Privacy Policy

viaPyxis is software that travel advisors use to plan trips and share them with their clients. It's published by Edge of Wonder Travels Unlimited LLC ("we," "us"). This policy covers:

• the advisor app at app.viapyxis.com,
• the itinerary pages, PDFs and links advisors share with travelers,
• the Folio app for travelers, and
• our websites, including viapyxis.com.

Together these are the "Service." Our Terms of Use also apply.

1. The short version

• We don't sell or rent anyone's information, and we don't show ads.
• Your travel advisor's agency decides what goes into your trip. We run the software for them.
• We use outside companies to run parts of the Service (hosting, email, PDFs, maps, AI). They get only what their job needs.
• You can ask to see, correct or delete your information.

2. Who is responsible for your information

Advisors and agencies. When an agency or advisor creates an account, we decide what we collect about them and why. We're responsible for that information.

Travelers. Your agency decides what goes into your itinerary and holds your trip records. We handle that information only on the agency's behalf and under its instructions. Questions about your trip, your booking, or what your agency does with your information are best sent to your advisor. Questions about the Service itself come to us.

3. Information about advisors and agencies

• Account details: name, email address, and, if you sign in with Google, your Google account's name and email. We never see your Google password.
• Agency details: agency name, logo, colors, fonts, web address, team members and their roles, and settings.
• What you create: trips, itineraries, text, photos, documents, client records and messages.
• Connections you choose to turn on: if you connect Gmail, Outlook, HubSpot, Slack or a calendar, we store the access those services grant so viaPyxis can act for you (for example, sending an itinerary email from your own mailbox). You can disconnect at any time.
• Help chat: questions you ask the in-app help assistant and its answers, kept for 180 days to improve the help.
• Activity: a log of changes made to trips (who changed what, and when), so agencies can see history and undo mistakes.
• Usage and device information: pages visited, browser type, IP address and error reports, as described in Sections 6 and 9.
• Billing details: when paid plans begin, the billing contact and plan. Card details are entered with and held by Stripe; we never see or store full card numbers.
• Support: what you tell us when you write to support.

Gmail. If you connect Gmail, viaPyxis asks Google for one permission: to send email as you. We use it only to send the itinerary emails you write and send from viaPyxis, to the travelers you choose. We can't read, search or delete anything in your mailbox, and we don't see your contacts. We keep the access Google grants in our database and use it for nothing else. It is never sold, never shared outside viaPyxis, never used for advertising, and never used to train AI models. For each email sent, the trip keeps a record of who it went to, the subject, the attachments and Gmail's message ID. When you disconnect Gmail in Settings, we delete the stored access right away, and you can also remove viaPyxis from your Google account at myaccount.google.com/permissions.

viaPyxis's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Information about travelers

What your advisor adds. Your name and the names of others traveling with you, contact details, your itinerary, flights, hotels, cruises, documents, and contacts for the trip.

What you add.

• Your sign-in email address. We send a one-time code to it; there are no passwords.
• Messages you send your advisor, in the app, on your itinerary page, or by replying to a message email.
• Booking confirmations or other documents you send your advisor through the Service, and requests to add something to your trip.

In the Folio app.

• A push notification token for your device, if you allow notifications, and your notification choices.
• Your trips are saved on your phone so they open without a connection.
• If you turn on Face ID, the check happens on your phone. Your face data never leaves the device and we never receive it.

What the Folio app doesn't do. Folio has no advertising and no analytics. It doesn't track you across other apps or websites and doesn't use your location.

5. How we use information

Only to run and improve the Service:

• signing people in and keeping accounts secure;
• showing trips to advisors and travelers, creating PDFs, and sending notifications people have turned on;
• passing messages between travelers and advisors;
• looking up flight status, hotel and cruise details, maps and travel times;
• drafting text and reading documents with AI when an advisor or traveler uses those features (Section 7);
• answering support requests and fixing problems;
• understanding which parts of the advisor app are used, so we can improve them; and
• meeting legal obligations and enforcing our Terms.

We don't use anyone's information for advertising, and we don't sell it or share it for cross-context behavioral advertising.

6. Cookies and similar tools

• Sign-in cookies keep you signed in to the advisor app and to your itinerary pages. The Service doesn't work without them.
• Preference cookies and browser storage remember choices in the advisor app, such as list views and filters.
• Google Analytics measures how this website, the advisor app and the traveler itinerary pages are used: pages visited, how visitors arrived, and general device and location information. It sets its own cookies. You can block them in your browser, or use Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
• Fonts, icons and maps load from Google, Adobe and Font Awesome, which shows them your IP address and the page you're on. Videos an advisor embeds load from YouTube or Vimeo.

