隐私政策

1. 我们收集的信息

我们收集您直接提供给我们的信息，包括：

• 账户信息（姓名、电子邮件、密码）
• 搜索偏好和历史记录
• 订阅的支付信息
• 与我们支持团队的通信

2. 我们如何使用您的信息

我们使用收集的信息来：

• 提供和改进我们的里程票搜索服务
• 处理您的订阅付款
• 向您发送重要更新和通知
• 分析和优化我们的服务性能

3. 信息共享

我们不会出售您的个人信息。我们可能与以下方共享您的信息：

• 协助运营我们平台的服务提供商
• 法律要求时的法律机构
• 经您明确同意的第三方

4. 数据安全

我们实施适当的安全措施，保护您的个人信息免受未经授权的访问、更改或披露。

5. Cookie 和跟踪

我们使用 Cookie 和类似技术来增强您的体验并收集使用数据以改进我们的服务。

6. 您的权利

您有权：

• 访问您的个人信息
• 更正不准确的数据
• 请求删除您的数据
• 选择退出营销通信

7. 儿童隐私

我们的服务不面向 13 岁以下的儿童。我们不会故意收集 13 岁以下儿童的信息。

8. 隐私政策变更

我们可能定期更新本隐私政策。我们将通过电子邮件或平台通知您任何重大变更。

9. 联系我们

如对本隐私政策有疑问，请联系我们。

10. AI Processing and Providers

When you use our AI travel assistant, your messages and the relevant travel context (such as your saved balances, status and trips) are sent to large-language-model providers to generate a response. We use the following processors, who act on our instructions and under their own enterprise data terms:

• Anthropic (Claude) — large language model inference
• OpenAI — large language model inference and embeddings
• Cloudflare — AI gateway, model routing and embedding generation

11. Chat, Documents and Embeddings

To run the AI assistant we store and process:

• Your chat history with the assistant, so conversations persist between sessions
• Documents you upload (for example hotel folios), used to answer your questions
• Vector embeddings derived from your documents, used to retrieve relevant passages

We retain this data while your account is active. Deleting a document deletes the embeddings derived from it. Deleting your account deletes your chat history, your uploaded documents and all embeddings derived from them. We do not use your chat history, documents or embeddings to train AI models, and our LLM processors are instructed not to train on your data.

12. Bring Your Own Key (BYOK)

If you provide your own AI provider API key, we store it encrypted at rest. We use it only to make requests on your behalf. We never log the key, never use it for any purpose other than fulfilling your requests, and never use it or your data for model training. You can remove your key at any time.

13. Connected Accounts

If you connect third-party accounts (such as loyalty-account aggregators or award-search tools), we store the access credentials encrypted at rest and use them only to retrieve the data you've asked us to surface in the product. You can disconnect a connected account at any time, which removes its stored credentials.

14. Third-Party Tools You Connect

You can connect third-party search tools to your AI assistant. If you do, those tools may receive the travel context relevant to your request — which can include your balances, status, trips and search terms. Third-party tools are operated by their own providers under their own privacy terms, and we are not responsible for how they handle your data once it leaves our platform. We show you what a tool can access and require your explicit consent before it goes live, and you can disconnect it at any time.

15. Deleting Your Account

You can delete your account at any time from your account settings, or by contacting us. Deletion removes your personal data — including saved balances, trips, uploaded documents, chat history, embeddings, connected-account credentials and any stored API keys — and cancels any active subscription.