Privacy Policy

Last updated: April 2026

1. What We Collect

We collect the search queries you submit to provide AI-generated travel answers. We do not collect personally identifiable information unless you voluntarily provide it via the contact channels listed below.

We use standard server logs (IP address, browser type, timestamp) for security and abuse prevention. Logs are retained for 30 days and are not used for advertising or profiling.

2. How We Use Your Data

• To answer your travel questions using our AI search engine
• To cache responses in Redis (24-hour TTL) to improve performance
• To monitor uptime, prevent abuse, and rate-limit requests

We do not sell your data to third parties.

3. Third-Party Services

Your queries and the resulting answers may be processed by the following sub-processors. Each is bound by a Data Processing Agreement (where applicable) and lists its own privacy practices:

• Groq — LLM inference provider for travel answers. Groq's Privacy Policy.
• Pinecone — Vector database (stores transcripts and embeddings, not user queries). Pinecone's Privacy Policy.
• Tavily — Web search for live logistics info (visa, transport, prices). Queries are sent server-side; no PII is forwarded. Tavily's Privacy Policy.
• Upstash — Redis cache and session memory. Upstash's Privacy Policy.
• Google Cloud (Cloud Run) — Backend hosting in the us-central1 region. Google Cloud Privacy Notice.
• Vercel — Frontend hosting and CDN. Vercel's Privacy Policy.
• Affiliate partners (Booking.com, Klook, Wise) — We may include affiliate links in responses. We do not share PII with them; the affiliate ID is appended to outbound URLs only when you click. See our Affiliate Disclosure.

4. Cookies

We do not currently set tracking, analytics, or advertising cookies. Some cookies may be set by Vercel for security and routing; these are strictly necessary for the site to function.

5. Your Rights

Under GDPR (EU/UK), CCPA/CPRA (California), the Australian Privacy Act 1988 (as amended in 2024), and equivalent laws, you have the right to access, correct, port, or delete data we hold about you. To exercise any of these rights, contact us at gurprit@potentialz.com.au. We will respond within 30 days.

6. Data Retention

Query cache data is deleted after 24 hours. Server logs are retained for 30 days. We do not store your queries beyond the cache window.

7. International Transfers

Our backend runs in Google Cloud's us-central1 region (United States). If you are accessing the site from the EU/UK, your data is transferred outside the EU under the European Commission's Standard Contractual Clauses with each sub-processor.

8. Contact

For privacy questions or to exercise your rights, email gurprit@potentialz.com.au.