Privacy Policy

1. Who we are

Goyondo operates an AI-powered travel planning service from Singapore. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website, applications, and APIs.

2. Data we collect

Depending on how you use the service, we may collect account information such as your name, email address, and authentication identifiers; trip and itinerary content you create; booking confirmations, travel documents, or confirmation text you choose to upload, paste, or forward; usage and device data; approximate location inferred from IP address; payment-related metadata processed by our payment providers; and support communications you send us.

3. How we use data

We use personal data to provide the service, generate and store itineraries, authenticate users, support collaboration and sharing, process imported travel confirmations, improve reliability, prevent abuse and fraud, respond to support requests, and comply with legal obligations.

When you use AI-powered features, we send the relevant trip or travel content needed to fulfill that request to our AI service providers. We do not use your personal data to train our own general-purpose models.

4. Legal basis and PDPA

Where Singapore's Personal Data Protection Act 2012 applies, we process data on bases including consent, contractual necessity, and legitimate interests such as security, abuse prevention, product improvement, and service operations. Where processing is based on consent, you may withdraw that consent, although some features may no longer be available.

5. Sharing and processors

We do not sell your personal data. We do not share your personal data with third parties for their own advertising, marketing, or resale purposes.

We disclose personal data to service providers acting on our behalf to operate the service. These may include providers for hosting and database infrastructure, authentication, email delivery and inbound parsing, analytics, AI inference, and payments.

We may also disclose personal data where required by law or where necessary to protect rights, safety, users, or the integrity of the service.

6. Imported travel confirmations and documents

If you upload, paste, forward, or otherwise import booking confirmations, receipts, or travel documents, we process that content only to extract and store the travel information needed to provide the feature you requested.

We do not use imported travel content for advertising, and we do not permit third parties to use that content for their own marketing or resale purposes. Where imported content is processed by AI or parsing providers, it is sent only as needed to perform the requested extraction or assistance feature.

7. Sharing controls and public links

Your trips are private by default unless you choose to share them. You may share a trip either by inviting specific collaborators or by creating a public link.

Collaborator access is role-based and can be updated or removed by the trip owner. Anyone with a public link can view the trip data included in that shared view until the link expires or is revoked.

Public links are designed for convenience sharing, not secure collaboration. Public shared views do not include private notes, imported documents, expenses, exact addresses, or exact coordinates.

8. Retention and deletion

We retain account and trip data while your account is active and for a reasonable period afterward for backup recovery, dispute resolution, fraud prevention, security, and legal compliance.

You can delete your account from within the product. Deleting your account removes your account access and user profile record from the product. Some associated trip data, system logs, sharing records, imported travel records, backups, and other operational records may remain for a period where retention is required for security, fraud prevention, legal compliance, dispute resolution, backup recovery, or service integrity.

9. Security

We use technical and organizational controls designed to limit access to personal data to authorized personnel and service providers who need that access to operate, secure, and support the service. This includes encryption in transit and role-based access controls within the product.

No method of transmission or storage is completely secure. You are responsible for protecting your account credentials and using strong authentication practices.

10. International transfers

Our service providers may store or process data outside Singapore, including in the United States and the European Union. Where required, we rely on contractual and operational safeguards offered by those providers.

11. Cookies and analytics

We use cookies and similar technologies for authentication, preferences, and product analytics. We use analytics to understand feature usage, improve reliability, and measure product performance.

We configure analytics to avoid sending the contents of your itineraries, uploaded documents, or imported booking text unless a specific feature requires it and we say so.

12. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, or object to certain processing. If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission in Singapore where the PDPA applies.

13. Children

The service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have done so, contact us and we will take reasonable steps to delete it.

14. Changes

We may update this policy from time to time. We will post the revised version on this page and update the last updated date. Material changes may be communicated through the service or by email where appropriate.

15. Contact

For privacy questions or requests, contact us through the information provided on the Goyondo website or in the app.

• Terms of Service
• FAQ
• Home