Privacy Policy

1. The Guest Tool

When you use our free Guest Tool, we do not store the PNR data, passenger names, or flight details you paste. The data is processed instantly to generate the itinerary and is immediately discarded.

We log aggregate, anonymized usage metrics — such as the total number of conversions performed, shown on our homepage — to monitor system performance. This never includes personal passenger data.

2. Premium Accounts & Saved Itineraries

When Premium users convert a PNR and generate a shareable link, that specific itinerary is temporarily saved in our database to allow your clients to access it.

• 30-Day Auto-Expiry: Shareable links and their associated itinerary data remain active in our database for exactly 30 days, after which they are automatically and permanently deleted.
• Manual Link Deletion: You retain full control over your data. You can manually delete any specific shared link and its associated data before the 30-day window expires from your dashboard's history panel.
• Account Deletion: If you choose to permanently delete your Premium account, all of your active shareable links and saved itineraries will be permanently destroyed when the account deletion takes effect, regardless of their individual 30-day expiry status.

3. Data Security & Breach Notification

We implement industry-standard security measures to protect the itinerary data temporarily stored in our database. However, no cloud infrastructure is entirely impenetrable.

In the event of a security breach that compromises your account or the temporarily stored passenger data of your clients, we commit to notifying all affected registered users via email within 72 hours of discovering the breach. Because the free Guest Tool does not save any data to our database, those conversions are not subject to breach risks.

We track high-level account analytics for Premium users, such as the total volume of itineraries converted, strictly to improve our service offerings.

4. Server Location & International Transfers

Our application, authentication, and database infrastructure are hosted on Google Firebase, built on Google Cloud Platform. The servers where temporary itinerary data is processed and stored are located in the United States.

If you are a travel agent operating within the European Economic Area (EEA) or the UK, you act as the Data Controller for your clients' PNR data, and ItineraryConverter acts as the Data Processor. By using our service, you acknowledge that you are transferring passenger data outside the EEA to our servers. We rely on Google Cloud's enterprise compliance framework and underlying security architecture to ensure this data is handled with appropriate safeguards.

5. Passenger Data Privacy

We do not read, mine, or repurpose your clients' passenger data. We are a passthrough parsing tool. We do not use your clients' names, contact details, or flight routes for marketing, profiling, or third-party data sales.

We may track high-level account analytics for Premium users, such as the total volume of itineraries converted and the number of links shared, strictly to improve our service offerings.

6. Your Account Information

When you create a Premium account, we collect your full name, email address, and password. Your password is never stored directly — Firebase Authentication (Google's identity platform) handles this on our behalf using industry-standard encryption, and we do not have access to it in plain text.

If you complete your agency profile, we also store your company name, contact details, and any logo you upload for use in branded exports.

We do not sell, rent, or share your account information with third parties for marketing purposes. Your account data is used solely to operate your account, generate your branded itineraries, and provide customer support if you contact us.

7. Cookies & Analytics

We use Google Analytics to understand how visitors use our website — for example, which pages are most visited and how people find us. This works through cookies and similar tracking technologies that collect anonymized, aggregate usage data such as browser type, approximate location, and pages visited. We do not use this data to identify individual visitors, and it is never combined with your account or passenger data.

You can disable cookies through your browser settings at any time. Doing so will not affect your ability to use the Guest Tool, but may affect some site functionality.

8. Your Rights & Account Deletion

You have the right to access, correct, or delete the personal information we hold about you. To delete your account, use the Delete My Account option in your dashboard settings. This schedules your account for permanent deletion in 7 days — you can cancel at any time before then from the same dashboard, and nothing is removed until the grace period ends.

Deleting your account permanently and immediately removes your saved itineraries, branding assets, profile information, and login — including any shared itinerary links that have not yet reached their 30-day expiry. If your clients still need access to a specific itinerary, download or share it with them before completing account deletion, as active links will stop working once the deletion takes effect.

If you're unable to access your account for any reason, you can also request deletion by emailing us at contact@itineraryconverter.com from your registered address.