NuriTrip Privacy Policy
NuriTrip is a travel-planning service operated by Siriwong Wongthongserm (“NuriTrip,” “we,” “us,” or “our”). This Privacy Policy explains what information NuriTrip handles, why we use it, when it may be disclosed, and the choices available to you.
Information we collect
We collect information you provide, information created while you use NuriTrip, and limited technical information needed to operate and improve the service.
Account and profile information
When you create or use an account, we collect your email address and account identifiers used for authentication.
When you log in or connect an AI assistant, we keep a record of that session, including the device or app used, its network address, and when it was active. These records are deleted with your account.
If you choose to provide them, we may also store profile information such as your display name, profile image, home location, travel preferences, and traveler details. Traveler details may include the number and ages of adults or children included in a trip.
Trips and travel content
We store content you add to NuriTrip, including trip names and dates, destinations, itinerary items, notes, booking status, place information, reservation details, attachments, and collaboration or invitation information.
This information may reveal where and when you plan to travel.
Forwarded booking emails and files
If you forward a booking email to NuriTrip, we process information contained in that email. This may include sender and recipient addresses, the subject and message body, confirmation numbers, passenger or guest information, dates, locations, prices, and attachments.
We use this information to create or update itinerary items and show the source material to authorized users.
Chat and AI-assisted features
When you use NuriTrip’s chat or AI-assisted features, we process your messages, relevant profile preferences, trip information, and related booking content to generate responses, extract itinerary details, and carry out requests you make.
AI-generated results may be stored with your trip or chat history.
Place searches
When you search for a place, we may process your search text and receive place information such as its name, address, map identifier, coordinates, operating hours, rating, and price level.
Diagnostics and technical information
We collect limited diagnostic information needed to operate and improve NuriTrip. This may include crash reports, stack traces, relevant application state, device and operating-system information, app version, network state, installation or device identifiers, session identifiers, and an internal user identifier.
Our website and infrastructure providers may also process IP addresses, browser or device information, request logs, and security signals when you connect to the service.
How we use information
We use information to:
- Create and secure your account
- Provide, synchronize, and personalize trip-planning features
- Process forwarded bookings, attachments, place searches, and chat requests
- Enable trip sharing and collaboration that you request
- Carry out the requests you make through an AI assistant you connect
- Maintain, troubleshoot, and improve reliability and performance
- Prevent fraud, abuse, and unauthorized access
- Communicate with you about the service or respond to support requests
- Comply with applicable law and enforce our terms and policies
We do not currently sell personal information or use it for third-party advertising.
When information is disclosed
We may disclose information in the following circumstances:
- People you collaborate with: Information added to a shared trip is available to the people you invite according to their access level. Do not add information to a shared trip that you do not want those people to see.
- AI assistants you connect: If you connect NuriTrip to an AI assistant, we send that assistant the trip, itinerary, and profile information it requests on your behalf while the connection is active. The section below describes what it can reach and how to disconnect it.
- Service providers: We use providers that support authentication, authorization for connected AI assistants, crash reporting, cloud hosting, database and file storage, synchronization, email delivery and routing, maps and place search, security, and AI processing. These include services from Google Firebase, WorkOS, Google Maps Platform, Amazon Web Services, Cloudflare, PowerSync, and the AI service providers used by NuriTrip. They process information as needed to provide their services to us.
- Legal and safety reasons: We may disclose information when reasonably necessary to comply with applicable law or a valid legal request, protect users or the public, investigate abuse, or protect the rights and security of NuriTrip.
- Business changes: If NuriTrip is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to appropriate safeguards.
Retention
We retain information while your account is active and for as long as reasonably needed to provide NuriTrip, maintain security and integrity, resolve disputes, and meet legal obligations. Retention may vary based on the type of information and the reason it is held.
After information is deleted from active systems, limited copies may remain temporarily in routine backups, security records, or logs until they are overwritten or no longer needed.
