Privacy Policy

The data controller for esqap.com is [legal entity name and registered address]. For any privacy question or request, email support@esqap.com.

If you create an account:

• your name and email address;
• a hashed password — we never store the password itself, and cannot read it;
• if you sign in with Google: your Google account ID, name, email and profile picture URL;
• your language and currency preferences;
• trips and itineraries you create, and any booking records attached to your account.

If you use the AI planner:

• the text you type describing your trip, and the structured details extracted from it.

Whether or not you have an account:

• your searches, so we can return results;
• an approximate country, derived from your connection, used only to pick a default region and currency — which you can change at any time;
• standard server logs, including IP address, for security and rate limiting.

Stored in your browser, not on our servers:

• esqap_token — keeps you signed in;
• esqap-market — your chosen region and currency;
• esqap-saved — your saved items, which stay on that device and are not synced to us;
• esqap-search-mode — whether you last used Search or Ask AI.

We do not sell your personal information. We share it only with the services needed to run ESQAP:

• xAI — text you enter in the AI planner is sent to xAI’s API to be processed. Do not type anything into the planner that you would not want shared with a third party.
• Resend — your email address, to send account emails such as password resets.
• Google — only if you choose to sign in with Google, to verify your sign-in token.
• Travelpayouts — we run their analytics and attribution script on our pages. It sets its own identifiers and can see the pages you visit on this site.
• Travel providers — when you follow a link, we pass a random click identifier so the provider can attribute the referral. It carries no personal information. Once you arrive on their site, their privacy policy applies.

We may also disclose information where the law requires it, or to protect the security of the service.

• To perform our contract with you — running your account and returning search results.
• Legitimate interests — keeping the service secure, preventing abuse, and understanding how it is used.
• Consent — where required for analytics and attribution cookies, which you can decline.

Account data is kept while your account is open, and deleted within [retention period — e.g. 30 days] of you closing it, except where we must keep records longer by law. Server logs are kept for [log retention period — e.g. 90 days]. AI planner text is processed to answer your request; retention by our AI provider is governed by their own policy.

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, take it elsewhere in a portable form, and — where we relied on consent — withdraw that consent.

If you are in the UK or EU, you may also complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these, email support@esqap.com. We will respond within one month.

The services above operate in various countries, so your information may be processed outside the country you live in. Where that happens from the UK or EEA, we rely on the safeguards those providers have in place, such as standard contractual clauses.

Passwords are hashed and never stored in readable form. Traffic is encrypted in transit. Access to account data is limited to what is needed to operate the service. No system is perfectly secure, and we will tell affected users promptly if a breach puts their data at risk.

ESQAP is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us data, email us and we will delete it.

We may update this policy. The date above shows when it last changed, and we will make a reasonable effort to tell account holders about material changes.

Privacy questions and requests: support@esqap.com. See also our Terms of Use.