Privacy Policy

Effective Date: February 7, 2026

BacPac AI ("we," "us," or "our") is operated by BacPac Technologies LLC. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered travel planning application at mvp.bacpacai.com (the "Service").

1. Information We Collect

1.1 Google Account Information

When you sign in with Google, we receive the following information associated with your Google account:

Profile information (name, email address, profile picture) via the profile scope
Email address via the email scope

1.2 Google API Scopes

Our application requests access to the following Google API scopes:

https://www.googleapis.com/auth/drive.file — Allows the app to create, open, and modify files in your Google Drive that were created by the app. This is used to save your generated travel itineraries to your Google Drive.
https://www.googleapis.com/auth/gmail.compose — Allows the app to create and send email drafts. This is used to let you share itineraries via email.
profile — Access to your basic profile information (name and profile picture) for personalization within the app.
email — Access to your email address for account identification.

1.3 Travel Preferences & Inputs

We collect the trip details and preferences you provide to the AI (destinations, dates, interests, budget preferences, etc.) in order to generate personalized itineraries.

2. How We Use Your Information

We use your information solely to provide and improve the Service:

Authentication: To sign you in and identify your account.
Itinerary generation: To create personalized travel plans based on your inputs.
Google Drive storage: To save generated itineraries as documents in your Google Drive (only files created by BacPac AI).
Email sharing: To compose and send itinerary-sharing emails at your request.
Service improvement: To understand usage patterns and improve the product (in aggregate, non-personally-identifiable form).

3. Data Storage & Security

Your Google OAuth tokens are stored securely and encrypted at rest.
Travel inputs and generated itineraries may be temporarily stored on our servers to provide the Service. Generated itineraries are saved to your Google Drive.
We use industry-standard security measures including HTTPS encryption for all data in transit, encrypted storage for sensitive credentials, and access controls on our infrastructure.
Our application is hosted on Google Cloud Platform (Firebase), which provides enterprise-grade security infrastructure.

4. Data Retention & Deletion

We retain your account information and trip data only as long as your account is active or as needed to provide the Service.
You may request deletion of your account and all associated data at any time by emailing privacy@bacpacai.com.
Upon account deletion, we will delete or anonymize all personal data within 30 days, except where retention is required by law.
Google OAuth tokens are revoked upon account deletion.

5. Data Sharing & Third Parties

      We do not sell, trade, or share your personal data or Google user data with any third parties.
    

We do not share Google user data with third parties except as necessary to provide the Service (e.g., Google APIs).
We do not use Google user data for advertising purposes.
We do not allow humans to read your Google user data unless (a) we have your explicit consent, (b) it is necessary for security purposes (e.g., investigating abuse), (c) it is required by law, or (d) the data is aggregated and anonymized for internal operations.
Third-party service providers who may process data on our behalf (such as cloud hosting) are bound by contractual obligations to protect your data and may only process it as instructed by us.

6. Google API Services User Data Policy Compliance

BacPac AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We only use Google user data for the purposes described in this Privacy Policy and as necessary to provide the Service.
We do not use Google user data for serving advertisements.
We do not transfer Google user data to third parties unless necessary to provide or improve the Service, comply with applicable laws, or as part of a merger/acquisition (with user notice).
We do not use Google user data to develop, improve, or train generalized AI/ML models that are unrelated to the Service.

7. Your Rights & Choices

You have the right to:

Access the personal data we hold about you.
Correct inaccurate personal data.
Delete your account and personal data.
Revoke Google API access at any time through your Google Account permissions.
Export your data upon request.

8. Cookies & Tracking

We use essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising pixels.

9. Children's Privacy

BacPac AI is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us:

Email: privacy@bacpacai.com
Website: bacpacai.com