We may retain particular records when reasonably necessary for fraud prevention, security, legal compliance, or the establishment or defense of legal claims.
Account and data deletion
You may permanently delete your NuriTrip account and associated personal data in the NuriTrip app by going to Account → Settings → Close account.
Closing your account logs you out and records your deletion request. We then permanently delete:
- Your profile and travel preferences
- Trips you own, including itinerary items and notes
- Forwarded booking emails and attachments that no remaining trip still needs
- Your NuriTrip chat history
Trips you own will also be deleted for everyone you shared them with. Trips owned by someone else will remain, but your access will be removed.
Items and documents you added to someone else’s trip stay with that trip, no longer attributed to you.
If you cannot access the app, you may request deletion by emailing privacy@nuritrip.com from the email address associated with your account. Instructions are also available on our account-deletion page.
We may take reasonable steps to verify your identity and protect the account before completing a deletion request.
Connected AI assistants
You can connect your NuriTrip account to an AI assistant that supports the Model Context Protocol. Connecting is your choice: you log in to NuriTrip and approve the connection before an assistant can reach anything.
While a connection is active, the assistant can read the trips and itinerary items you have access to, and change the ones you can edit. What it reads includes titles, dates, destinations, notes, booking status, confirmation references, place details, the booking details we extracted from a forwarded email, and the trip’s booking-forwarding email address. It can also read your display name, email address, first and last name, travel preferences, and home city and country. For the other people on a trip you share, it can read their display name; their email address and first and last name only on a trip you can edit. The forwarded emails themselves, their attachments, and your NuriTrip chat history are not available to a connected assistant.
We send this information when you or the assistant asks for it, not on our own initiative. We do not receive your conversation with the assistant, only the requests it makes and the content those requests carry. Changes it makes are saved to your trip, and we keep a record of each one, including the affected items as they were before and after the change, so it can be reviewed later.
Connecting uses WorkOS as the authorization service. WorkOS receives your email address and NuriTrip account identifier so it can issue the access token the assistant uses. It does not receive your trips or itinerary content. NuriTrip does not store that token and checks it on every request.
What the assistant’s provider does with the information it receives, including how long it keeps it and whether it is used to improve their own models, is governed by that provider’s privacy policy rather than this one. Read it before you connect.
You can disconnect NuriTrip at any time from the assistant’s settings, which prevents it from renewing its access. Logging out of your NuriTrip account on the web does not end a connection that is already active. It only means the next one asks you to log in again. An access token already issued keeps working until it expires, which is typically within an hour.
Disconnecting is not the same as closing your account. Disconnecting leaves your NuriTrip data in place, and closing your account deletes it as described above. Information an assistant already received is held by its provider, so ask that provider to delete it.
Security
We use reasonable technical and organizational measures designed to protect information, including encrypted network connections and access controls.
However, no storage or transmission method is completely secure, and we cannot guarantee absolute security.
International processing
NuriTrip and its service providers may process information in the United States and other countries where they operate. Data-protection laws in those locations may differ from those where you live.
Children’s privacy
NuriTrip is for people 18 or older organizing travel. An adult may provide limited information, such as age, about a child included in a trip.
Please do not submit unnecessary identifying or sensitive information about children. If you believe a child has provided personal information directly to NuriTrip, contact us so we can review and address it.
Your choices and rights
You can review or change certain account, profile, and trip information through NuriTrip.
You may also ask us to provide access to, correct, or delete personal information by contacting us. Depending on where you live, you may have additional privacy rights.
We may need to verify your identity before acting on a request, and some requests may be limited where permitted by law.
Third-party destinations
NuriTrip may link to airline, hotel, restaurant, map, booking, or other third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.
Changes to this policy
We may update this Privacy Policy as NuriTrip changes. We will post the updated version here and revise the effective date.
If a change is material, we may also provide notice through the app or another appropriate channel.
Contact us
For privacy questions or requests, contact:
Siriwong Wongthongserm
Email: privacy@nuritrip.com
Website: nuritrip.com