Privacy policy

What we collect

When you create an account we store your email address and a hashed password. Passwords are never stored in a form we can read. If you sign in with Google we store your Google account identifier and the name on that account, and we never receive your Google password.

If you fill in your profile we store your name, postal code, age, gender and travel interests. Every one of those is optional except the postal code, which is what your trips are routed from.

We store the trips you plan: the conversation with the planner, the itinerary, and the routes and estimates calculated from it. Trips planned without an account are deleted 90 days after they were last used, unless they have a share link.

We work out roughly where you are from your internet address, on our own server, to suggest where a trip starts. If you choose to share your device’s location, we store it with the trip as well.

What stays on your device

Your currency, language, distance and temperature preferences are stored in your browser and are never sent to us. Signing in on another device starts from the defaults.

Photograph lookups that returned nothing are remembered in your browser for seven days so we do not ask for them again on every visit.

If you plan without an account, your browser keeps a key to those trips until you have not used it for 90 days, so you can come back to them and keep them when you sign up. Anyone using the same browser profile can open them.

If you arrive through an affiliate’s referral link, our affiliate partner PromoteKit sets a cookie that remembers which affiliate sent you, for 60 days. If you subscribe, that referral is attached to your subscription so the affiliate can be paid a commission. The affiliate does not see your account, your trips or your payment details.

Who else sees a trip

Planning a trip sends your messages and the trip’s details to an AI provider, which writes the planner’s replies.

Place names and coordinates are sent to OpenStreetMap’s Nominatim for geocoding and to the OSRM routing service for drive times (Google Maps, for subscribers). The map is drawn by Google Maps, which your browser loads directly, and some places’ photographs and details come from Google. Descriptions and photographs come from Wikipedia, Wikivoyage, Wikimedia Commons and Wikidata, which receive the name of the place being looked up.

These services receive what is needed to answer the question and no account information. We do not sell your data, and we do not share it with advertisers.

Sharing a trip

A trip is private until you create a share link. Anyone with that link can read the itinerary — the plan, the route and the estimates — but not the conversation behind it, and not anything about your account. Revoking the link from the trip stops it working immediately.

Your data, and getting rid of it

Account settings has an export that gives you your profile, preferences and every trip as a JSON file.

Deleting your account deletes the account itself, not just the profile: your trips, plans and conversations are removed with it. It cannot be undone and we cannot restore it.

To check the planner’s work we keep a working log of how it read your messages and of replies it replaced, which includes the text of those messages. Its lines are deleted after 90 days, and within a day of the trip they are about being deleted.

Email

We email you to confirm your address, to let you reset your password and, if you sign up with Google, once to welcome you. We send news about RTour only if you ask for it, and each of those emails has a link to stop them.

Contact

RTour is operated by NestBridge LLC, a Delaware limited liability company. Questions about any of this go to help@rtour.ai.