Privacy

Who we are

Tomo (tomo.voyage) is an AI travel-planning service operated by [Legal entity — to be completed before launch]. For anything in this policy, contact hello@tomo.voyage.

Where your trip data lives

• Itineraries stay on your device. Plans you build are stored in your browser’s localStorage. They are never sent to a server unless you choose to share a trip. Clearing your browser data deletes them.
• Shared trips are stored server-side. When you share a trip, a copy of that itinerary is saved on our infrastructure (currently Netlify Blobs) and becomes visible to anyone who has the link. Don’t put anything in a trip you wouldn’t want a link-holder to see. To have a shared trip removed, email hello@tomo.voyage.

Hosting and server logs

Tomo is hosted on Netlify, which keeps standard server logs (such as IP addresses and requested URLs) for operations and security. A backend service on AWS EKS is planned; this policy will be updated before any personal data is processed there.

Analytics — cookieless

We use Plausible, a privacy-friendly analytics service that sets no cookies and collects only aggregate usage statistics — no cross-site tracking, no personal profiles. It loads only when analytics is configured for the site. Because there are no analytics cookies, there is no cookie banner to click.

AI planning (Anthropic Claude)

Tomo’s planning is powered by Anthropic’s Claude. In live mode, the trip description you type — destination, dates, budget, preferences, and your chat messages — is sent to Anthropic to generate and revise your plan. Please don’t include sensitive personal details in a trip description that you don’t want processed for this purpose.

Destination photos and facts

Destination data and imagery come from Google Places and Google Maps, Wikipedia and Wikimedia, and Pexels. Your browser may load media directly from these services, which means they receive your IP address under their own privacy policies, as with any image on the web.

Booking links and affiliates

“Book” links redirect through our /api/click-out endpoint to travel partners — Viator, GetYourGuide, Stay22, and Travelpayouts — so Tomo may earn a commission on bookings. We count the click itself (an anonymous counter); we do not sell or pass personal data to partners. Once you land on a partner’s site, their privacy policy applies.

Your rights (EU/GDPR)

You have the rights to access, correct, delete, and object to the processing of your personal data. Most of your Tomo data is on your own device, where you control it directly. For shared trips, server logs, or any other request, email hello@tomo.voyage. You can also lodge a complaint with your data-protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Changes

When this policy changes, we’ll update this page and the date at the top. Material changes will be called out on the site.