterns
  • Log data: IP address, access times, and referral URLs
  • Cookies and similar technologies (see Section 06)

02How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Velora Hub platform
  • Process transactions and manage your subscription
  • Enable collaborative features (trip sharing, group planning)
  • Send transactional notifications (booking confirmations, subscription updates)
  • Personalize your experience and provide relevant recommendations
  • Track referral program activity and award applicable rewards
  • Analyze usage patterns to improve our Service
  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your trip data or personal content for advertising purposes.

03Data Sharing & Third Parties

We share your information only in the following circumstances:

  • Service providers: Payment processors, hosting providers, and analytics tools that help us operate the Service. These providers are bound by confidentiality obligations and may only process your data for the purposes we specify.
  • Collaborative features: When you share a trip or invite collaborators, the information you choose to share becomes visible to those users.
  • Legal requirements: When disclosure is required by law, court order, or governmental regulation.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, with notice provided to you.

03aGoogle Maps & Places Data

Velora Hub integrates with the Google Maps Platform (Maps JavaScript API, Places API (New), and Places Autocomplete) to provide map display, place search, place discovery, and location-linking features. When you use these features:

  • Data we store at link time: When you link an itinerary item, booking, or wishlist entry to a Google Maps place, we store: (a) the Google Place ID — a stable unique identifier that Google permits to be stored indefinitely; (b) geographic coordinates (latitude and longitude) — used exclusively for rendering map pins on Google Maps within the Velora Hub application; and (c) the place name at the time of linking. This data is captured once and not re-fetched.
  • Data we do NOT persistently store: Google-provided photos, star ratings, review text, review counts, opening hours, phone numbers, websites, or editorial summaries. These are fetched live from Google via the Place ID each time you open a place detail view and are displayed temporarily without being written to our database.
  • How coordinates are used: Stored coordinates are used exclusively to render pins on a Google Map within the Velora Hub application. We do not use Google-derived coordinates for any purpose outside of Google Maps display, nor do we display them on non-Google map providers. This complies with the Google Maps Platform Terms of Service.
  • Data sent to Google: When you search for places (via text search or autocomplete), your search query text and optional location bias are sent to Google's servers. When you view place details, the Place ID is sent to retrieve current information. Google may collect and process this data according to their Privacy Policy.
  • Data deletion: When you unlink a place, delete the associated itinerary item or booking, or delete your account, all stored Place IDs and coordinates are permanently removed from our database.

03bGoogle Photos Integration

Velora Hub offers an optional integration with Google Photos that allows you to create trip photo albums directly in your Google Photos library. This integration uses Google's OAuth 2.0 authorization and the Google Photos Library API.

Permissions we request

When you connect Google Photos, we request the following scopes:

  • photoslibrary.appendonly — Upload photos and create albums in your Google Photos library on your behalf
  • photoslibrary.readonly.appcreateddata — Read only the albums and photos that Velora Hub created (we cannot see your other Google Photos)
  • photoslibrary.edit.appcreateddata — Edit albums that Velora Hub created (e.g., renaming a trip album)

What we access and store

  • OAuth tokens: We store your Google OAuth refresh token (encrypted at rest) so the integration stays connected between sessions. Access tokens are short-lived and refreshed as needed.
  • Album IDs: We store the Google Photos album IDs for albums created by Velora Hub, so we can add photos to the correct album.
  • We do NOT access: Your existing Google Photos library, albums you created outside Velora Hub, your Google account profile data beyond what is needed for authentication, or any other Google services.

How we use this data

  • Creating trip-specific photo albums in your Google Photos when you initiate the connection
  • Uploading photos you select within Velora Hub to your Google Photos trip album
  • Displaying photos from Velora Hub–created albums within the app

We do not use your Google Photos data for advertising, analytics, or any purpose other than providing the integration feature to you.

Revoking access

You can disconnect Google Photos from Velora Hub at any time through your account settings. You can also revoke access directly from your Google Account permissions page. Upon disconnection, we delete your stored OAuth tokens. Albums and photos already created in your Google Photos library remain in your Google account — we do not delete them.

Compliance

Velora Hub's use of Google Photos data complies with the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the Google Photos integration feature. We do not transfer Google user data to third parties except as necessary to provide the Service, comply with laws, or as part of a merger/acquisition with notice to users.

04Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Hashed and salted password storage (bcrypt)
  • Regular security audits and vulnerability assessments
  • Access controls limiting employee access to personal data on a need-to-know basis

While we strive to protect your information, no system is completely secure. We encourage you to use a strong, unique password and enable any available security features on your account.

05AI & Automated Data Processing

Velora Hub uses artificial intelligence and automated processing to enhance your travel planning experience. This includes:

  • AI-generated itineraries: When you use our itinerary builder, your trip details (destinations, dates, preferences) are sent to AI language models to generate personalized suggestions. These inputs are processed in real time and are not stored by the AI provider.
  • Smart packing suggestions: Your destination, travel dates, and activity preferences may be analyzed to recommend packing items.
  • Content generation: AI may be used to generate descriptions, summaries, or recommendations based on your travel data.
  • AI-powered customer support: Our primary support channel uses an AI assistant to help resolve questions about your account, billing, features, and policies. Your support conversations are processed by the AI system to provide relevant answers. If you request escalation or submit a contact form, your message and relevant account details (name, email, subscription plan) are shared with our human support team for follow-up.

Important: We do not use your personal data to train AI models. AI processing is performed solely to deliver the requested feature to you. You can choose not to use AI-powered features, and your core travel planning experience will remain fully functional.

06Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request account deletion, we will remove your data within 30 days, except where retention is required for legal, tax, or audit purposes.

Anonymized and aggregated data (which cannot identify you) may be retained indefinitely for analytical and product improvement purposes.

07Cookies & Tracking

Velora Hub uses cookies and similar technologies for the following purposes:

  • Essential cookies: Required for authentication, security, and core functionality. These cannot be disabled.
  • Analytics cookies: Help us understand how users interact with our platform so we can improve the experience.

You may control cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.

08Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Export your data in a portable format
  • Restrict certain processing of your information
  • Object to processing based on legitimate interests

To exercise any of these rights, reach out via our in-app support chat or contact form. Data rights requests are always reviewed by a human team member. We will respond to your request within 30 days.

09Children's Privacy

Velora Hub is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

10International Data Transfers

Your information may be processed and stored on servers located in the United States. If you are accessing Velora Hub from outside the United States, please be aware that your information will be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your country.

By using the Service, you consent to the transfer of your information as described in this Privacy Policy.

11Changes to This Policy

We may update this Privacy Policy periodically. When material changes are made, we will notify you via email or in-app notification at least 14 days before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Reach out via our in-app support chat or our contact form.