Privacy Policy

Effective April 26, 2026

1. Introduction

Travel AI, Inc. (“we,” “us,” “our”) operates Task by Pebble House at task.mu. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Data Controller

Travel AI, Inc. is the data controller for information collected through Task. For data-related inquiries, contact us at kenny@task.mu.

3. Information We Collect

We collect the following types of information:

• Account information: your name and email address, provided via Google OAuth
• Payment information: processed securely by Stripe. We receive and store only the last four digits of your card number, billing address, and transaction history. We never store full card numbers or CVVs.
• Uploaded documents: invoices, receipts, and other documents you submit for processing
• Extracted data: structured data produced by AI extraction from your documents
• Credit transaction data: credit purchases, consumption records, and balance history associated with your organization
• Usage data: pages visited, features used, timestamps, IP address, and browser and device information
• Authentication data: OAuth tokens managed by Google — we do not store your Google password
• Terms acceptance data: when you accept our Terms of Service and Privacy Policy, we record your IP address, browser user agent, and timestamp

4. How We Use Your Data

We use your information to:

• Process your documents using AI extraction
• Provide, maintain, and improve the service
• Process credit purchases and manage your credit balance via Stripe
• Send service-related communications such as account confirmations, extraction alerts, and billing notices
• Detect and prevent fraud and abuse

We do not use your documents or extracted data to train AI models. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. AI Processing Disclosure

Your uploaded documents are sent to third-party AI services (currently Anthropic's Claude API) for data extraction. Documents are processed in real-time and are not retained by the AI provider for model training. This processing is a core function of the service — document extraction requires AI processing to function.

6. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication infrastructure
• Vercel — application hosting and delivery
• Anthropic Claude API — AI-powered document extraction
• Google — OAuth authentication provider
• Stripe — payment processing for credit purchases. Stripe collects and processes payment information under its own Privacy Policy

You may also configure output connectors to services including Odoo, Dropbox, Google Drive, and OneDrive. Data sent to these services is governed by their respective privacy policies.

7. Data Storage and Security

Your data is stored on Supabase, a cloud-hosted PostgreSQL database. Uploaded documents are stored in encrypted cloud storage. All data is encrypted in transit using TLS and at rest. Access to production systems is restricted to authorized personnel only.

8. Data Retention

Account data is retained for the duration of your active account. Uploaded documents and extracted data are retained until you delete them or close your account. Credit transaction records are retained for accounting and legal compliance purposes. Usage logs are retained for 90 days. Following account closure, all associated data is permanently deleted within 30 days, except where retention is required by law.

9. Your Rights

You have the following rights regarding your data:

• Access your data at any time through the Task dashboard
• Export your extracted data in structured formats such as JSON and CSV
• Request complete deletion of your account and all associated data by contacting kenny@task.mu
• Withdraw consent for data processing — note that this requires account closure, as the service cannot function without processing your data

10. Cookies

Task uses minimal cookies. We use a single authentication session cookie required for the service to function. We do not use third-party tracking cookies. We do not use advertising or analytics cookies.

11. Children

Task is not intended for users under the age of 18. We do not knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account. When the policy is updated, you will be asked to review and accept the new version before continuing to use the service.

13. Contact

For privacy-related questions or data requests, contact us at kenny@task.mu.