Privacy Policy
Last updated: 21 July 2026
This policy explains how QuoteLuxeAI ("QuoteLuxeAI", "we", "us") collects, uses, and protects personal data when a travel advisory business ("you", "your agency") uses our platform to build and share travel quotes with their clients ("travellers").
Who this applies to
Two kinds of people's data pass through QuoteLuxeAI:
- Advisors — the people at your agency who sign up, log in, and build quotes.
- Travellers — your clients, whose names, contact details, and trip information appear on the quotes you create and who may submit a booking enquiry through a published quote.
What we collect
Account data: your name, email address, and agency details, collected when you sign up and update your settings.
Client/traveller data: whatever you enter or upload about your clients and their trips — names, contact details, destinations, hotel and flight information, and any documents (PDFs, screenshots, pasted text) you provide to build a quote.
Booking enquiries: when a traveller submits an enquiry from a published quote, we collect their name, email, and phone number and forward it to the advisor who created that quote.
Billing data: handled directly by Stripe, our payment processor — we never see or store full card details ourselves.
Usage data: standard, aggregated technical analytics (via Vercel) about how the platform is used — this does not identify individual travellers and is not linked to client data.
How AI is used
QuoteLuxeAI uses Claude, an AI model provided by Anthropic, to read the documents and information you provide and turn them into a structured quote — extracting hotel names, dates, prices, and similar details, and (optionally) writing supporting descriptive text. Anthropic processes this content as our data processor, under its own data-handling terms, solely to provide this service to us — it is not used to train Anthropic's models. See our separate AI Usage & Processing Notice for more detail.
Where data is stored
- Database and file storage: Supabase, a hosted Postgres and storage provider.
- Application hosting: Vercel.
- Payments: Stripe.
- Email delivery: Resend.
Each of these providers acts as a data processor on our behalf, bound to protect the data they handle.
How long we keep data
We keep account and quote data for as long as your account is active, plus a reasonable period afterward to handle support requests, legal obligations, or account recovery. If you close your account, contact us and we will delete your agency's data (see "Your rights" below) except where we're required to retain it (e.g. financial records for tax purposes).
Your rights (UK GDPR)
If you are in the UK or EU, you have the right to:
- Access the personal data we hold about you or your clients.
- Correct inaccurate data.
- Erase your data ("right to be forgotten").
- Export your data in a portable format.
- Object to or restrict certain processing.
To exercise any of these rights, contact us at privacy@quoteluxeai.com. We currently handle these requests directly rather than through a self-service tool, and will respond within one month as required by law.
Contact
Questions about this policy, or about how your data (or your clients' data) is handled, can be sent to privacy@quoteluxeai.com.
This policy is a clear statement of our current practices, written to be genuinely accurate rather than boilerplate — it is not, however, a substitute for independent legal advice specific to your business.