Privacy Policy

Sequence reads the travel bookings already sitting in your Gmail and turns them into a timeline of your trips. We built it to be private by default. We only look at travel email, we do not keep your emails, and you can delete everything at any time. This policy explains exactly what we do with your data, in plain terms.

For privacy law, Sequence is the "data controller" for your information, which just means we are the ones responsible for it. You can reach us any time at hello@sequence.travel.

What Sequence does

Sequence connects to your Gmail and pulls out your travel bookings, like flights, hotels, trains, car rentals, and rides, and turns them into a timeline of your trips. It only looks at email that is likely to be travel related. It never reads your whole inbox, never sends email, and never changes or deletes anything in Gmail.

What we access

We ask for one Google permission, gmail.readonly, which is read-only access to Gmail. We only use it to find travel.

• We only fetch email that is likely a travel booking or receipt.
• We do not scan or read the rest of your inbox. Most of your email never leaves Gmail.

For the travel messages we do fetch, we read the full text, because the details we need, like routes, times, confirmation numbers, and amounts, are in the body rather than the headers. Every request we make to Gmail is a read. We never send, change, label, or delete anything.

Why we are allowed to use it

We use this data to give you the service you signed up for. When you connect Gmail, you are asking us to find and organize your travel, and that is the only reason we ever use it. You can withdraw at any time by disconnecting Gmail or deleting your account.

What we store, and what we do not

The important part: we do not store your emails. We read a message to pull out the travel facts, then we drop it.

What we keep is:

• Your trips and bookings: the company, the type of booking, dates, amounts, where you went, check-in and check-out, and confirmation numbers.
• A small record of each message we looked at: its Gmail ID, who sent it, its subject line, the date, a processing record, and a fingerprint that cannot be turned back into your email.

We never keep the body of an email or its attachments. If you open a booking to review it, we pull it fresh from Gmail at that moment and do not keep it. We never see or store your Google password. We only keep a secure token so we can refresh your trips, and you can revoke it whenever you want.

Who else touches your data

A short list of providers helps us run Sequence. These are the only ones who ever handle your data, and each one gets only what its job needs:

• Anthropic (the company behind the Claude AI) processes the content of a travel email to extract the booking details. Anthropic does not train its AI on your data. That is covered by our agreement with them.
• Supabase stores your trips in a database for us.
• Railway runs the servers Sequence itself runs on, so your data passes through their infrastructure while we process it.
• OpenStreetMap (its Nominatim geocoding service) turns a place from a booking into map coordinates. They receive only the place itself, never your name, your email address, or anything else that identifies you.
• Resend delivers the emails Sequence sends you. They receive your email address and the text of that message. They never receive the content of any email we read.
• FlightAware (its AeroAPI service) provides flight schedule information. They receive only an airport pair and a date, never your name, your email address, or anything else that identifies you.

We do not sell your data, we do not share it with advertisers, and we do not give it to anyone else. You can read the privacy policies of Anthropic, Supabase, Railway, the OpenStreetMap Foundation, Resend, and FlightAware to see how they operate.

If we ever add a provider, we will add it to this list before it starts handling anything.

Where your data is kept

Your data is stored and processed in the United States. If you are in the EU or UK, that means it is transferred to the US, and we rely on standard contractual clauses with our providers to protect it.

How long we keep it

We keep your trips and the small message record above for as long as your account is active. When you delete your account, we delete them right away. We never keep your email content at all, beyond the moment we process a message.

Your rights and your control

You are in control of your data. At any time you can:

• See the trips we have for you. They are your dashboard.
• Correct or delete any of them.
• Export your trips. Email us and we will send you a copy.
• Delete everything, which also revokes our access to your Gmail.
• Withdraw your consent by disconnecting Gmail.

You can delete everything from your account settings, or email us at hello@sequence.travel and we will do it for you. You can also revoke our access directly from your Google account permissions page. Deletion is immediate and cannot be undone.

If you are in the EU or UK and you think we have mishandled your data, you have the right to complain to your local data protection authority.

Google API scopes and Limited Use

We only use your Google data for the trip-organization service described here. We do not use it for ads or to build ad profiles, we do not sell it, and no person reads your Gmail data unless you ask us to, we need to for security, or the law requires it.

Sequence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes and contact

If we change this policy, we will update the date at the top of this page. Questions about your privacy or this policy? Email hello@sequence.travel.