XYVEL Trip: privacy policy
Version of 1 October 2026
The short version
XYVEL Trip is a web application at xyvel.ch/trip, which requires an account; a first programme is free, beyond that a subscription is required. What you write there is processed by XYVEL and by its artificial intelligence provider to build your programme, without your e-mail address. The site sets a single cookie, which remembers the language you choose, and no measurement or tracking cookie. We count visits and the steps of the service as anonymous daily totals, with no identifier. Payment is handled by our payment provider. This policy applies under the Swiss Federal Act on Data Protection (FADP) and, for people living in the European Union, under the General Data Protection Regulation (GDPR).
What you choose to write
You describe your trip freely, and nothing obliges you to say more than you need to. Some details that genuinely help a programme are nevertheless sensitive data under art. 5 let. c FADP and art. 9 GDPR: a diet that reveals a religious belief, reduced mobility, a medical treatment, a trip tied to a membership. If you write them, they are treated like the rest of your text (kept for thirty days, sent to our artificial intelligence provider), and that processing rests on your explicit consent, which writing them expresses. You can delete the trip concerned at any time, which erases that text from our servers. If you would rather not entrust them, describe the need without the reason: a ground-floor room rather than the medical motive, no pork rather than the belief.
Account and subscription
The e-mail address you enter is sent to our server, which e-mails a single-use sign-in code. The server keeps the address, one token per connected device (stored in your browser, revoked by signing out), the state of the subscription and the the counters of trips and messages, monthly for a subscription and permanent for the free programme. Payment is handled by our payment provider: XYVEL neither sees nor stores your card number.
Your trips and the artificial intelligence
What you write in the planner (trip criteria, conversation, choices) and the versions of the programme are kept by our server for 30 days after the last activity, then deleted automatically; you can delete a trip sooner from the application. To write the programme, those texts are sent to our artificial intelligence provider, Anthropic (United States), without your e-mail address or any account identifier, under contractual terms that do not allow training its models on this data. This transfer outside Switzerland and the European Union rests on those contractual safeguards, under art. 16 FADP and art. 46 GDPR.
Who we entrust processing to
XYVEL sells, rents and trades no data, and shows no advertising. Six providers are involved, each for a single task: a host for the public site; a host for our application server, in the European Union; a host for the database where accounts and trips live, in the European Union; our AI provider writes the programmes; our payment provider handles payment; our email provider sends the sign-in codes. No other recipient of your account data; the price sources, which receive neither your address nor any identifier, are described below.
How long we keep what
The sign-in code: thirty minutes, then erased automatically. A device token: until it expires or you sign out. A trip and its versions: 30 days after the last activity. The technical trace of payment events (event identifiers, with no personal data): 30 days. An account with no sign-in for 24 months is deleted along with everything attached to it; a subscribed account is never deleted this way. The anonymous daily totals: 400 days, then erased automatically. Visits are also counted by hour; these hourly totals are erased after 14 days. At our payment provider, the customer and their invoices are kept for ten years: that is an accounting obligation (art. 958f of the Swiss Code of Obligations) neither you nor we can set aside, and it outlives the deletion of your account with us.
Prices and sources
Prices come from official and partner sources, queried by our server; they serve the programme of your session. Only older prices carrying no identifier (route or city, dates, amount, source, time) remain, for at most 12 months, in an anonymous price history; no new price is added to it. XYVEL books nothing: links open the seller's site and may carry an affiliate identifier, at no extra cost to you.
What the sources learn about you
To find a price, our server queries the sources for the kind concerned: hotel and flight booking platforms, an activities marketplace, map and places services, a weather service, open databases about countries, and a few public sources for public holidays and travel advice. They receive what the search requires (the destination, the dates, the number of travellers and, for a room, the age of the children), and never your e-mail address or any account identifier. For activities and restaurants they also receive keywords drawn from your criteria: an interest, a type of cuisine. Your sentences do not leave us: only our artificial intelligence provider reads them. Take this from it: if a criterion is what the previous section calls sensitive data, writing "no pork" may send it to a restaurant source. Each has its own terms.
Technical logs
Like any online service, our hosts (one for the site, one for the server) keep request logs containing an IP address, a timestamp and the path requested. These logs serve security and correct operation, nothing else. We also use the IP address to rate-limit requests (sign-in codes, subscription starts, use of the planner): that is what stops someone from flooding your inbox or exhausting the service. It stays in the server's memory, never written to our database, for two hours at most; for the free programme, we instead keep a fingerprint of the address, computed with a secret key, for seven days at most, to limit the number of free programmes opened from one connection. Restarting the server erases it all. We also keep anonymous totals, by day and, for visits, by hour, to run the service and fix its flaws: how many visits reach the XYVEL Trip pages (landing page, language, and where the visit came from, reduced to a category: search engine, social network, Product Hunt, direct access or other) and how many times the steps of the service are reached (sign-in code, sign-in and account creation, programme started, delivered or failed, messages, access refused or reserved for subscribers, payment, click on a booking or service link). This count rests on our legitimate interest in running and improving the service (art. 6(1)(f) GDPR). The IP address is neither used nor kept for this count, apart from in memory, for two minutes at most, to limit the pace of requests, as described above; nothing links a total to a person.
Data in your browser
Your browser keeps the device sign-in token, the language you chose (in local storage and in a one-year cookie, the only one the site sets), the text of the request you are writing (in this tab only, erased when you send it or close the tab) and, in the page address, the trip you have open. Signing out erases the token. None of this is used to follow you from one site to another; the draft does not leave your browser before you send it.
Your rights
You can request access to your data, its correction, its deletion, a copy in a machine-readable format, a restriction of processing, or object to it. You can withdraw a consent at any time, without calling into question what was done before. Write to contact@xyvel.ch: we answer within one month (art. 25 para. 7 FADP, art. 12 §3 GDPR). You can also act alone and immediately: delete each trip from the application, sign out to revoke the device token, and ask for the account itself to be deleted. A browser that sends the Global Privacy Control or Do Not Track signal is not counted among the visits. The totals contain nothing that can be linked to a person. If our answer does not satisfy you, you may refer the matter to the Swiss Federal Data Protection and Information Commissioner (FDPIC, Bern) or, if you live in the European Union, to the supervisory authority of your country.