Privacy Policy

Last updated: October 10, 2026

This Privacy Policy describes how TravelMaxx, LLC, a Delaware limited liability company (“TravelMaxx,” “we,” “us,” or “our”), located at 2261 Market Street STE #32640, San Francisco, CA 94114, US, collects, uses, and protects your information.

For details about the accounts you connect, see Connected Accounts & Services. We do not sell your personal information.

1. Information We Collect

When you use TravelMaxx, we may collect the following types of information:

  • Account information - email address, name, and any profile details you provide during registration.
  • Usage data - pages visited, features used, session duration, interactions with AI features, and general navigation patterns.
  • Voluntarily provided information - travel preferences, loyalty program details, financial goals, and any other data you choose to share through our platform.
  • Conversations and files - messages, uploads, saved preferences, task instructions, approvals, and reports you create or request through the Service. The connected-account information we receive is described below.
  • Third-party account credentials - if you choose to connect third-party accounts to our Execution Tools, we process and may save protected sign-in information as described in Section 6 and Connected Accounts below.
  • Device & technical data - browser type, operating system, IP address, and device identifiers collected automatically through cookies and similar technologies.

2. How We Use Your Data

We use the information we collect to:

  • Provide, maintain, and improve our services, including our Informational AI and Execution Tools.
  • Personalize your experience - tailoring recommendations, search results, and content to your interests.
  • Provide spending summaries, travel updates, reminders, and assistance based on the accounts you choose to connect. Keep those features up to date while the connection is active, including when you are not in a chat.
  • Measure product performance through analytics, A/B testing, and internal metrics.
  • Communicate with you about your account, product updates, and (with your consent) promotional content.
  • Detect, prevent, and address fraud, abuse, and technical issues.

3. AI Features & Your Data

TravelMaxx uses artificial intelligence to power many of its features. When you interact with these AI features:

  • Your inputs (questions, preferences, account details you share) may be processed by our AI systems to generate responses and recommendations.
  • Relevant connected-account information, messages, and files may be processed by the AI service providers that help deliver your requested features. We also save preferences, summaries, and useful context to personalize future assistance. We do not use connected-account data to train general-purpose AI models.
  • We improve product features using usage measurements and feedback. For example, confirmed card-benefit credits can help us recognize similar credits for other users using merchant descriptions, benefit names, and amount ranges. This does not give other users access to your accounts or transaction history. Google account data is subject to the additional limits below.
  • Informational AI outputs are provided for general guidance only. See our Terms of Service for important limitations regarding AI accuracy and liability.

4. We Do Not Sell Your Data

TravelMaxx does not sell, rent, or trade your personal information to third parties. We do not use connected-account data for targeted advertising. We may share data with service providers who help us operate our platform (hosting, analytics, payment processing), but only to the extent necessary for them to perform those services on our behalf, and they are contractually obligated to protect your information.

5. Metrics & Analytics

We use Vercel Analytics, Vercel Speed Insights, and Mixpanel to understand how our product is used and identify areas for improvement. This includes page visits, onboarding progress, feature adoption, and performance data. For signed-in users, product events may be associated with a pseudonymous account identifier so we can measure activation and retention. We do not send onboarding form values, loyalty account identifiers, points balances, payment information, or chat content to Mixpanel.

6. Credential Handling & Security

If you choose to connect third-party accounts to TravelMaxx's Execution Tools:

  • TravelMaxx utilizes industry-standard encryption for all data transmission.
  • When you choose to save a connected account, we may retain encrypted credentials or a protected sign-in session to carry out your future requests. You can disconnect saved accounts in your settings. Do not share passwords or card numbers in chat.
  • Saved sign-in credentials and connection permissions are encrypted. Access is restricted to your account and the services needed to provide the feature. Sensitive actions require your approval, and secure entry forms keep passwords and full card details out of the conversation. These safeguards reduce risk; they do not eliminate it.
  • You are responsible for maintaining the security of your own devices and TravelMaxx account.

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Connected Accounts & Services

Connections let TravelMaxx work with information you authorize us to access. We use it to provide and improve the features you use, personalize your assistance, and carry out approved tasks. You choose which optional accounts to connect. Connecting an account can enable ongoing updates; it does not give blanket permission to spend money, transfer points, or contact someone for you.

Gmail and Google Calendar

With your permission, we access your connected Google account email address, Gmail message subjects, senders, dates and snippets, and primary calendar event details such as titles, descriptions, locations, times, and cancellations. The current connection is read-only: it does not send, change, or delete your Gmail messages or calendar events, and our Gmail sync does not download full message bodies or attachments.

We process and store relevant summaries and travel details to organize itineraries, find confirmations, answer your questions, prepare day plans, and notify you of travel changes or check-in reminders. Updates can arrive in the background while you stay connected. Relevant information may be sent to the AI service providers that perform these features for you.

Our use and transfer of Google account information follows the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace user data policy. We do not use this information for advertising, sell it, or use it to train general-purpose AI models. Human access is limited to your specific consent, necessary security work, legal requirements, or internal operations using aggregated, anonymized information as permitted by those policies. You can disconnect individual Google accounts in Connections or revoke access in your Google account.

Bank and credit card accounts through Plaid

When you link accounts through Plaid, we receive information for the accounts you authorize, such as the institution and account names, account type, masked account number, balances, and transaction history. Transactions may include amounts, currencies, dates, merchant names, descriptions, categories, locations, pending status, and recurring payment details. You enter your bank sign-in details with Plaid or your bank, rather than in TravelMaxx chat.

We store and refresh this information to show spending and cash-flow summaries, recognize recurring charges and benefit credits, track reimbursements, personalize recommendations, and create analyses or exports you request. We also store categories and notes you add. Relevant information may be processed by our AI service providers to deliver these features. Linking a bank account for insights does not authorize payments or transfers from that account.

