Privacy policy

Viamente is an AI travel planner built by Lygge Studios ApS, based in Copenhagen, Denmark. Questions about this policy or your data: write to peter@viamente.ai.

Viamente stores the travel plans you create and the messages you exchange with the planning assistant. Additional capabilities — collaborative planning, bookings, mobile companion — are on the roadmap. This policy covers all of them as they ship.

• Account — your email address, an optional display name, and the identifiers we receive when you sign in via magic link or Google. A session cookie (viamente_session, HttpOnly) keeps you logged in.
• Plans and conversations — the trip plans you create (destinations, dates, accommodation choices, notes) and the messages you send to the planning assistant. Your messages, together with the relevant profile context, are transmitted to our AI providers to generate replies (see §4).
• Profile context — your durable travel profile and traveler roster: preferences the assistant infers from your conversations (e.g. "travels with kids", "prefers boutique stays"), the people you add as travelers (names and relationships), and — only where you choose to provide them — details such as citizenship, loyalty-program numbers, and seating or dietary preferences. This is what makes subsequent plans smarter for you specifically. You can ask for the contents of this profile or its deletion at any time (see §6).
• Raw planning input — the verbatim text you type during onboarding and to the assistant is also kept as an internal record so we can improve how the assistant understands trips and preferences. It is never shown to other users and is deleted with your account.
• Bookings — when you book a hotel or flight through Viamente, the booking details, including the traveler details you enter for it, are shared with the travel supplier fulfilling that booking (see §4).
• Diagnostics — server logs (HTTP method, path, status code) are retained for roughly 30 days for debugging and abuse prevention.

• Cloudflare, Inc. — Workers, D1 (SQLite), and Email Sending (outbound transactional email such as magic links). Cloudflare is our primary processor; data is stored in EU regions where Cloudflare supports it.
• PostHog Cloud EU (eu.i.posthog.com) — product analytics. Pageviews and autocaptured clicks only; session recording is disabled. PostHog cookies (prefixedph_) are first-party and used to stitch a single visitor's session together. Your distinct ID is bound to your Viamente user ID only after you sign in.
• DeepSeek — large-language-model inference for the planning assistant. Your conversation messages and the relevant profile context are transmitted to DeepSeek's API, routed through Cloudflare's AI Gateway, to generate the assistant's replies.
• Anthropic, PBC — large-language-model inference for specific tasks: transcribing image or PDF attachments you add to a conversation, and as a fallback for internal extraction of preferences from your planning input. Anthropic's API platform does not use API inputs or outputs to train its models.
• Google LLC — only if you choose "Continue with Google" to sign in. We request theopenid email profile scopes solely to look up or create your Viamente account and to show your name and email in the app. We do not request any other Google scopes (no Contacts, no Calendar, no Tasks).
• LiteAPI and the fulfilling travel supplier — only when you make a booking. The booking details and the traveler details you enter for it are passed to the booking platform and the hotel or airline that fulfils the booking; from that point they also process the data as required to deliver the service you booked.
• Stripe, Inc. — payment processing for paid memberships. Checkout and the billing portal are Stripe-hosted pages; we store no card data ourselves. On our side we keep only a Stripe customer reference and your membership record: tier, subscription status, renewal date, and the yearly price you locked in. Stripe holds the payment records, including invoices we are required to retain under Danish bookkeeping law.

• viamente_session — essential, HttpOnly, keeps you signed in.
• ph_* — set by PostHog for analytics (see §4).

We do not set advertising cookies and do not embed third-party trackers beyond PostHog. Visitors in the EU / EEA / UK / Switzerland see a banner the first time they arrive explaining this; dismissing it stores a single flag in your browser's local storage so the banner doesn't reappear.

Your plans persist until you delete them. You can delete a plan from your dashboard at any time. To erase your entire account and all associated data, email peter@viamente.ai — we process account erasures within 30 days and confirm in writing once complete. Erasure removes:

• Your plans, messages, and profile context from our database;
• Your PostHog person profile and all associated events;
• Any session, magic-link, or API tokens tied to your account;
• Your users row, after the cascading deletes above.

What survives an erasure. We keep one minimal abuse-prevention record: your email address (in normalized form), the number of journeys the account had created, and its membership tier — nothing else. No name, no plan content, no IP address. We keep it so that deleting an account cannot be used to reset free-plan allowances, on the basis of our legitimate interest in preventing abuse (Art 6(1)(f) GDPR). It is deleted automatically roughly 6 months after the erasure. You can object to this record by writing to peter@viamente.ai and we will assess removing it individually. Separately, records we are legally required to keep — such as invoices under Danish bookkeeping law, held at our payment processor — are retained for their statutory period.

Logging out calls posthog.reset() so subsequent activity on the same browser is not associated with your identity even before account deletion.

Under the GDPR and equivalent data-protection laws, you have the right to access, rectify, erase, restrict the processing of, port, and object to the processing of your personal data. Write to peter@viamente.ai and we will respond within 30 days. You also have the right to lodge a complaint with your local data-protection supervisory authority.

Viamente is not directed at children under 16 and we do not knowingly collect personal data from them.

Cloudflare and PostHog are US-headquartered companies whose EU infrastructure we use to keep data in the European Union where possible. Anthropic processes API inputs in the United States. DeepSeek is headquartered in the People's Republic of China and processes API inputs there. Where transfers outside the EEA occur, they rely on the EU Standard Contractual Clauses or an equivalent transfer mechanism.

We will update this page when our practices change. Material changes will re-prompt the cookie notice in your browser so you see them on your next visit.