Privacy Policy

Last updated: April 15, 2026

TravelingZola ("we", "us", "our") operates the website travelingzola.com and the TravelingZola Travel Planner GPT action. This policy explains what data we collect and how we use it.

1. What We Collect

Public API (/api/public/*)

• IP address — used solely for rate limiting (60 requests/hour). Not stored permanently, not shared with third parties.
• Query parameters — destination name and trip duration you search for. Used to return results. Not linked to any personal identity.

Itinerary Pages (/itinerary/*)

• Session cookie (zola_itin_session) — a random token stored for 30 days so you can find itineraries you previously saved. HttpOnly and Secure. Contains no personal information.
• No account required — you can generate and view itineraries without creating an account or providing any personal data.

ChatGPT GPT Action

• When you use the TravelingZola Travel Planner GPT, ChatGPT sends your destination query to our public API. We receive the search parameters only — we do not receive your ChatGPT conversation, account info, or any personal data from OpenAI.

2. What We Do NOT Collect

• No email addresses, names, or personal identifiers on the public API
• No tracking pixels or third-party analytics on itinerary pages
• No advertising cookies
• No sale of data to third parties

3. Third-Party Booking Links

Itineraries may contain links to third-party booking platforms (Viator, Tiqets, Booking.com). When you click these links and visit those platforms, their own privacy policies apply. TravelingZola earns affiliate commission on bookings made through these links.

4. Content Attribution

All itinerary content is curated from publicly available travel blog articles. Original authors are attributed by name with links to their source content. If you are a content creator and wish to have your content removed, contact us.

5. Data Retention

• Rate limit counters are held in memory and reset hourly. No permanent storage.
• Saved itineraries are retained indefinitely so visitors can return to them. They are identified by cookie token hash only — not by name, email, or account.

6. SMS / Text Message Notifications

If you choose to provide your mobile phone number through our upload flow or our SMS opt-in page, we use it for one purpose only: to send you a transactional text message notifying you when the travel reels you uploaded have finished processing. Message frequency varies (typically one message per upload). Message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for assistance.

We do not sell, rent, or share your mobile phone number or SMS opt-in / consent information with any third parties or affiliates for their marketing or promotional purposes. Mobile opt-in data is used solely to deliver the notification you requested and is never shared with third parties for marketing. To request deletion of your number, contact us at hello@travelingzola.com.

7. Contact

For privacy questions or content removal requests, contact us at hello@travelingzola.com.