Privacy

How we handle your details

Last updated Nov 1, 2026

. In this notice, "we" and "us" means PTO by Knowhere.

Planning on your own

Your PTO days, holidays, blocked dates, saved places and trip ideas are kept in your own browser (local storage) so the plan is there when you come back. They stay on your device unless you send us a trip or ask for booking reminders. Clearing your browser's site data removes them.

When you paste a link or a note to save a place, we send that text to our server to work out which place it is, then send the result back. We read only the page's title, description and its place tags (what kind of place it is, its name and where it is), the way a link preview does. We don't keep the page's text or images. Each save becomes a card in your browser. We count that a card was saved: the kind of card, the place and the name of the sight or experience, and, when it fits one of your trips, the month of that trip and your home airport. Nothing in those counts identifies you, and we never show a count under 10 to anyone outside PTO by Knowhere.

To show flight prices, our server asks Travelpayouts (Aviasales) for the lowest recent fare between two airports on your dates. Only the airports and dates are sent, never your name or contact details.

Saving from other sites

The "Save to PTO" bookmark button, our browser extension and the "Add to my trip" buttons on partner sites only act when you click them. They send us the address and title of the page you're on (and, for the button and extension, its short description and place tags) so we can work out the place, the same way we read the title of a link you paste. Nothing runs in the background, and we don't read other tabs or your history. The save is kept in your browser. When a partner's button was used, we count the save for that partner (the place and the date, never who you are).

Badges and check-ins

Badges you earn, and the places you say you've been, are kept in your browser. "Check in" asks your browser for your location once; it is compared on your phone with where the place is, and it is never stored or sent to us. When you earn a badge we count it: the kind of badge, which one, the nearest place in our planner, the month, your home airport and how it was earned (a trip, a check-in or your word). Nothing in those counts identifies you.

Country passports

When you pass a country passport's check, the badge is kept in your browser (and in your account, if you have one). We count it the same way as other badges: which passport, the month and your home airport. Your answers are not sent.

Your account (email sign-in)

Signing in is optional. If you do, we email you a link that works once, for 30 minutes; there is no password. We keep your email address, your plan (the same things your browser keeps: your days off, holidays, list, cards, badges and trips) and when you last signed in, so your plan is there on any device. We never keep your sign-in link or session in readable form, only a one-way hash of it. Your browser's activity log stays in your browser. "Sign out" ends that session; "Delete my account" erases your email, plan and fare history from our store. Your plan stays in your browser until you clear it.

Fare alerts

Fare alerts are off until you turn them on. Then, once a day, we look up the fare for each of your trips (your home airport, the trip's destination airport and dates) from Aviasales' cached prices through Travelpayouts, keep a short price history per trip, and email you when a fare drops by at least 10% and $25. Only the route and dates are sent to Travelpayouts, never your email. Every alert has a one-tap link that stops them, and you can turn them off in your account.

Sale deals (Black Friday)

During a sale we show deals from travel brands that fit the dates of your trips. The matching happens in your browser. The links are affiliate links: if you book through one, the brand pays us a commission, which never changes your price. When you open a deal we count it: which deal, the planner place it was shown for, the month and your home airport; nothing that identifies you. If you have an account and tick "one email with sale deals", we send one email during the sale with the deals that fit your trips, with a link that stops it.

Booking reminders

If you ask for booking reminders, we keep your email address, your home airport, your trip dates, the place picked for each trip and the places on your list. We use them for one thing: an email 90, 60 and 30 days before each trip, with the lowest recent fare from your airport when we can find one (only the airports and dates are sent to Travelpayouts). Resend delivers the emails. Every email has a link that stops them in one tap. We delete your reminders 12 months after your last trip date, or sooner if you ask.

If you add your trips to your calendar instead, the reminders live in your own calendar and nothing is sent to us.

When you send us a trip

Nothing is sent until you tick the consent box and press send. Then we collect:

• Your first name, and an email address and/or a phone number or Instagram handle
• The trip: travel dates, days off and PTO days, home airport, who's going, budget, places in mind, your question, the places you saved and the places on your list
• If you leave "share my travel profile" on: your travel style and up to eight saved links or notes
• The places and holidays the planner suggested, and your planner settings (year, PTO days, holiday calendar)
• How you found us (for example a referral code or the link you came from), the time you agreed, your browser type, and a scrambled, shortened form of your IP address used to spot spam

Why: so we can contact you and help you plan this trip, so you can check its status, and so we can keep spam out. That's it.

Who sees it

• Us, PTO by Knowhere, to reply and help you plan the trip.
• One independent travel advisor, only if you ask us to bring one in to book the trip. We'll tell you who before we share anything.
• The service providers that run the site for us, only to do that job:
  • Vercel hosts the site and the server code.
  • Vercel Blob stores trip requests in private storage.
  • Resend delivers the email that tells us a new request came in, and the booking reminders you ask for.
  • If we turn on a team notification (for example Slack), the same summary goes there.

We don't sell your details, rent them, or share them with advertisers.

Instagram messages

If you message PTO by Knowhere on Instagram, Instagram (Meta) handles that conversation under its own privacy policy. When our automated helper is on, it saves the posts, reels, links and place names you send so you can pull them into your planner. We store them under a scrambled version of your Instagram account ID, and the reply tells you it's automated.

Links, cookies and analytics

• We don't use advertising cookies or ad trackers.
• We use Vercel Web Analytics to count page views. It doesn't use cookies and doesn't identify you.
• Fonts load from Google Fonts, so Google receives your IP address when the page loads.
• Some flight prices link to Aviasales with our Travelpayouts partner code. If you book through that link we may earn a small commission, and Aviasales handles your booking under its own privacy policy.

How long we keep it

We delete a trip request and your contact details 12 months after the last contact between you and us or your advisor, or sooner if you ask. Saves sent through Instagram are deleted 12 months after your last message. We may keep simple counts (for example, how many trips were sent in a month) that don't identify anyone. An advisor who books a trip with you keeps their own booking records under their own policy.

Your choices

To see, correct or delete what we hold about you, or to withdraw your consent, email with the email or phone you used (and your PTO reference if you have it). We'll reply within 30 days and, if an advisor was brought in, ask them to delete it too.

Changes

If we change this notice we'll update the date at the top. If a change affects trips you've already sent, we'll tell you by email first.