Last updated: September 17, 2026
The Plan (theplan.travel) is operated from Mexico. Contact: [email protected]
There are two ways to have an account, and they change what data exists about you:
On the web there are no proactive messages, no location sharing and no photo or document uploads: those live only in Telegram, so a web-only account never generates that data. You can link your web account to Telegram whenever you want; if you do, both become the same account.
If you register a travel agency, we also store the agency name, city, country, your contact name and, if you give it, a phone number. We use that to set up your workspace and to reach you.
| Data | Purpose | Legal basis |
|---|---|---|
| Telegram ID + name, or email (depending on how you sign in) | User identification | Consent |
| Agency details (name, city, country, contact, phone) | Setting up and running the agency account | Service execution |
| Traveler profile (TravelerDNA) | Personalize recommendations | Consent |
| Trips, itineraries, reservations | Planning and tracking | Service execution |
| Chat messages | Conversation context | Service execution |
| Personal milestones (birthdays, etc.) | Proactive suggestions | Consent |
| Location (only if you share it) | Nearby recommendations | Explicit consent |
| Health data (optional) | Trip emergencies | Explicit consent |
| Email (waitlist) | Product communication | Consent |
| Survey answers (anonymous) + approximate country/city | Statistics and content improvement | Consent |
| Self-reported demographics (age range, gender — optional) | Statistical analysis | Consent |
Public surveys (theplan.travel/survey) are anonymous: we do not store your name or IP address. Approximate country and city are derived at our network edge (Cloudflare) without storing the IP.
Everything above is about your bot account. Browsing the site is different: we measure visits in a way that is anonymous by construction, storing nothing on your device.
We record the page, the language, the domain you arrived from, the campaign parameters of the link you used, the country our network provider reports, whether you are on mobile or desktop, how far down the page you scrolled, how long you stayed and which links you clicked.
We do not store your IP or your full browser string. To count distinct people within a single day, we turn them into an irreversible code using a secret key that we rotate every 24 hours, so the next day we cannot tie that visit to you or to the previous day's. None of this is linked to your bot account, even if you have one.
Google Analytics and the Meta Pixel are separate and only load if you accept the cookie banner. Details in the Cookie Policy.
To provide the service, we share data with the following categories of providers:
| Category | Purpose | Location |
|---|---|---|
| AI providers | Generation of recommendations and personalized responses | United States, International |
| Cloud infrastructure | Data storage, hosting, cache | United States |
| Messaging platform | User communication interface | International |
| Web account authentication | Sign-up, sign-in and email confirmation | United States |
| Email sending and receiving | Confirming your account, account notices and replying to you | United States, International |
| Website analytics and measurement (only if you accept cookies) | Understand which content works and where visits come from | United States, International |
We use industry-leading providers with recognized security standards. The specific list of sub-processors is available upon request at [email protected].
We do not sell or share your data with advertisers, data brokers, or third parties unrelated to the operation of the service.
Your data may be processed in the United States and other countries where our infrastructure and AI providers operate. These transfers are necessary to deliver the service and are made based on your explicit consent when using The Plan. We ensure our providers maintain adequate data protection standards.
| Data type | Retention |
|---|---|
| Chat session (Redis) | 30 minutes of inactivity |
| Temporary pages | 24 hours |
| Traveler profile | While the account exists |
| Trips and itineraries | While the account exists |
| Reservations | While the account exists |
| Personal milestones | While the account exists |
| Rate limiting data | 24 hours |
| Waitlist email | Until you unsubscribe |
| Inactive free accounts | Warning after 30 days of inactivity; deleted 14 days later |
Inactive free accounts. If you go 30 days without using the service and you're on the free plan, we warn you (on Telegram or by email, depending on how your account works) that we're going to delete it. You have 14 days: any activity on your side cancels the deletion. Otherwise everything goes — profile, trips, memories — and coming back means starting from scratch. Paid accounts and agency accounts are not part of this cleanup.
/exportdata in the bot to download all your data in JSON format./deleteaccount to permanently erase all your data. Requires double confirmation./profile to view your profile. Contact [email protected] for corrections.The Plan is not intended for users under 16. We do not knowingly collect data from minors.
If we make significant changes, we will notify you before they take effect: on Telegram if that's how you signed in, or by email if your account is a web one.
To exercise your rights or for any privacy inquiry:
Email: [email protected]
Telegram: @theplan_travel_bot (/privacy command)