Data Security

When you travel, you trust Iovago with delicate documents: tickets, bookings, sometimes passports. This page explains transparently how we protect them and how you can delete everything, whenever you want.

Sensitive documents

• Documents travel exclusively over encrypted connections (TLS) and are stored encrypted at rest.
• They are visible only to you and to the trip participants you choose to share them with.
• When the concierge reads a document, its content is processed by Anthropic's Claude models for the sole purpose of extracting travel information and is not used to train the models.
• Tip: upload identity documents only when necessary, and prefer versions with non-essential data redacted.

Infrastructure and data residency

• Storage 100% within the European Union on Google Cloud / Firebase: the database (trips, users, concierge conversations) resides in the EU multi-region eur3 (data centers in Europe, Netherlands/Belgium area); photos, PDFs and attachments reside on Cloud Storage in the EU multi-region eur4.
• Part of the application processing (Google Cloud Functions) and the concierge's AI processing (Anthropic/Claude) take place in the United States, with the safeguards required by the GDPR for extra-EU transfers (Standard Contractual Clauses). Data is processed, not stored, outside the EU.
• Internal access to data is restricted, logged and governed by the principle of least privilege.
• Encrypted backups and tested recovery procedures.

Account deletion

You can delete your account and all associated data on your own, at any time:

• open the web app and go to Profile → Account → Delete account;
• or write to privacy@iovago.app from your account's email address.

Deletion removes your account, trips, documents and personal data within 30 days. Shared trips remain visible to the other participants, without your personal data.

Reporting

Found a vulnerability or have a security concern? Write to privacy@iovago.app: we respond quickly.