Data Security

When you travel, you trust Iovago with delicate documents: tickets, bookings, sometimes passports. This page explains transparently how we protect them and how you can delete everything, whenever you want.

Sensitive documents

• Documents travel exclusively over encrypted connections (TLS) and are stored encrypted at rest.
• They are visible only to you and to the trip participants you choose to share them with.
• When the concierge reads a document, its content is processed by Anthropic's Claude models for the sole purpose of extracting travel information and is not used to train the models.
• Tip: upload identity documents only when necessary, and prefer versions with non-essential data redacted.

Infrastructure and data residency

• Storage 100% within the European Union on Google Cloud / Firebase: the database (trips, users, concierge conversations) resides in the EU multi-region eur3 (data centers in Europe, Netherlands/Belgium area); photos, PDFs and attachments reside on Cloud Storage in the EU multi-region eur4.
• Part of the application processing (Google Cloud Functions) and the concierge's AI processing (Anthropic/Claude) take place in the United States, with the safeguards required by the GDPR for extra-EU transfers (Standard Contractual Clauses). Data is processed, not stored, outside the EU.
• Internal access to data is restricted, logged and governed by the principle of least privilege.
• Encrypted backups and tested recovery procedures.

Account deletion

You can delete your account and all associated data on your own, at any time:

• open the web app and go to Profile → Account → Delete account;
• or write to privacy@iovago.app from your account's email address.

Deletion removes your account, trips, documents and personal data within [30] days. Shared trips remain visible to the other participants, without your personal data.

Reporting

Found a vulnerability or have a security concern? Write to privacy@iovago.app: we respond quickly.