Privacy Policy

Effective date: 7 August 2026. This policy explains how Goose Travel ("Goose", "we", "us") collects and uses personal data when you use our AI travel agent, join our waitlist, or visit goosetravel.ai.

1. Who we are

Goose Travel is a UK-based travel agent service. Pending incorporation of Goose Travel Ltd, the service is operated by its founder, Brooks Capewell, trading as Goose Travel, who is the data controller for the personal data described here. Contact: hello@goosetravel.ai. When Goose Travel Ltd is incorporated, it will become the controller and this policy will be updated.

2. What we collect

Account data: your Telegram user ID, display name, and chat ID; your email address if you provide it; your plan and subscription status.
Waitlist data: email address, Telegram handle, the routes you fly, how often you fly, and a social handle if you choose to share one.
Traveller details you provide for bookings: full names, dates of birth, gender as required by airlines, contact details, passport number, issuing country and expiry where an airline requires identity documents, and frequent flyer numbers you attach.
Conversation data: the messages you exchange with Goose, and the travel preferences and facts Goose saves for you (your "memories"). You can view and delete memories at any time.
Location: only if you deliberately share a location pin (used for door-to-door timing and leave-by alerts).
Booking and trip data: searches, offers shown, bookings, changes, cancellations, claims, and flight status events for your trips.
Technical data: server logs and API usage needed to run and secure the service.

We do not collect or store your card details. Card payments for flights are entered on a secure payment page and processed by Duffel; subscription payments are processed by Paddle. Neither card number reaches our servers.

3. Why we use your data (lawful bases)

To provide the service you ask for: searching flights, making and managing bookings in your name, tracking trips, and assisting with airline compensation claims. Lawful basis: performance of a contract.
To run your subscription and billing through Paddle. Lawful basis: performance of a contract.
To send service emails (booking confirmations, changes, waitlist and invite emails). Lawful basis: performance of a contract; for waitlist emails, our legitimate interest in running the beta you signed up for.
To improve the service, keep it secure, meter usage, and prevent abuse. Lawful basis: legitimate interests.
To comply with legal obligations, including tax and accounting records.

We do not sell personal data, and we do not use it for third-party advertising.

4. AI processing and automated decisions

Goose is an AI agent. Your messages are processed by Anthropic's Claude models to generate responses. Passport numbers and full traveller records are deliberately kept out of AI processing; they are handled by our booking systems only. Goose also derives travel preferences from your conversations to personalise the service; these are visible as your memories and you can delete any of them at any time.

No decision with legal or similarly significant effect is made solely by automated means. Bookings, payments, changes, cancellations, and claims are never executed by the AI alone: every one requires your explicit confirmation tap.

5. Who receives your data

We share data only where needed to deliver the service:

Duffel Technology Ltd (UK): our flight booking and payment platform. Traveller details are passed to the airline you book with, which becomes your carrier under its own conditions of carriage and privacy policy.
Airlines you book with, worldwide, as necessary to complete your booking.
Paddle (merchant of record): subscription billing, receipts, and tax handling.
Anthropic: AI processing of conversation content.
Telegram: the messaging channel you use to talk to Goose.
Infrastructure providers: Supabase (database, EU region), Render (hosting, Frankfurt), Vercel (website), Resend (transactional email, EU).
Google (Maps, Places, Weather) for door-to-door timings, and FlightAware for live flight status. These lookups use route and flight details, not your identity.

6. International transfers

Your data is stored in the EU/UK. Some providers process data in the United States under the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement. When you book a flight with a non-UK airline, transfer of your booking details to that airline is necessary for the performance of your contract.

7. How long we keep it

Booking, payment, and claim records: 6 years after the transaction, matching UK tax rules and the limitation period for claims.
Conversation history: a rolling window used to give Goose context; older messages age out of active use.
Memories: kept until you delete them ("forget" or the Memories menu).
Waitlist entries: until you join, ask to be removed, or the beta programme ends.
Account data: deleted or anonymised when your account is closed, except records we must keep by law.

8. Your rights

Under UK GDPR you can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Email hello@goosetravel.ai and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve any issue first.

9. Security

Data is encrypted in transit and at rest. Passport and identity data is held server-side only, never logged, never shown back in full, and never included in AI prompts. Access to production systems is restricted to the operator.

10. Cookies and analytics

goosetravel.ai does not use advertising cookies. We measure site traffic with Vercel's privacy-friendly, cookieless analytics: aggregate page views and performance metrics, with no cross-site tracking and no personal profiles built. Any cookies set are strictly necessary for the site to function.

11. Children

Goose Travel is for adults aged 18 and over.

12. Changes

We will post any changes here and update the effective date. Material changes will be announced in the product before they take effect.

13. Contact

hello@goosetravel.ai. Postal address available on request while our registered office is being established.