Privacy Policy

Gezelo — contact@gezelo.com. If you have any questions about your data, email us and we'll respond.

Your account (email), your trips and itinerary items, your safety card, checklist items, traveler profile (diet, mobility, languages, emergency contact), collaborators you invite (their email, until they accept), any cover photo you upload, the expenses you log (amount, currency, category, who paid, how it's split, any receipt you attach and the exchange rate used on that date), and the documents you attach to a trip or store in your personal vault. We also count anonymous events like "a landing page was viewed" — an event name and nothing else, with no account id, no IP address and no way back to you.

To render your trips, sync them across your devices, and share read-only links or invite collaborators when you ask us to.

Performance of the service you request (art. 6.1.b GDPR / art. 7, V LGPD) and your consent for optional features (cover uploads, invites).

Only the platform providers needed to run Gezelo (hosting, authentication, database, storage). We never sell your data and there are no advertising trackers. When you use AI features (like the destination briefing), we send only the minimal trip context needed for that request — never your wallet documents, safety card details or contact info. Maps, place search and travel times are served by Google Maps, which receives the place or coordinates being looked up and nothing about your account. Partner booking links pass along the destination and dates only.

For as long as your account exists. Deleting a trip also removes its documents and timeline attachments. Deleting your account from Settings removes your trips, itinerary, safety cards, profile, cover images and personal vault items.

You can export or delete all your data from Settings → Your data at any time. You can also contact us to correct information. Signing out clears the offline copy of your trips stored on that device.

Documents live in two places, and we handle them differently.

Trip documents and timeline attachments are kept in private object storage, encrypted at rest by our storage provider, and shared with the people accepted as collaborators on that trip. They're delivered through signed links that expire in 5 minutes, are excluded from any public share link, and are never sent to AI providers or partners.

Items in your personal vault (outside a trip) are end-to-end encrypted in your browser with a password only you know. We can't read them, and we can't recover them if you lose the password — that's the trade-off for real privacy.

If you turn on alerts, each device you allow stores a push subscription: an endpoint URL issued by your browser's vendor and two keys used to encrypt the message. Notifications are encrypted before they leave our server, so the vendor's push service relays them without being able to read the contents. Turn alerts off in Settings, or revoke the permission in your browser, and the subscription is deleted.

You can connect an AI assistant — Claude, Cursor, ChatGPT or any MCP client — to your account. The connection uses OAuth, so you approve it explicitly and the assistant signs in as you. It is read-only and limited to two tools: list your trips, and open one trip's itinerary, transport and stops. It cannot create, edit or delete anything, and it never reaches your vault documents. Whatever you send to that assistant is then governed by that assistant's own privacy policy, not ours. Revoke the connection from the assistant at any time.

Trip weather shown in the app comes from Open-Meteo (open-meteo.com). Only the destination's coordinates and the trip dates are sent — never personal data. Forecasts are labeled FORECAST; longer-range values are historical averages labeled TYPICAL. Weather data by Open-Meteo.

Reach us at contact@gezelo.com for any privacy question.