Privacy policy

Who we are

ManaHolo is run by Mike Porter, based in Seattle, Washington, United States. We are responsible for the personal information described here. You can reach us at mike@agileedge.com.

What we collect

• Account details. If you create an account: your email address, your name if you give it, and your password, which we store only as a one-way hash.
• Guest use. If you start planning a trip without an account, we create an anonymous guest record so your conversation and trip are kept together. It holds no email or name.
• Sign-in sessions. Each time you sign in or start as a guest we record the session, your IP address and your browser's user agent, so you stay signed in and so we can spot misuse.
• Trip planning content. The messages you send in planning conversations, the itineraries and answers generated for you, your saved travel preferences, the trips you rank or review, and how you respond to suggestions we show.
• Booking link clicks. When you follow a booking link from one of your trips, we record which trip item and provider you clicked, your account, and the time. If the partner later tells us the click led to a booking, we record that and the commission amount. We do not record your IP address with the click.
• Payments. If you buy a subscription, payment happens on Stripe's checkout page. We never see or store your card number. We keep the Stripe customer and subscription IDs, your plan and its renewal date.
• Technical data. Like most websites, our server logs record IP addresses, requested pages and timestamps. We also count requests per IP address for a short time to block abuse.

Why we use it

• To run your account and keep you signed in.
• To generate and save trip plans, answer your questions, and remember your preferences between trips.
• To send emails you need, such as password reset links.
• To take payment for subscriptions and know which plan you are on.
• To track booking referrals so partners can pay us commission.
• To keep the site secure, prevent abuse and fix problems.

We do not sell your personal information, and we do not use it for advertising.

Who processes it for us

We share information only with services that help us run the site, and only what they need:

• Anthropic (the Claude AI models) receives the words you type into the hotel search box, and the text of any planning conversations and related trip details, so it can find matching hotels and generate itineraries, answers and impact estimates.
• Stripe receives your email address and name to create a customer record, and handles card payments under its own privacy policy.
• Travel partners whose prices and availability we look up receive search details such as destination and dates, not your name or email address. When you click through to a partner's site, that partner collects information under its own privacy policy.
• Google Analytics receives the pages you visit on our site, how you arrived, and your browser, device and approximate location, so we can see which pages people use. It sets its own cookies to tell visits apart.
• Google Fonts serves the typefaces on our pages, so your browser contacts Google, which sees your IP address.
• Our hosting and email providers store the site's data and deliver account emails on our behalf.

Some of these services are based outside your country, including in the United States. Where the law requires it, we rely on the safeguards they offer for international transfers.

We may also disclose information if the law requires it, or to protect our users or the site.

Cookies

We use a small number of cookies that the site needs to work: a signed session cookie that keeps you signed in (it lasts 30 days for guests and until you sign out for accounts), and a short-lived cookie that protects forms and remembers where to send you after sign-in. We also use Google Analytics cookies to count visits and see which pages are used. We do not use advertising cookies. Partner sites you visit through our links set their own cookies, including the ones they use to credit us for a referral.

Shared trips

If you create a share link for a trip, anyone with that link can view the trip. Do not share a link to a trip that contains anything you want to keep private.

How long we keep it

• Account information, conversations and trips: for as long as your account is open, or until you ask us to delete them.
• Guest records: the guest cookie expires after 30 days. We do not yet delete guest records automatically; ask us and we will.
• Payment and referral records: as long as we need them for accounting, tax and partner reconciliation.
• Server logs and abuse counters: short-term, for security and troubleshooting.

Your choices and rights

You can ask us for a copy of your information, to correct it, or to delete your account and the data tied to it. Depending on where you live you may have further rights, such as objecting to some uses or complaining to a data protection authority. Email mike@agileedge.com from the address on your account and we will reply within 30 days.

Security

We use encrypted connections (HTTPS), store passwords only as hashes, and limit who can access production data. No system is perfectly secure, so please use a password you do not use elsewhere.

Children

The site is not meant for children under 16, and we do not knowingly collect their information. If you think a child has given us personal information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and its effective date. For significant changes we will tell account holders by email.

Contact

Questions about privacy: mike@agileedge.com.