Privacy Policy

Effective date: July 1, 2026

Travel Bause is operated by Copernicus AI (“we,” “us”). Postal address: 3540 N Desert Dr., Atlanta, GA 30344. This policy explains what we collect, how we use it, and the control you have over it.

1. What we collect

• Account — your email and authentication identifiers.
• Your preferences & Diary (you provide these) — stated preferences (dietary, seat, cities, style), remembered stays, travel companions, and observed/inferred signals you let Copernicus keep.
• Your trips — itineraries you save to your Portfolio, and the price/coverage alerts you set.
• Billing — managed by Stripe. Card data is entered into Stripe’s hosted checkout and never touches our servers; we store only a link to your Stripe customer and your current plan.
• Usage — basic technical/operational data needed to run the service.

2. How we use it

• To run Copernicus (your concierge) and personalize planning for you — your record is private to you.
• To provide Sterling editorial coverage, your Portfolio, and the alerts you opt into.
• We do not sell your personal data, and we do not use your private record to train shared models.
• Copernicus is an AI persona, disclosed as AI by design; Sterling ratings are produced under named editorial voices (also disclosed as AI). Copernicus may use live web lookup on paid plans for factual trip logistics; it does not rate or review.

3. How your data is protected

• Per-customer isolation — your record is access-scoped to you at the database layer; there is no cross-customer read path.
• No dark copies — when you delete data, we remove the structured record and the raw originals behind it, not just a display row.

4. Your rights and controls

• Export — you can export your full record at any time.
• Delete (erasure) — you can wholesale-delete your account. We purge your profile, Diary, Portfolio, alerts, and billing rows with no dark copy on our side, and we forward the deletion to Stripe (our payment processor).
• How to exercise these controls — Export and Delete are available through in-app controls in your account settings, and you can also submit a request through our request form. We will respond to requests within 30 days.

5. Data we are legally required to retain

If you request deletion, we securely purge your profile and forward the deletion to Stripe. However, we are legally required to retain basic transactions and payment records, processed and stored securely by Stripe under their own legal obligation, for up to 7 years, to meet tax and accounting law. These records are limited to what the law requires (e.g., transaction date, ID, amount, tax) and are not used for any other purpose. We have no separate local financial ledger.

6. Third parties (processors)

• Stripe — payments + the legally required financial record.
• Anthropic — AI model provider.
• Authentication provider — Supabase (also our database host).
• Hosting / CDN — Cloudflare.
• Email routing — Cloudflare.
• Map / geocoding — Mapbox.

7. Contact & changes

Questions or to exercise your rights: legal@travelbause.com. We will post any changes here and update the effective date.