Privacy, in plain language.

Trip designer

When you create a personalized design, we save your name, email, phone, structured preferences, private trip note, generated sample, creation time and consent choices. The site owner can read those records in a restricted workspace. Creating a design does not book travel or authorize a payment. Do not submit card, passport, medical or other sensitive information.

Your saved design

A secure browser cookie lets you reopen your own saved designs in that browser for seven days. The cookie contains a random identifier, not your contact details. Contact fields are not stored in browser local storage. Saved records remain in the business database after the browser cookie expires. The owner uses those records to manage designs and stated contact preferences.

Storage security and owner controls

Submitted records are stored in this Site’s Cloudflare D1 database. Cloudflare encrypts D1 storage using provider-managed keys and secures Worker-to-database traffic with TLS. The application does not separately encrypt individual fields. The authenticated site owner can view, export and delete individual records in the Data & security tab of the owner workspace. Deleting a design also removes its live share records. Deletion does not erase downloaded copies, other submissions from the same person or provider backups. Hosting infrastructure and authorized project/database administrators retain platform-level access.

Form protection

Trip Designer submissions use server-side validation, a honeypot, same-origin checks and database-backed rate limits. Production Cloudflare Turnstile verification is required when both Turnstile keys are configured. Without those keys, curated samples use the other controls. Live AI generation requires active Turnstile protection, an enabled server-side AI setting and available daily quota. When Turnstile is active, Cloudflare processes widget information and receives the verification token on our server’s validation request. Contact details and trip preferences are not sent to Turnstile by our application.

Payments

This website does not ask for card numbers, card security codes or card expiry dates. Live payments remain closed until the payment and flight accounts are connected and tested. The flight checkout uses Stripe’s embedded Checkout. Card details go directly to Stripe through its iframe and never through Bougie forms or servers. Do not submit card details in free-text fields.

Flight booking records

Flight searches store route, dates, adult counts and short-lived supplier offers. When you continue to flight payment, we save adult passenger names, dates of birth, airline gender markers and titles, contact email and phone, accepted price and terms, payment identifiers, booking status and airline confirmation. We do not collect passport documents in this first release. Passenger details go to the flight provider and operating airline to issue the booking. Stripe receives payment information and contact email. A secure, random browser cookie limits access to your booking record in its original browser for 24 hours after your last flight-configuration visit. Keep the airline confirmation for later travel. Payment and booking records remain in the business database for operational, dispute and applicable recordkeeping needs. The owner sees booking status in the restricted Flight bookings workspace. Contact Bougie for access, export or deletion review. Legal and payment recordkeeping obligations apply. Flight records use the same provider-managed database encryption and administrative access described above.

Online stay booking and service emails

Online stay search stores the selected collection, exact dates, adult count, room quote and supplier terms. Continuing to payment saves the lead guest’s name, email, phone, accepted total and terms in stay_checkouts. No card numbers or passport documents are stored. Guest information is shared with the accommodation booking provider to create the reservation. The same provider-managed database encryption and administrative access described above apply. A verified booking sender, when connected, sends service confirmations through Resend using your email and booking details. Optional checkout-resume emails require a separate, unchecked consent box and do not enroll you in marketing.

A private resume link expires in 24 hours and grants access only to its specific checkout record. Its random token is exchanged for a secure, HttpOnly browser cookie. Keep the link private. The last reviewed price in an email is historical. Rates and availability are checked again before payment, and an expired offer requires a new review. Sent email bodies are removed from the live outbox record after provider acceptance. Transaction identifiers and delivery status remain for service operations. Test-mode messages stay in the owner’s preview outbox and are not delivered.

Optional AI processing

Curated sample mode uses planning templates without sending information to an AI provider. If live AI is enabled and you explicitly choose it, structured trip preferences are sent to OpenAI to draft itinerary text. Contact fields and the private note field are excluded. This integration requests that OpenAI not store the response, but the provider’s applicable processing and retention terms still govern its service. AI results can be inaccurate and require review. Budget targets are calculated from your chosen range, not fetched from an AI or live supplier.

