Privacy Policy

Account information: your name, email address, and password (we store a hashed version of your password, never the plain text).

Traveler profile: home airport, and — if you add them — frequent flyer, hotel, and car rental loyalty program numbers.

Booking information: traveler names, dates of birth, gender, and contact details for each person on a booking, along with the flights, stays, and car rentals you search for and book, and your booking and cancellation history.

Payment information: handled directly by Stripe, our payment processor. We receive confirmation that a charge succeeded and its amount, but we don't receive or store your full card number.

Assistant conversations: the messages you send our AI travel assistant and its responses, so the assistant can carry context through a search and booking session.

Technical information: basic device and usage data (like IP address and error logs) needed to keep the Service running and secure.

• To search for and complete flight, stay, and car rental bookings on your behalf through our booking partner, Duffel Limited.
• To process payments and subscriptions through Stripe.
• To power the AI travel assistant's search and booking recommendations.
• To send you transactional email — booking confirmations, password resets, and account notices.
• To respond when you contact support.
• To detect, investigate, and prevent fraud, abuse, and technical problems.
• To meet legal and tax obligations related to bookings and payments.

When you use the assistant, the relevant parts of your conversation and traveler details needed to search or book are sent to a third-party large language model provider (currently OpenAI or Anthropic, depending on our configuration) to generate a response. This is processed under that provider's own API terms, which — as of the date above — do not use API data to train their models by default. We only send what's needed to answer your request or complete a booking, not your full account history.

We share information with the following third parties, only as needed to run the Service:

• Duffel Limited — receives traveler and itinerary details needed to search, price, and book flights, stays, and car rentals with airlines, hotels, and rental companies.
• Stripe, Inc. — receives what's needed to process your payments and manage your subscription.
• OpenAI / Anthropic — receives assistant conversation content, as described above.
• Our email delivery provider — receives your email address and message content to send transactional email (password resets, confirmations).
• Sentry — receives limited technical error data to help us find and fix bugs.
• Railway and Vercel — our infrastructure hosts, which store and run the Service's data and code.

We don't sell your personal information, and we don't share it with advertisers.

We use a single essential cookie to keep you signed in (a session token). We don't use third-party advertising or tracking cookies.

We keep your account and booking information for as long as your account is active, plus a reasonable period after to meet tax, accounting, and legal recordkeeping obligations tied to completed bookings. You can ask us to delete your account at any time — see Section 8.

We use industry-standard measures to protect your information, including encryption in transit, hashed passwords, and never handling raw card numbers on our own servers. No system is perfectly secure, but we take this seriously and will notify you if a breach affects your data as required by law.

You can review and update most of your profile information directly in your account. To access, correct, or delete personal information we hold about you, or to ask a question about this policy, email us at parker@comettravel.io. We'll respond within a reasonable time and verify your identity before making changes.

The Service isn't directed at children, and we don't knowingly collect information from anyone under 18. Account holders must be 18 or older, though a booking can of course include child or infant travelers added by an adult account holder.

Comet Travel is based in the United States, and the information we collect is processed and stored in the United States. If you use the Service from outside the U.S., you understand your information will be transferred there.

We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above.

Comet Travel LLC
1171 E Pony Rider Way Eagle Mountain, UT. 84005
parker@comettravel.io · 801-680-4090