Privacy Policy

The short version

Everway never connects to your mailbox. We only receive the emails you deliberately forward to a trip address. We use that content to build your itinerary and operate the product — not to sell your data, not to train AI models on your content, and not to profile you for advertising based on your bookings.

This policy applies to the Everway website, web app, and mobile apps. Questions or requests: support@team.everway.ai. For how we protect the product technically, see our Security page.

Who we are

Everway ("we," "us," or "our") provides software that turns forwarded booking emails into organized trip itineraries. Contact us at support@team.everway.ai.

What we collect

We collect information in the following categories.

Account and sign-in

• Email address and display name — required to create and use an account.
• Sign-in activity — session records used to keep you signed in and secure the account.
• Email one-time codes — we send a short-lived code to your email when you sign in that way. Codes expire quickly and are not passwords.
• Google or Apple sign-in — if you choose either provider, we receive your name and email address from that provider so we can create or recognize your account. We do not receive access to your Gmail, iCloud Mail, contacts, photos, or other provider content. Your use of Google or Apple is also governed by their privacy policies.
• Optional profile details — such as a profile photo, trip-alias username, preferred currency, and passport or residence country and passport expiry if you add them (used for features like the pre-travel checklist).

Trip content you provide

• Forwarded and sent emails — messages and attachments you send to a trip address (for example japan+you@everway.ai) or, on Pro, to your username inbox. That includes headers, subject, body, and files you attach or that arrive with the confirmation.
• Extracted itinerary details — times, places, confirmation numbers, costs, and related fields we derive from those messages.
• Trip records — trip names, notes, itinerary items, maps pins, checklists, invitees, and preferences such as free-cancellation reminders.
• Guest invitations — email addresses of people you invite to view a trip, and their acceptance status once they sign in.

We do not sync or scrape your personal mailbox. Nothing reaches Everway unless you (or someone you allow to use a trip address) send it to us.

Billing

If you subscribe to Everway Pro, Stripe processes payment details. We store subscription and customer identifiers and plan status so we can unlock Pro features. We never receive or store your full card number.

Product usage and diagnostics

• App usage — pages and actions you take in the product (for example signing in, creating a trip, or completing checkout) so we can understand how Everway is used and improve it.
• Device and technical data — browser or app type, approximate region derived from network signals, and error reports that help us fix crashes.
• Feedback — messages you send through in-app feedback, including any personal details you choose to include.

AI assistant connections (Pro)

If you connect an external AI assistant (for example via MCP), that assistant can access trip and itinerary data with the same permissions as your account for the actions you authorize. It does not receive your mailbox credentials or raw inbound email stream beyond what is already represented in your Everway trips. The assistant provider's own privacy terms also apply to how they handle prompts and responses.

How we use your information

We use personal data to:

• Provide, maintain, and secure the service — accounts, trips, email processing, maps, and billing.
• Parse forwarded confirmations into itinerary items, including reading attachments and using automated extraction so bookings appear on your timeline and map.
• Geocode addresses so stops can be shown on a map.
• Send transactional email — sign-in codes, trip invites, and (if enabled) cancellation reminders.
• Generate Pro features you turn on, such as pre-travel checklists based on your trip and profile.
• Respond to support, security, and privacy requests.
• Measure product performance, prevent abuse, and improve Everway.
• Comply with law and enforce our Terms of Service.

We do not sell your personal information. We do not use the content of your forwarded emails or itineraries to train our own or our AI providers' foundation models. Extraction providers are used under arrangements that prohibit training on your content for that purpose.

How email processing works

Each trip receives a private receiving address on the everway.ai domain. Mail is accepted by our email infrastructure, stored, and processed by our systems. Unrecognized or failing authentication senders may be held for your approval before processing. Extraction may use automated models to read booking text and attachments (including PDFs and images). Addresses found in bookings may be sent to a geocoding provider so they can appear on your map.

Automated extraction can be wrong or incomplete. You remain responsible for confirming critical travel details against the original confirmation.

Who can see your data

• You — as the account holder and trip owner.
• Guests you invite — can view the shared itinerary. They do not see your account settings, source emails, or attachments that remain private to the sender, unless the product surfaces a shared item.
• AI assistants you connect — only when you authorize a connection, and only within the permissions of your Everway account.
• Everway staff — only when needed to operate the service, debug an issue you report, review abuse, or comply with law. Access is limited and logged in our operational processes.
• Service providers — listed below, under contracts that limit use to providing services to us.

Service providers and subprocessors

We use trusted vendors to run Everway. Categories include:

• Amazon Web Services — hosting, databases, object storage for emails and files, inbound and transactional email, and background processing. Primary infrastructure is in the United States.
• OpenAI — automated booking extraction and (for Pro) checklist generation. Used under terms that prohibit training on your content for model improvement.
• Mapbox — maps and geocoding for itinerary locations.
• Stripe — payments and subscription management.
• Google and Apple — optional social sign-in; also map deep links you open yourself.
• Google Analytics and Google Ads — website and conversion measurement. Where Enhanced Conversions is used, a hashed form of your email may be sent to measure sign-ups or purchases. We do not use your booking email content for ad targeting.
• Sentry — application error monitoring to keep the product reliable.

These providers process data on our instructions and only as needed for their role. Some may process data in the United States or other countries where they operate.

Cookies and similar technologies

We use cookies and similar storage on the web app for:

• Essential authentication — keeping you signed in securely.
• Preferences — for example remembering that you dismissed a prompt to install the web app.
• Analytics and advertising measurement — Google Analytics and related Google tags, as described above.
• Offline caching (Pro) — the service worker may cache trip pages and map tiles you open so they work offline; caches are cleared when you sign out.

On mobile, session credentials are stored in the device's secure storage rather than browser cookies. You can control cookies through your browser settings; blocking essential cookies will prevent sign-in.

International transfers

Everway is operated using infrastructure and vendors that may be located in the United States and other countries. If you use Everway from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country. We take steps appropriate to the nature of the data and our vendors' roles, including contractual safeguards with processors where required.

Retention and deletion

• Active account data — kept while your account is active so your trips remain available.
• Deleting a trip — removes the trip from your working account and stops new mail from being accepted at that trip address. Related itinerary content is removed from normal use; limited operational records may be retained briefly for abuse prevention, billing disputes, or legal compliance.
• Deleting individual emails or items — removes those records from your trip as presented in the product.
• Deleting your account — email support@team.everway.ai from the address on your account. We will delete or anonymize personal data associated with the account within 30 days, except where we must retain limited records (for example billing records Stripe retains, or data we are legally required to keep).
• Backups and logs — may persist for a short period after deletion until rotated in the ordinary course of operations.

Your rights

Depending on where you live — including under laws such as the GDPR, UK GDPR, or CCPA/CPRA — you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export or receive a copy of your data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising, to the extent those concepts apply to our analytics or advertising measurement

To exercise these rights, email support@team.everway.ai. We will respond within 30 days (or sooner if required by law). We may need to verify that the request comes from the account holder. You may also have the right to lodge a complaint with your local data protection authority.

California residents: we do not sell personal information for money. We may use advertising measurement tools that some laws treat as "sharing." You can request opt-out or deletion via the same privacy email.

Children

Everway is not directed to children under 16. You must be at least 16 to create an account. We do not knowingly collect personal information from children under 16. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy as the product or the law changes. If a change is material, we will notify you by email (to the address on your account) before it takes effect, except where a shorter period is required for legal or security reasons. The "Last updated" date at the top of this page reflects the latest revision.

Contact

For privacy questions, data requests, deletion, security reports, or product support, email support@team.everway.ai.