Group sharing

Sharing is off by default. Creating a group link publishes a copy of the itinerary, departure city, destination, dates, traveler counts, preferences and planning budget targets to anyone who has the link for 30 days. Contact fields and the raw private note field are excluded. Review the result before sharing it. Shared pages ask search engines not to index them. You can disable a link from your saved design in its original browser. Anyone you share with can still copy or screenshot the content.

Secret deals

The separate, optional checkbox records whether you want marketing messages. It is unchecked by default. Email ownership has not been verified, and submitting this preference does not enroll you in an active campaign. No email, SMS or WhatsApp messages are sent automatically by the trip designer.

Saved Eats & Experiences

Your dining and experience shortlist stores only catalog item IDs in this browser. It does not store contact or payment details. Clear saved picks removes the shortlist. When you include picks in a personalized design, they become saved trip preferences and appear in any group link you explicitly create. Removing a shortlist item does not change a previously saved or shared design.

Travel Safety Card

Optional insurance and trusted-contact fields are used on your device to generate the Safety Card PDF. They are not sent to our server or saved by this form. The downloaded PDF may contain private information, so store and share it carefully. Country advisory checks send only the selected country ID to the website.

Travel Cyber Safety checklist

The optional safety checklist stores only the IDs of tips you check in browser local storage. This progress is not sent to the business database or included when you share the guide link. Reset clears the ticks. It does not inspect your devices, accounts or security settings.

Destination weather

Forecast requests send only a selected city or gateway ID to our server. Our server requests public MET Norway data using fixed reference coordinates, without forwarding your name, contact details, trip dates or device location. We cache forecasts to reduce requests. Seasonal guidance is editorial information linked to official sources. This does not enroll you in weather alerts or pre-trip messages.

Partner booking links

Available hotel and activity links open the named booking provider’s website. That provider collects the details and payment needed to complete its booking under its privacy terms. Bougie does not collect a card or require an email form before you follow a partner link. Affiliate parameters identify Bougie’s referral account. Partner booking records and commission information are available to Bougie only as permitted by the provider account and program terms. Off-domain checkout abandonment is not automatically visible to this site, and no Bougie abandoned-checkout email is sent merely because you click a partner link.

Browsing and service providers

The airport directory is hosted with this site. Hosting and database services process information needed to operate the website. Place suggestions used in parts of the site can use Photon, an OpenStreetMap-based lookup service. A WhatsApp link, when connected, opens WhatsApp only when you choose it, and its service terms then apply.

Website measurement and abuse prevention

Browser session storage may remember campaign tags, the first landing page and the referring website’s hostname. Anonymous aggregate page and button counts help us understand usage. Third-party marketing pixels are not active. For abuse prevention, a daily hash of a platform-provided IP address or a random browser identifier may be used with a short-lived request count. The raw address is not stored by the designer application.

Tailored itinerary requests

A tailored trip request saves your name, email, destination, departure, dates, adult count, budget, selected sample and hotel direction, notes, consent timestamp and acknowledged planning-fee policy in the trip_requests table. Only the authenticated owner reads and manages these records. A next-business-day deadline is stored for follow-up. No supplier, email, payment or paid planning action is triggered automatically. The owner’s existing Data & security controls support record export and deletion. Requesting a quote does not enroll you in marketing.

Stay quote requests

A stay request saves your name, email, destination, dates, traveler count, stay style, budget, notes and contact consent in the trip_requests table. The authenticated owner reads and manages these records in the owner workspace. Submitting a request permits contact about that stay and does not enroll you in marketing, reserve travel or authorize payment. No supplier search or email is automatically sent by this form. The owner’s Data & security controls support per-record export and deletion.

Historical submissions

Earlier trip requests and checklist preferences remain restricted to the owner. Removing earlier public forms did not delete these records.

Privacy contact

The business email is letsgo@bougietrip.ai. Mailbox delivery has not yet been verified. A verified support and privacy contact must be established before reservations launch.