You can disconnect an institution in Connections. Plaid also processes information under its End User Privacy Policy.

Secure card storage through Agentcard Vault

When you save a card, you enter its details on Agentcard's secure page and protect access with a passkey. TravelMaxx receives a wallet reference and masked card details: the brand, last four digits, and expiry. This wallet connection does not send your full card number or security code to TravelMaxx. For a supported purchase, we share the merchant, amount, currency, and payment request with Agentcard so you can approve payment on your device. The merchant and its payment provider receive the information needed for payment.

Saving a card does not authorize a purchase. You can manage or remove cards through the secure wallet. Agentcard's terms and privacy notices presented in the wallet apply to the information you provide there. Removing a wallet card does not delete your rewards-card profile, past purchase records, or information saved separately in TravelMaxx.

Card transaction history

You can associate a bank credit account with a rewards card you track in TravelMaxx, and separately associate a wallet card with that profile. We store the associations you choose to attribute transactions and benefit credits to the right card. Removing an association does not disconnect the bank, remove the wallet card, or delete the underlying history.

Phone calls and texts through AgentPhone

If you enable a dedicated phone line, AgentPhone and its communications providers process phone numbers, call audio, text messages, and delivery information to carry calls and texts. TravelMaxx receives and stores message content, call transcripts, participants' numbers, times, call status, and your approved instructions to handle conversations and show their progress and results. Relevant text and transcripts are processed by our AI service providers to assist you.

Outgoing calls and texts require approval of the recipient, purpose, and details to share. Replies can continue within that approved scope and its limits. Information you authorize us to share is disclosed to the recipient. Disconnecting the line releases your number; it does not recall messages or erase past conversations. This line is not an emergency service.

Your TravelMaxx email address

We provide an email address for travel confirmations and supported account setup. Unlike the Gmail connection, mail sent or forwarded here includes message contents. Our email service provider receives the message, and TravelMaxx stores sender and recipient addresses, subject, message text and formatting, attachment details such as names and types, and receipt time. We use this information to organize trips, search travel mail, prepare reminders, and complete supported verification steps for your travel accounts. Relevant travel information is processed by our AI service providers. Only forward information you want TravelMaxx to process.

Saved travel accounts and browser assistance

When you save a travel account or sign in during an assisted task, we may retain an encrypted login or protected sign-in session and read relevant loyalty balances, status, benefits, credits, bookings, and passenger details. Browser assistance may process the pages and screenshots needed for your task. We use these details to help with account questions, searches, and actions you authorize. Use the secure entry forms for credentials, rather than sharing them in chat. A connection listed as coming soon does not grant access to that account. To provide award searches, we may also set up a managed award-search account using your TravelMaxx email address and process its verification messages on your behalf.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and collect usage analytics. You can control cookie preferences through your browser settings, though some features of the site may not function properly without them.

Delta Companion Extension

If you install and pair the TravelMaxx Delta Companion, it works only on supported TravelMaxx and Delta pages to perform an action you requested. Your Delta sign-in remains in your Chrome browser.

  • The extension may read loyalty information visible to you, including your name, SkyMiles number and balance, status progress, benefits, credits, certificates, and recent activity.
  • When you ask TravelMaxx to prepare an itinerary, it may process the requested route, date, flights, cabin, passenger count, and Delta's displayed fare. It stops at Delta's final review page and does not purchase the itinerary.
  • It sends normalized results to your own TravelMaxx account. It does not send your Delta password, cookies, Delta authentication tokens, payment details, or browsing history outside supported pages to TravelMaxx.
  • Chrome stores the paired TravelMaxx address and a revocable companion device token locally. Disconnecting the companion in TravelMaxx or its popup revokes or removes that pairing.

8. Data Retention

We retain personal information while your account is active or as needed to provide the features you use. Successful disconnection stops future access through that connection and removes its saved access permission. It does not automatically erase information already included in chats, saved memories, itineraries, reports, exports, or completed purchase and communication records. You can request deletion of that information by contacting us.

You can request account deletion in Settings or contact team@travelmaxx.app. Account deletion removes associated account data and saved files and ends supported connections. It does not close your accounts with banks, Google, payment wallets, airlines, or other third parties. Manage cards stored in Agentcard through its wallet; deleting TravelMaxx does not itself delete that separate wallet. Copies you exported or shared remain where you saved or sent them.

We may retain information where necessary to meet legal obligations, resolve disputes, prevent fraud, or document transactions and approvals. Information retained for these purposes is limited to those purposes. Third parties may retain their own records under their policies and legal obligations.

9. Third-Party Services

We share information as needed with providers of secure card storage, payment processing, bank connections, email, calls and texts, AI assistance, hosting, and support to deliver the features described above. When you authorize a booking, payment, or communication, relevant details also go to the airline, merchant, or recipient involved. We may disclose information when legally required or necessary to protect people and prevent fraud, subject to applicable restrictions, including Google Limited Use. Our site may contain links to third-party websites or services that are not operated by TravelMaxx. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. Children's Privacy

TravelMaxx is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will take steps to delete it.

11. Your Privacy Rights

Depending on where you live (for example, if you are a California resident), you may have the right to request access to, correction of, or deletion of the personal information we hold about you, to receive a copy of that information in a portable format, and to opt out of certain processing. To exercise any of these rights, contact us at team@travelmaxx.app. We will verify your request and respond as required by applicable law, and we will not discriminate against you for exercising your privacy rights. As stated above, we do not sell your personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Your continued use of TravelMaxx after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at team@travelmaxx.app.

TravelMaxx, LLC
2261 Market Street STE #32640
San Francisco, CA 94114, US