Privacy Policy

Last updated: July 10, 2026

Travel Maestro is a travel planning, proposal, booking, supplier coordination, and operations platform operated by Travel Maestro / Auralis Technology. This Privacy Policy explains how we collect, use, store, protect, share, retain, and delete information when users visit our website or use the Travel Maestro application and related services.

1. Information We Collect

We may collect and process the following categories of information:

Account information, such as name, email address, organization, team membership, role, and login details.
Contact and business information entered into Travel Maestro, including client, hotel, venue, supplier, traveler, and agent contact details.
Travel planning and operations data, including itineraries, proposals, briefs, bookings, bids, invoices, supplier communications, rooming lists, documents, notes, and attachments.
Communication data, including email recipients, subject lines, message bodies, templates, attachments, delivery status, and related activity records.
Google user data, when a user authorizes Travel Maestro to connect to Google services.
Technical and usage data, such as device and browser information, IP address, authentication events, activity logs, error logs, and security logs.
Support and business enquiry information provided when contacting us.

2. Google User Data

If a user connects Travel Maestro to Google services, Travel Maestro may access Google user data only after the user or their organization authorizes the connection through Google OAuth.

Depending on the features enabled and scopes approved, Google user data may include account identity information, email address, profile information, mailbox or email-related data, calendar-related data, files or metadata, and other Google Workspace data required to provide the requested Travel Maestro functionality.

Travel Maestro uses Google user data only to provide and improve user-facing application features requested by the user or their organization, such as authentication, account connection, communication workflows, calendar or email-related operations, document handling, supplier coordination, travel operations, and related productivity features.

The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Travel Maestro does not sell Google user data. Travel Maestro does not use Google user data for advertising, personalized advertising, retargeting, creditworthiness, lending, data brokerage, or information resale. Travel Maestro does not use Google Workspace API data to train generalized artificial intelligence or machine learning models. Travel Maestro does not use Google Workspace API data for AI/ML model training, model improvement, model evaluation, prompt training, embedding model training, or generalized AI development.

3. How We Use Information

To provide, operate, maintain, and improve Travel Maestro.
To authenticate users and manage organization, team, and role-based access.
To support travel planning, proposals, itineraries, bookings, bids, hotel coordination, supplier communications, invoices, and operational workflows.
To send user-requested communications, emails, documents, reports, reminders, and attachments.
To store user-created templates, documents, notes, resources, and operational records.
To provide support, troubleshoot issues, and respond to enquiries.
To maintain security, prevent misuse, investigate suspicious activity, and protect the integrity of the service.
To comply with legal, contractual, accounting, tax, audit, and regulatory obligations.

4. Data Protection and Security

Travel Maestro protects Google user data and other sensitive information using administrative, technical, and organizational safeguards.

Data is transmitted using HTTPS/TLS encryption. Production application data is stored in managed cloud services with access controls and encryption at rest where supported by the underlying service. Access to customer data is restricted to authorized personnel, contractors, and service accounts with a business need and is managed using least-privilege access principles.

OAuth tokens, credentials, API keys, and integration secrets are stored securely and are not intentionally exposed in application screens, public repositories, or routine logs. We use authentication, authorization, team-based permissions, activity logging, operational monitoring, backup practices, and security controls to help protect the confidentiality, integrity, and availability of user data.

No method of transmission or storage is completely secure, but we take reasonable steps designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

5. Sharing and Disclosure

We do not sell personal information or Google user data.

We may share information only as necessary to provide and operate Travel Maestro, including with trusted service providers that support cloud hosting, infrastructure, authentication, email delivery, file storage, analytics, monitoring, security, support, and payment or business operations.

Service providers are permitted to process information only for the services they provide to us and must not use the data for their own independent purposes.

We may also disclose information if required by law, regulation, legal process, enforceable governmental request, contract, security investigation, or to protect the rights, safety, and integrity of Travel Maestro, our users, customers, or others.

6. AI and Automation

Travel Maestro does not currently use artificial intelligence, machine learning models, foundational models, generalized AI models, or third-party AI/ML services to process Google Workspace API user data.

Travel Maestro does not integrate with third-party AI/ML providers that process Google Workspace or Photos API user data.

Travel Maestro does not transfer raw, aggregated, anonymized, or derived Google Workspace or Photos API user data to third-party AI/ML providers.

Travel Maestro does not use Google Workspace or Photos API user data to create, train, fine-tune, improve, evaluate, or develop artificial intelligence or machine learning models.

Any automation within Travel Maestro is rules-based application functionality used to support user-facing travel planning, communication, supplier coordination, and operational workflows.

7. Data Retention

We retain personal information, Google user data, and operational records only for as long as reasonably necessary to provide Travel Maestro, support customer operations, comply with contractual and legal obligations, resolve disputes, maintain security, prevent fraud or misuse, and keep required business records.

Retention periods may vary depending on the type of data, customer instructions, account status, contractual obligations, legal requirements, backup cycles, audit requirements, and operational needs.

When information is no longer needed for these purposes, we delete, de-identify, or securely dispose of it according to our retention practices.

8. Deletion Requests and Google Disconnection

Users or customer administrators may request access, correction, export, or deletion of personal information by contacting us.

If a user disconnects a Google integration, closes an account, or requests deletion of Google user data, we will delete or de-identify the relevant Google user data within a reasonable period, unless retention is required for legal, contractual, security, fraud-prevention, backup, accounting, dispute-resolution, or legitimate business purposes.

Backup copies may remain for a limited period before being overwritten or securely deleted according to our backup retention practices.

9. Customer-Controlled Data

Travel Maestro is used by organizations to manage business travel operations. Some data in the application may be controlled by the customer organization, such as team records, bookings, invoices, supplier communications, and operational documents.

If your account is provided by an organization, deletion or access requests may need to be handled by that organization's administrator, depending on the nature of the data and the customer's contractual relationship with Travel Maestro.

10. International Processing

Information may be processed and stored in countries where Travel Maestro, its infrastructure providers, or service providers operate. We take reasonable steps to protect information in accordance with this Privacy Policy and applicable legal requirements.

11. Children

Travel Maestro is a business application and is not directed to children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.

13. Contact

For privacy questions, access requests, correction requests, deletion requests, or Google user data questions, contact fdemarchis0205@gmail.com.

Travel Maestro / Auralis Technology
https://travelmaestro.ai/