Privacy policy
Last updated 10 November 2026
Who we are
TravelPA is operated by Akaterra AB, Sweden, the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: info@akaterra.com.
What TravelPA processes
- Travel emails: booking confirmations, changes, cancellations, payment notices and event registrations that you forward to your private TravelPA address, or that TravelPA finds in an inbox you connect.
- What we extract from them: bookings, dates, places, booking references, the travellers named on a booking, prices, and the trips and gaps built from them.
- Your account details: your name and the email addresses you add or connect.
- Technical data needed to run the service, such as processing counts and error logs.
Connected inboxes (Google and Microsoft)
If you connect a Gmail or Outlook mailbox, TravelPA asks for read-only access. It never sends, changes or deletes your email. It only reads messages matching a travel search (travel companies and booking words such as "reservation" or "itinerary"). It does not read the rest of your mailbox.
A message that turns out not to be about travel is deleted at once. Only its sender's domain, subject and the reason it was dropped are kept, for 30 days, so we can check that nothing was missed. You can disconnect an inbox at any time, in TravelPA or in your Google or Microsoft account security settings.
Google user data: TravelPA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Gmail is used only to show you your trips. It is not used for advertising, not sold, not used to train AI models, and not read by people except with your permission, for security, or where the law requires it.
Legal basis
Performance of a contract (Art. 6(1)(b) GDPR): processing your travel emails is what the service is. Legitimate interest (Art. 6(1)(f)) for security, abuse prevention and backups. Booking confirmations can name other travellers, for example a colleague on the same hotel booking. We process their names only as part of your booking.
Who processes data for us
- Supabase (database, storage and functions), servers in Frankfurt, Germany.
- Cloudflare (receives email for travelpa.app and runs this website).
- Anthropic (the Claude AI model reads each travel email to extract the booking). Anthropic processes this under its commercial terms and does not use it to train its models.
We use no advertising, no analytics and no tracking cookies, on this website or in the service.
How long we keep it
Travel emails, bookings and trips are kept until you delete them or close your account. Backups are kept for 30 days. Metadata of dropped (non-travel) messages is kept for 30 days.
Your rights
You can ask for a copy of your data, its correction or deletion, restrict or object to processing, and take your data elsewhere. Write to info@akaterra.com. You can also complain to the Swedish Authority for Privacy Protection (IMY).