Privacy Policy
What Slomad collects, why, and what is never done with it.
Last updated: 20 July 2026
Slomad.com is run by one person. This policy covers slomad.com and every tool on it, including Slomad Trips and the Slomad mobile app.
The short version: your travel documents are yours. They are stored encrypted, they are never sold, never used for advertising, and never used to train AI models. You can delete them at any time.
What is collected
Your account. If you sign in with Google, Slomad receives your email address, name, and profile picture. No password is ever created or stored.
What you send in. Confirmation emails, boarding passes, PDFs, images, and pasted text that you upload or forward. These frequently contain personal details — your name, flight numbers, booking references, seat assignments, and travel dates.
Your settings and usage. Display preferences, plan, and basic operational records such as when a document was processed and whether it succeeded. Standard server logs (IP address, browser type, timestamps) are kept for security and debugging.
Payments. If you subscribe, payment is handled by Stripe. Card numbers never reach Slomad's servers.
What it is used for
Your documents are used to build your itineraries, and for nothing else. Specifically, your data is never:
- sold, rented, or shared with data brokers
- used to serve you advertising
- used to train AI models, by Slomad or anyone else
- read by a human, except in the narrow cases described below
Who else processes it
Delivering the product requires a few subprocessors:
- AI providers (Anthropic and Google) — receive the document you submit in order to extract the flight details from it. They act as processors under contract and are not permitted to train models on it.
- Stripe — payments and subscription billing.
- Google — sign-in, if you use it.
- Hosting and email delivery providers — to run the service and send the itineraries you ask to be sent.
When a human might look
There are exactly two cases. If you contact support about a specific document and ask for help with it, that document may be examined to answer you. And if something breaks, the minimum data needed to diagnose the failure may be inspected. Nobody browses user itineraries out of curiosity.
How long it is kept
- Your trips and documents: kept until you delete them.
- Deleted trips: purged from storage roughly 30 days after deletion.
- Deleted accounts: everything you own is erased within 72 hours. That window is a safety net against accidental or malicious deletion, not a retention period. After it passes, the data cannot be recovered.
Free and paid plans may differ in how long older travel history stays available. Any such limit will be stated on the pricing page.
Your choices
- Export — every itinerary can be downloaded as PDF, plain text, Markdown, HTML, spreadsheet, or calendar file, at any time. Leaving is one download away.
- Delete — remove individual trips and their source documents, or delete your whole account from the account page.
- Ask — for a copy of your data, or for it to be erased, email the address below.
If you are in the EU or UK, you have the right to access, correct, export, or erase your personal data, and to object to its processing. Requests are handled directly — there is no ticketing maze.
Security
Documents and extracted itineraries are encrypted at rest. Access is limited to the operator of the service. No system is perfect, and no guarantee of absolute security is offered — but the data is treated as what it is: your travel documents.
Children
Slomad is not directed at children under 13, and accounts are not knowingly created for them.
Changes
If this policy changes in a way that materially affects how your data is handled, the change will be announced by email before it takes effect. The "last updated" date above always reflects the current version.
Contact
Questions, requests, or complaints: contact form.
