Privacy Policy

Last updated · 14 August 2026

Converse AI Inc. (Cura, we, us, or our) operates the Cura travel agent service. This policy explains what we collect, why, who we share it with, and how you get rid of it. Cura books real trips with real suppliers, so some of your information has to leave us in order for anything to be booked. This page says exactly when.

1. What we collect

  • Account data. Your name and phone number when you join the waitlist or create an account.
  • Google account data. Your name, email address and profile picture, if you sign in with Google.
  • Travel email. With your permission, we read the travel-related messages in the inbox you connect: flight, hotel, train, rail-pass, visa and car-hire confirmations. We do not read messages that are not about travel, and we do not send email as you.
  • Trip and preference data. Where you have been, where you are going, and how you travel: seat preference, cabin, meal and diet, timing, loyalty and card programmes, and the constraints you tell Cura once so it stops asking.
  • Traveller details needed to book. Passport number, date of birth, nationality, expiry, and any visa or documentation details, where a booking or an application requires them.
  • Messages. What you send Cura and what Cura sends you, in any language.
  • Usage data. Anonymous analytics about how the product is used.

2. How we use it

To find, book and run your trips. That means comparing options, making the booking, checking you in, filing visa applications, watching fares, tracking changes to your itinerary, getting you rebooked when something breaks, and producing the receipt at the end.

It also means getting to know how you travel, so Cura stops asking you the same questions on every trip. We do not use your information to build advertising profiles, and we do not train AI models on your data.

3. Google user data

Cura's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data solely to deliver Cura's travel functionality: identifying you in the app, reading travel confirmations from the inbox you connect, and building your trip history and preferences. We do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to make a booking you asked for, and we do not use it to train generalised AI models. You can revoke our access at any time from your Google Account settings.

4. Suppliers and bookings

To book anything, we have to pass your details to the supplier providing it: airlines, hotels, rail operators, ground transport, insurers, consulates and visa processing services, and the global distribution systems and booking platforms that sit between us and them.

We send only what that supplier needs for that booking. Once your details are with a supplier, their own privacy policy governs what they do with them, and we cannot delete data held by them on your behalf.

5. Payments

Payments are processed by third-party payment providers. We do not store full card numbers or CVV codes on our systems. Where you ask Cura to use a specific card for its rewards or points, we store only what is needed to identify which card that is, such as the programme, the issuer and the last four digits.

6. Subprocessors

We rely on service providers to run Cura, including cloud hosting, database hosting, messaging delivery, AI model providers, error monitoring and product analytics. They may process your information only as needed to provide Cura, and only under contractual safeguards.

7. Storage and security

Your data is encrypted at rest and protected with HTTPS in transit. Access is restricted to authenticated sessions, and internal access to member data is limited to the people who need it to operate the service or to resolve something that has gone wrong on your trip.

Travel documents such as passport details are held only for as long as they are needed for bookings and applications you have asked for.

8. Retention and deletion

We keep your data for as long as your account is active. You can ask us to delete your account and everything associated with it at any time by writing to hello@joincura.club. We will action it within 30 days.

Some records have to survive deletion: booking and payment records we are required to keep for tax, accounting or anti-fraud purposes, and anything a supplier holds independently of us.

9. What we never do

We do not sell, trade or rent your personal information. We do not share it with airlines or hotels for marketing. We do not pass it to data brokers. Suppliers receive your details only to fulfil a booking you asked for, and nothing else.

10. Your rights

  • See the personal data we hold about you.
  • Correct anything that is wrong.
  • Delete your data, subject to the records noted above.
  • Withdraw permission for inbox access, at any time, from your Google Account settings or by asking us.
  • Export your trip history.

Depending on where you live, you may have further rights under local law, including under India's Digital Personal Data Protection Act, 2023, or the GDPR. Write to us and we will honour them.

11. Age

Cura is for people aged 18 and over. We do not knowingly collect data from children. If you book travel for a minor, you are responsible for the details you give us about them.

12. International transfers

Booking international travel means your details may be processed in the country you are travelling to and in the countries where our suppliers and infrastructure providers operate. Where required, we put appropriate safeguards in place for those transfers.

13. Changes

We may update this policy. We will post the updated version here with a revised date, and we will tell you directly if a change materially affects what we do with your information.

14. Contact

Questions about this policy, or about anything we hold: hello@joincura.club.

Cura is a product of Converse AI Inc. See also our Terms of Service.