Privacy Policy

Last updated: 8 June 2026

This policy explains how Imawaynow (“we”, “us”) collects, uses and shares personal data when you use imawaynow.com and book.imawaynow.com (the “Service”). For data-protection purposes, Imawaynow is the data controller for the data described here. Contact us at hello@imawaynow.com.

1. What we collect

• Account data — your email address and a securely hashed password.
• Trip searches — origins, destinations, dates, budgets, vibes and any free-text notes you add.
• Travel profile — preferences you save (flights, hotels, events) and how you feel about destinations.
• Saved trips — plans you choose to bookmark.
• Booking-click data — when you click a “Book” or “Compare” link, we record which trip option you chose and its context (its rank, price, score and how it compared to alternatives). We use this only to measure and improve our ranking; it is retained for up to 24 months and is deleted when you delete your account.
• Booking data — when you book a hotel, the booking and payment are handled on our behalf by our partner LiteAPI’s booking platform. We do not store your card details.
• Technical data — a session cookie to keep you logged in, plus basic logs (IP, timestamps) for security and reliability.

2. How we use it

• To run searches and produce ranked trip plans.
• To personalise results using your profile and preferences.
• To process hotel bookings through our partner.
• To keep the Service secure, prevent abuse and fix problems.
• To communicate with you about your account or bookings.

3. AI processing

To rank trips and write the plain-language explanations you see, we send the details of your search — including your trip preferences and any free-text notes — to our AI provider (Moonshot AI / “Kimi”) for processing. Please avoid putting sensitive personal information in free-text notes.

4. Who we share it with

We share data only as needed to provide the Service, and we do not sell your personal data:

• LiteAPI — hotel inventory and bookings; acts as our processor for booking and payment data under a Data Processing Agreement. When you proceed to book, we may sign you into the booking site using your name and email so you don’t have to log in again.
• Travelpayouts / Aviasales — flight and travel partner links and monetisation. Clicking a flight link takes you to a partner site governed by its own privacy policy.
• Moonshot AI (Kimi) — AI ranking of your search (see section 3).
• Data providers used to build results — these receive only search parameters such as city, dates and the name of an artist/team/show you’re looking up, never your account identity:
  • SerpApi — live flight prices.
  • Ticketmaster, Eventbrite, SeatGeek — events and tickets.
  • TheSportsDB — sports fixtures.
  • Wikidata, MusicBrainz — public reference data used to identify the artists, teams and shows you follow (queried by name only).
  • Tavily — web search used to ground our neighbourhood/city write-ups (queried by city name).
  • Google Places — hotel ratings/review counts for shortlisted hotels (queried by hotel name and location).
  • Open-Meteo (weather), Nager.Date (public holidays) and GDELT (news/disruption signals) — queried by destination, not by you.
• Sign-in with Google — if you choose Google sign-in, Google processes your authentication and shares your email and basic profile with us under Google’s privacy policy.
• Infrastructure — Microsoft Azure (hosting + secrets in Azure Key Vault), Neon (database) and Cloudflare (DNS).

5. Cookies

• Essential — a session cookie that keeps you logged in. Always on; the site can’t work without it.
• Partner (optional) — with your consent, we load Travelpayouts “Drive”, which may set cookies to attribute travel bookings. It is not loaded unless you accept via our cookie banner, and you can decline.

6. How long we keep it

• Account & profile — until you ask us to delete it.
• Search jobs — periodically removed (typically within about a week).
• Saved trips — until you delete them (from your Saved page) or delete your account.

7. Your rights

Depending on where you live (for example, the UK/EU under UK GDPR / GDPR), you may have rights to access, correct, delete, port or object to the processing of your data, and to withdraw consent. To exercise any of these, email hello@imawaynow.com.

8. International transfers

Some partners and providers may process data outside your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses).

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy; the “last updated” date will change and material changes will be highlighted where appropriate.

11. Contact

Questions or requests: hello@imawaynow.com.