Privacy Policy

Winsorlabs Travel · last updated 30 August 2026

Winsorlabs Travel is a private, personal tool. It is built and used by one person for planning their own trips. It is not a product, it is not offered to the public, and it has no users other than its author.

What it accesses

With explicit permission granted through Google sign-in:

• Google Calendar — reading existing events, and creating travel events on the author's own personal calendar.
• Gmail — read-only, to find booking confirmations and extract details such as reference numbers and times.

Nothing is accessed beyond these permissions. A second, separate authorisation covers a work account and is granted read-only access only.

What it does with it

Generates itineraries, packing lists and calendar entries. That is the entire purpose. Data is not used for training, profiling, advertising or analytics, because none of those things exist here.

Where it goes

• Stored on the author's own computer and a private server they control.
• Access tokens are stored with restricted file permissions and encrypted at rest on the server.
• Not shared with anyone. No third parties, no sub-processors, no analytics providers, no advertising networks.
• Not sold. There is nobody to sell it to.

Limited use

Winsorlabs Travel's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

Access can be revoked at any time at myaccount.google.com/permissions, independently for each account. Stored tokens and cached data are deleted on request, and in any case have no value once access is revoked.

Contact

catjwin@gmail.com