Privacy Policy

Last updated · 26 October 2026

Converse AI Inc. (Cura, we, us, or our) operates the Cura travel agent service. This policy explains what we collect, why, who we share it with, and how you get rid of it. Cura books real trips with real suppliers, so some of your information has to leave us in order for anything to be booked. This page says exactly when.

1. What we collect

• Account data. Your name and phone number when you create an account.
• Google account data. Your name, email address and profile picture, if you sign in with Google.
• Travel email. With your permission, we read the travel-related messages in the inbox you connect: flight, hotel, train, rail-pass, visa and car-hire confirmations. We do not read messages that are not about travel, and we do not send email as you.
• Trip and preference data. Where you have been, where you are going, and how you travel: seat preference, cabin, meal and diet, timing, loyalty and card programmes, and the constraints you tell Cura once so it stops asking.
• Traveller details needed to book. Passport number, date of birth, nationality, expiry, and any visa or documentation details, where a booking or an application requires them.
• Messages. What you send Cura and what Cura sends you, in any language.
• Usage data. Anonymous analytics about how the product is used.

2. How we use it

To find, book and run your trips. That means comparing options, making the booking, checking you in, filing visa applications, watching fares, tracking changes to your itinerary, getting you rebooked when something breaks, and producing the receipt at the end.

It also means getting to know how you travel, so Cura stops asking you the same questions on every trip. We do not train AI models on your data.

We also measure our advertising. When you visit joincura.club or use the Cura app, and when you sign up or make a booking, we share a limited set of information with Meta (Facebook and Instagram) so we can see which adverts bring people to Cura. Section 3 says exactly what is shared and how to stop it.

3. Advertising and measurement

We advertise Cura on Meta's platforms and we measure whether those adverts work. Two things are involved: a Meta Pixel in the pages of joincura.club and in the Cura app, and a connection from Cura's own servers to Meta, which Meta calls the Conversions API. Both report to the same Meta dataset.

What we share. Your email address and phone number, hashed — turned into an irreversible code before they leave our servers, so that Meta cannot read them and can only compare them against codes it already holds. An identifier for your Cura account, also hashed. Your IP address and browser user-agent, which are not hashed, because Meta requires those in the clear. The cookies the Meta Pixel sets in your own browser. And the event itself: that a page was viewed, that an advisor was contacted, that an account was created, that a checkout was started, or that a booking was paid for — the last two with the amount and the currency.

What we never share. Anything you have written to Cura. Your itineraries, destinations or travel dates. Anything read from a Gmail inbox you connected. Passport and travel-document details. Payment card details. Which hotel or flight you booked. Meta learns that a booking happened and what it cost, never where you are going.

How to stop it. Most browsers and privacy extensions block the Meta Pixel. Your Meta account's ad settings, including "Activity off Meta technologies", control how information about you is used for adverts. You can also write to hello@joincura.club and ask us to exclude your account, which stops the server-side half too.

4. Google user data

Cura's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data to deliver Cura's travel functionality: identifying you in the app, reading travel confirmations from the inbox you connect, and building your trip history and preferences. We do not sell it, and we do not use it to train generalised AI models. You can revoke our access at any time from your Google Account settings.

Nothing read from your Gmail is ever used for advertising or shared with an advertising platform. Not the messages, not the confirmations we parse from them, not the trips we build out of them. If you sign in with Google, the email address on your account is used for advertising measurement in the way section 3 describes, hashed before it leaves our servers. If you would rather it were not, write to hello@joincura.club and we will exclude your account.

5. Suppliers and bookings

To book anything, we have to pass your details to the supplier providing it: airlines, hotels, rail operators, ground transport, insurers, consulates and visa processing services, and the global distribution systems and booking platforms that sit between us and them.

We send only what that supplier needs for that booking. Once your details are with a supplier, their own privacy policy governs what they do with them, and we cannot delete data held by them on your behalf.

6. Payments

Payments are processed by third-party payment providers. We do not store full card numbers or CVV codes on our systems. Where you ask Cura to use a specific card for its rewards or points, we store only what is needed to identify which card that is, such as the programme, the issuer and the last four digits.

7. Subprocessors

We rely on service providers to run Cura, including cloud hosting, database hosting, messaging delivery, AI model providers, error monitoring, product analytics, and Meta for advertising measurement (section 3). They may process your information only as needed to provide Cura, and only under contractual safeguards.

8. Storage and security

Your data is encrypted at rest and protected with HTTPS in transit. Access is restricted to authenticated sessions, and internal access to member data is limited to the people who need it to operate the service or to resolve something that has gone wrong on your trip.

Travel documents such as passport details are held only for as long as they are needed for bookings and applications you have asked for.

9. Retention and deletion

We keep your data for as long as your account is active. You can ask us to delete your account and everything associated with it at any time by writing to hello@joincura.club. We will action it within 30 days.

Some records have to survive deletion: booking and payment records we are required to keep for tax, accounting or anti-fraud purposes, and anything a supplier holds independently of us.

10. What we never do

We do not sell, trade or rent your personal information. We do not share it with airlines or hotels for marketing. We do not pass it to data brokers. Suppliers receive your details only to fulfil a booking you asked for, and nothing else. The one thing we do share for marketing is described in section 3: hashed identifiers to Meta, so we can measure our own adverts. No supplier, broker or other advertiser receives anything.

11. Your rights

• See the personal data we hold about you.
• Correct anything that is wrong.
• Delete your data, subject to the records noted above.
• Withdraw permission for inbox access, at any time, from your Google Account settings or by asking us.
• Export your trip history.

Depending on where you live, you may have further rights under local law, including under India's Digital Personal Data Protection Act, 2023, or the GDPR. Write to us and we will honour them.

12. Age

Cura is for people aged 18 and over. We do not knowingly collect data from children. If you book travel for a minor, you are responsible for the details you give us about them.

13. International transfers

Booking international travel means your details may be processed in the country you are travelling to and in the countries where our suppliers and infrastructure providers operate. Where required, we put appropriate safeguards in place for those transfers.

14. Changes

We may update this policy. We will post the updated version here with a revised date, and we will tell you directly if a change materially affects what we do with your information.

15. Contact

Questions about this policy, or about anything we hold: hello@joincura.club.

Cura is a product of Converse AI Inc. See also our Terms of Service.