Privacy Policy

Last updated: March 2026

PayaGo Ltd · Registered in England & Wales

The short version

We collect your email to send you early access updates. When the app launches, we collect only what we need to provide the service. We use Gemini AI and Claude AI to generate itineraries — your inputs are processed in real time and not used to train AI models. We never sell your data. You can request deletion at any time by emailing privacy@payago.in.

1. Who we are

PayaGo Ltd is a company registered in England and Wales (Company No. 16971574). Our registered address is available on request. We operate the PayaGo website at payago.in and the PayaGo mobile application (launching April 2026).

PayaGo Ltd is the data controller for personal data collected through our website and app. If you have questions about how we handle your data, contact us at privacy@payago.in.

2. What data we collect

2.1 Waitlist registration

  • Email address — to send you early access invitations and product updates
  • Name (optional) — if you provide it during sign-up
  • Country/region (optional) — to prioritise launch rollout

2.2 When you use the app (post-launch)

  • Account information: name, email address, profile photo (optional)
  • Trip data: destinations, dates, group size, budget preferences, itineraries you create
  • Payment information: processed securely by our payment provider — we never store card details
  • Voice input: if you use voice trip creation, audio is processed in real time and not stored after transcription
  • Usage data: features used, screens visited, error logs — to improve the product
  • Device information: device type, OS version, app version — for compatibility and support

2.3 Cookies and analytics

  • We use essential cookies to make the website function
  • We use analytics cookies (Google Analytics 4) to understand how visitors use our site — you can opt out via our cookie banner
  • We do not use advertising or tracking cookies

3. How we use your data

PurposeLegal basis
Send waitlist updates and early access invitationsLegitimate interest / Consent
Provide the PayaGo travel planning serviceContract performance
Process group payments through our payment providerContract performance
Improve our AI models and product featuresLegitimate interest
Send product updates and feature announcementsConsent (you can unsubscribe any time)
Comply with legal obligations (tax, fraud prevention)Legal obligation
Resolve disputes and enforce our termsLegitimate interest

4. AI processing

PayaGo uses Google Gemini AI and Anthropic Claude AI to generate trip itineraries, process natural language input, and provide travel assistance. When you describe a trip, your input (destination, budget, preferences, group size) is sent to these AI providers to generate results.

Google Gemini processes your requests under Google's API terms of service and privacy policy. Anthropic Claude processes your requests under Anthropic's API terms and privacy policy. Neither provider uses your individual inputs to train their models under our enterprise API agreements.

Voice inputs are transcribed to text in real time and only the text transcript is sent to AI providers — audio is not retained or transmitted.

We recommend you do not include sensitive personal information (passport numbers, financial account details) in trip descriptions.

5. Who we share data with

We do not sell your personal data to third parties. We share data only where necessary to provide the service:

  • Travel booking partners (hotels, flights, activities) — to complete bookings you request. Only the information needed to make the booking is shared (names, dates, contact details).
  • Payment processor — to process group payments securely. We share only what is required for payment processing; card details are handled entirely by the payment provider.
  • Google (Gemini AI) and Anthropic (Claude AI) — to generate itineraries and process natural language input, as described in Section 4.
  • Analytics providers (Google Analytics 4) — anonymised usage data to understand product performance.
  • Cloud infrastructure providers — to host and operate our service, under data processing agreements.
  • Legal authorities — where required by law, court order, or to protect safety.

6. How long we keep your data

Data typeRetention period
Waitlist email addressUntil you unsubscribe or request deletion
Account dataFor the duration of your account, plus 3 years after closure
Trip dataFor the duration of your account; deleted on account closure unless you export it
Payment records7 years (UK legal requirement for financial records)
Analytics data26 months (Google Analytics default)
Support communications3 years from the last communication

7. Your rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate or incomplete data
  • Erasure — ask us to delete your data ('right to be forgotten'), subject to legal retention requirements
  • Restriction — ask us to limit processing of your data in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email privacy@payago.in. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We apply industry-standard security measures including TLS encryption in transit, encryption at rest for sensitive data, access controls limiting who within PayaGo can access personal data, and regular security reviews.

No system is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected users as required by law.

9. International data transfers

Some of our service providers (Google, Anthropic) process data in the United States. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place — including standard contractual clauses approved by the UK ICO or the EU Commission.

10. Children

PayaGo is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@payago.in and we will delete it promptly.

11. Changes to this policy

We may update this policy as our product evolves. We will notify waitlist members and app users of material changes by email at least 14 days before they take effect. The 'last updated' date at the top of this page reflects the most recent version.

12. Contact us

For any privacy questions, data requests, or concerns, contact our team at privacy@payago.in. For partnership-related data questions, contact partnerships@payago.in.