The Folio app uses none of the analytics above.

7. AI features

Some features send text to an AI provider to produce a result:

• drafting or rewriting itinerary text, chapter titles and descriptions;
• looking up and checking hotel, ship and cruise details;
• reading an itinerary an advisor imports from another system;
• reading a booking confirmation a traveler or advisor uploads, to fill in trip details; and
• answering questions in the help assistant.

These requests go to Anthropic (Claude) and Google (Gemini). How they handle it is set by their terms for business use: Anthropic's Commercial Terms and Privacy Policy, and Google's Gemini API Additional Terms and Privacy Policy. We don't use anyone's information to train AI models.

AI output can be wrong. Advisors review it before sharing it with travelers.

8. Who we share information with

• Your agency. Travelers' information is available to the agency and advisors handling their trip. An agency's information is visible to its own team, by role.
• Services an agency connects. If an agency connects Slack, HubSpot, Gmail or Outlook, information goes there as the agency sets it up. For example, a Slack alert can include a traveler's name and the start of their message. Those services' own privacy policies apply.
• Our service providers, listed in Section 9, who process information only to provide their service to us.
• When the law requires it, or to protect people's safety or our rights.
• If the business changes hands, information would transfer with it, under this policy.

9. Service providers

Everywhere

• Supabase: secure database, file storage and sign-in. Holds all account and trip information.
• Vercel: hosting for the advisor app and traveler pages.
• Sentry: error reports from the advisor app and the Folio app. Set not to send names, emails or IP addresses. Reports from the advisor app can include an internal account number.

Email and notifications

• Resend: emails for sign-in codes, invitations, messages and flight alerts, with the recipient's name and email address.
• Expo and Apple Push Notification service: Folio notifications, with the text of the notification (for example, a flight change).

Trips, maps and PDFs

• FlightAware and Cirium: flight status, using the airline, flight number and date only.
• Google Maps Platform: maps, places, travel times and map images, using place names and locations. The traveler's or advisor's browser loads Google's maps directly.
• Mapbox: hotel maps in PDFs, using hotel names and locations only.
• DocRaptor: turns itineraries into PDFs. It receives the itinerary content.
• OpenStreetMap, Wikidata and what3words: place and route lookups, using place names and locations only.
• GIATA, Unsplash, Pexels and Pixabay: hotel and stock photos. Only search terms are sent.

AI

• Anthropic and Google (Gemini): see Section 7.

Fonts and analytics

• Google Fonts, Adobe Fonts and Font Awesome: typefaces and icons.
• Google Analytics: see Section 6.

Payments (when paid plans begin)

• Stripe: subscription billing. Holds card details and the billing contact.

Advisor connections (only when an agency turns them on)

• Google (Gmail), Microsoft (Outlook), HubSpot and Slack.

Our providers are in the United States. If you use the Service from elsewhere, your information is transferred there.

10. Keeping and deleting information

• Advisor and agency accounts are kept while the account is open. After an account closes, we delete its content within 30 days, except copies in backups, which are deleted on their normal schedule, and anything we must keep by law.
• Help chat conversations are deleted after 180 days.
• Folio accounts. Your sign-in and notification settings are kept while you have an account. To delete your account, open My Trips, tap your initial at the top, then Delete account. This removes your sign-in, your device's notification token, and your notification history right away.
• Trip records. Your itinerary and message history belong to your agency's records and stay with them. To have those removed, ask your advisor, or write to us and we'll pass the request to your agency.

11. Security

Information is encrypted in transit, access is limited by account and role, and agencies can't see one another's data. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.

12. Your rights

Depending on where you live (including California and the EU/UK), you can ask to see, correct, or delete your information, to get a copy of it, or to object to how it's used. We don't sell or share personal information for advertising, so there's nothing to opt out of. We won't treat you differently for using these rights.

Write to the address below. We'll verify it's you and reply within 45 days. Travelers: if your request is about trip records your agency holds, we'll pass it to your agency, which decides it.

California residents can also ask what categories of personal information we collected about them in the past 12 months and who we disclosed them to. The categories are the ones described in Sections 3, 4 and 6: identifiers (name, email, IP address), trip and travel information, messages, device and usage information, and, for advisors, professional information.

13. Children

The Service isn't directed to children under 13, and we don't knowingly collect information from them. A child's name or details may appear in a family's itinerary when their parent or guardian books a trip; that information is handled like any other traveler's.

14. Changes

If this policy changes, the new version will appear here with a new date. For a significant change, we'll also tell advisors by email or in the app.

15. Contact