Privacy Policy

What we collect

• Account info — your email, a hashed password (we never store the password itself), your name if you give one, and your language preference.
• Your conversations — the full chat, including the links the assistant gave you, so you can come back to it later and so the assistant can remember context within a conversation. Iva doesn’t save what it finds as separate plans.
• Search records — for each search the assistant ran in a conversation: the destinations and dates it looked up, how many results came back and the cheapest price found, kept with that conversation.
• Usage records — internal records of what each reply cost us to produce (tokens, searches) and which actions you took in the app.

We don’t take payments and don’t collect any payment details.

Why we collect it

To run the service you signed up for: holding a conversation, remembering it, and searching real flight and accommodation prices on your behalf. We don’t collect anything for advertising, and we don’t sell data to anyone.

Who else sees it

Running your searches means sending parts of your request to the services that do the actual work:

• Anthropic (Claude) — receives your conversation to generate the assistant’s replies.
• Travelpayouts, FlightAPI.io and Apify — receive your search parameters (destinations, dates, budget) to look up real flight and accommodation prices.
• Axiom — receives a detailed log of these requests, for debugging and cost tracking on our side. This is an internal operations tool, not visible to anyone outside the team running Iva.
• Our hosting provider — like any website, processes your IP address as part of simply serving you the page.

We don’t share your data with anyone else, and never for their own marketing purposes.

Affiliate links

Some links in the chat are affiliate links. When you click one, it passes through Travelpayouts, which lets the partner know the visit came from Iva so a booking can be credited to us. The link carries our partner marker, a generic label (“chat”) and the partner page it opens — which can include trip details such as route and dates — but not your name, email or account. Like any link you click, your browser also sends your IP address to Travelpayouts and the partner. Once you are on the partner’s site, its own privacy policy applies.

How long we keep it, and deleting your account

You can delete your account at any time from your profile page. When you do, your conversations and search records (and any plans saved by an earlier version of Iva) are permanently deleted — not just hidden. Your email is replaced with a token that can’t be reversed back to the real address.

Two things are deliberately kept, not tied to your name or email once you delete your account:

• The account record itself, stripped of your name, email and password — it keeps our usage records attached to a real id, and lets signing up again with the same address restore the same account.
• Our own internal cost and usage records for the account (which searches ran, what they cost us) — this is our business record, not a record of you, and we need it for accounting regardless of any one account’s status.

Your rights

You can see and correct your account details, and delete your account and its content, at any time from your profile. If you’d like a copy of your data or have any other request, email us (below) and we’ll sort it out directly.

Cookies

We use two cookies: one to keep you signed in, and one to remember your chosen language. Neither is used for advertising or tracking across other sites, and we don’t run any third-party analytics.

Children

Iva isn’t directed at children, and we don’t knowingly collect data from anyone under 16.

Changes to this policy

If what we collect or do with it changes, we’ll update this page and the date at the top. For a meaningful change, we’ll also let you know directly.

Contact

Questions, requests, or anything else about your data: hello@ivatrip.com.