1. Information We Collect
- Trip preferences you submit (destination, dates, interests, party size). These are sent to our AI provider to generate your itinerary.
- Order identifier assigned to each itinerary so you can re-open it via a unique link.
- Payment information is handled entirely by Stripe. We never see or store your card number.
- Email address when you request a route email. It is added to Masaru's letter-mail list only when you separately select the optional signup checkbox.
- Server access logs (IP, user agent, timestamp) retained for a short period for security and abuse prevention.
2. How We Use Information
- To generate and deliver your itinerary.
- To send occasional letter emails only to users who explicitly opt in.
- To process voluntary tips via Stripe.
- To respond to support and feedback emails you send us.
- To detect abuse and keep the Service running.
We do not sell or rent your personal data to third parties.
3. Third-Party Services
The Service relies on the following processors:
- Google Gemini (Generative AI) — generates itinerary text from your inputs. See Google Privacy Policy and Gemini API Terms.
- Anthropic Claude (Generative AI) — generates itinerary text from your inputs. See Anthropic Privacy Center.
- Google Maps Platform / Places API — supplies venue data and map embeds. Use of maps is governed by the Google Maps Platform Terms.
- Stripe — payment processing for tips and paid services. See Stripe Privacy.
- Resend — transactional route emails and opted-in letter emails. See Resend Privacy Policy.
- Vercel — hosting and request logs. See Vercel Privacy.
- Turso — stores order, itinerary, and opt-in subscription records. See Turso Privacy Policy.
- Cloudflare — DNS, CDN and bot protection. See Cloudflare Privacy.
- Unsplash — some imagery is served via Unsplash. See Unsplash Privacy.
4. Cookies and Local Storage
We use only essential cookies and local storage (language preference, session state, Stripe Checkout). We do not currently use analytics or advertising trackers. See our Cookie Policy.
5. Data Retention
Generated itineraries are retained so you can re-open them via your order link. Letter-mail subscription records are retained until you unsubscribe or request deletion. Server logs are kept for a short window. You may ask us to delete any of your data at any time.
6. Your Rights
Depending on your jurisdiction (including EU/UK GDPR and Japan APPI), you may have rights to access, correct, or delete your personal data, and to withdraw consent. To exercise these rights, email contact@buraburaquest.com.
7. International Transfers
The processors above may store and process data outside your country (typically the US or EU). By using the Service you consent to such transfers.
8. Children
The Service is not directed to children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date above.
10. Contact
Questions or requests: contact@buraburaquest.com