Skip to main content
MAXTRIP
Back to MaxTrip

Privacy Policy

Last updated:

In short: to build you a trip, Max asks you questions and the answers go to an external artificial-intelligence engine. We don't ask for and don't need children's names, ID numbers or payment details — please don't enter them in the conversation. You can ask us to delete your information at any time.

1. Who we are

This Privacy Policy applies to the service at https://maxtrip.io ("MaxTrip", "the Service"), operated by MaxTrip.

For privacy enquiries: admin@maxtrip.io.

2. What information is collected

Information you share in the conversation with Max. The questionnaire is a free conversation, so the information depends on what you choose to tell. It usually includes:

  • The travelling party — how many people, adults and children, and the children's ages
  • Travel dates or a flexible range, and date constraints
  • The destination, or the kind of destination, you're interested in
  • Style preferences: pace, interests, hotel type and food type
  • Constraints and preferences that may be sensitive — kosher or a dietary preference, accessibility needs, a special occasion such as a honeymoon or an anniversary
  • What to avoid (crowds, heat, a long flight) and what is a must

Please note: we do not ask for children's names, ID cards, passport details or credit-card details, and none of them are needed to build a trip. Please do not enter them in the conversation. Information about a dietary preference, religion or health may be considered sensitive — sharing it is your choice and is not required to use the Service.

Account information. If you sign in to save a trip — an email address and a user identifier. Sign-in is by a one-time code to your email or with a Google account.

Trips you created. The itineraries built for you, and if you saved or shared — also after the browser is closed.

A "book it for me" request. If you leave details in the concierge form — name, phone, free-text notes, and whether we may reach you on WhatsApp.

Technical and usage information. IP address, browser and device type, pages viewed, clicks, and session recording (Session Replay) — a recording of your interaction with the interface, which we use to understand where the product isn't clear. Input fields are masked in the recording by default.

3. What the information is used for

  • To build and tailor a trip itinerary for you — this is the main purpose
  • To save your trips and let you come back to them and share them
  • To get back to you if you asked us to in the "book it for me" form
  • To improve the product — to understand where users get stuck and what doesn't work
  • To meet legal requirements and protect against misuse of the Service

Providing the information is not a legal obligation. It is given of your own free will. If you don't provide it, Max won't be able to build a tailored trip — you can use the site and read the blog without sharing anything.

4. Who the information is shared with

To run the Service we rely on external providers. Some see personal information, and some supply content only. All the providers operate outside Israel, so the information is transferred and processed outside Israel — including in countries whose level of data protection may differ from the one practised in Israel.

Providers that see personal information:

ProviderWhat forWhere
DeepSeekThe AI engine that runs the conversation with Max and builds the itineraryOutside Israel (China)
Anthropic (Claude)Backup AI engine — answers when the primary engine is unavailableOutside Israel (USA)
SupabaseThe database and accounts — saved trips, sign-in and concierge requestsOutside Israel
CloudflareSite hosting and content deliveryOutside Israel
LovableThe development and infrastructure platform the site runs on, and outgoing emailOutside Israel
AmplitudeUsage analytics and session replay to improve the productOutside Israel (USA)
Google Tag Manager / Google AnalyticsMeasuring site traffic and usageOutside Israel
Travelpayouts DriveTurns booking links on the site into affiliate links, and to do so reads the page's content and its linksOutside Israel

Note in particular: the content of your conversation with Max is sent to DeepSeek, an artificial-intelligence provider operating from China, to phrase the answers and build the itinerary. That is why we recommend not entering sensitive information or identifying details in the conversation.

Content providers (they receive queries such as a city or hotel name, not your details): Google Places, Travelpayouts / Aviasales, Open-Meteo, Pexels, OpenStreetMap.

The booking sites. When you click "book" you move to an external supplier's site (for example Booking.com or Aviasales). From that moment its privacy policy applies, not ours. We pass a technical trip identifier in the link to attribute the commission — not your personal details.

In addition, we will share information if required to by law, a court order, or to protect our rights. We do not sell personal information.

5. Cookies and measurement

The site uses cookies and similar technologies (localStorage) for operation — to remember that you're signed in, to keep the trip you built — and for measurement and usage analysis with Google Analytics and Amplitude.

You can block cookies in your browser settings. Blocking may impair the Service — for example saving the trip or signing in. You can also object to collection for measurement purposes by contacting us.

6. How long the information is kept

  • Trips created but not saved to an account — kept in your browser only, until you clear it
  • Trips you saved to the account — for as long as the account exists, or until you ask us to delete
  • Concierge requests — up to a year from the enquiry, for handling and record-keeping
  • Measurement data and session recordings — up to a year

The conversation content itself is sent to the AI provider to generate the answer. The provider's retention policy is subject to its terms.

7. Your rights

Under the Israeli Privacy Protection Law, 5741-1981, and its regulations, you may:

  • Review the information kept about you
  • Ask to correct information that is not accurate, complete, clear or up to date
  • Ask to delete the information
  • Ask that the information not be used for marketing purposes
  • File a complaint with the Privacy Protection Authority

To exercise any of these rights: admin@maxtrip.io. We will answer within a reasonable time and in accordance with the law.

8. Children

The Service is intended for adults. We do ask for children's ages — because a flight's price, a hotel room and the fit of activities depend on age — but we do not ask for children's names, photos or other identifying details, and they must not be entered in the conversation. If identifying information about a minor has reached us, we will delete it. A parent or guardian who believes such information was shared is welcome to contact us and we will handle it.

9. Information security

We take reasonable measures to secure the information, including encrypted traffic and permission separation in the database. That said, no online service is completely immune, and we cannot guarantee absolute protection.

10. Changes to this policy

We will update this policy from time to time. The date of the last update appears at the top of the page. A material change will be brought to your attention on the site.