Privacy Policy

Elitr ("Elitr," "we," "our," or "us") operates the travel intelligence platform available at app.elitr.ai and the marketing website at elitr.ai. This Privacy Policy describes how we collect, use, store, and share information about you when you use our services.

Elitr is built on the principle that your data should work for you — not against you. We collect only what is necessary to deliver Sol's intelligence, and we do not sell your personal information.

We collect information in two contexts: when you visit the Elitr marketing site, and when you use the Elitr app.

All data collected is used to deliver, improve, and secure the Elitr platform. Specifically:

To power Sol. Your financial data, loyalty balances, travel preferences, and conversation history are assembled into Sol's context window so she can reason about your actual situation — not a generic traveler's situation. This context is updated periodically and stored in your memory brief.

To authenticate your account. Your email address is used to issue magic links and one-time sign-in codes. We do not store passwords.

To send transactional communications. We send emails related to your account activity — sign-in codes, access confirmations, and platform notifications. Receipts and billing notices for your membership are sent by Creem on our behalf. We do not send marketing emails without your explicit consent.

To improve the platform. Aggregated, anonymized usage patterns help us understand what is working and what needs improvement. We do not use individual user data for this purpose without anonymization.

We do not sell your data. We do not sell, rent, or trade your personal information to third parties for any purpose, including advertising.

Each account has a Sol inbox address containing a code unique to your account; treat it as you would a private address. When you forward an email to it — a loyalty program statement or a booking confirmation — Elitr receives the email through our email provider (Resend), reads its text with Anthropic's API to extract the relevant program, balance, reservation or flight details, and stores what it extracted in your Vault or your trips. Attachments are not read.

Elitr membership is sold through Creem, which acts as the merchant of record. When you start a trial or subscribe, you are taken to a checkout page operated by Creem. Your payment card, billing address and tax location are collected and stored by Creem, not by Elitr, and are subject to Creem's privacy policy. Creem calculates and collects any applicable sales tax or VAT, issues your receipts, and provides the customer portal through which you can update your card or cancel. Elitr receives from Creem only what it needs to grant access: your subscription's status, plan, period end and a customer reference. Canceling your membership does not delete your Elitr account or the data in it; see Data Retention.

Elitr uses the following third-party services to deliver the platform. Each receives only the data necessary for their specific function.

Sol's responses — including recommendations, alerts, analysis, and conversational replies — are generated by artificial intelligence. Specifically, Sol is powered by Anthropic's Claude API.

Sol's intelligence compounds over time through your memory brief, which stores context about your portfolio, preferences, and travel goals between sessions. This memory is assembled by Elitr and injected into Sol's context with each conversation.

Sol does not make financial decisions on your behalf. All of Sol's outputs are informational and intended to support your own decision-making. Elitr does not provide financial, tax, or legal advice, and Sol's outputs should not be relied on as such.

We retain your data for as long as your account is active. Specifically:

Session tokens expire after a short inactivity window and are automatically purged from storage.

Your Vault, trips, notes, memory brief and conversation history persist for the life of your account, so that Sol's understanding of your situation compounds rather than resets. You may delete individual programs, cards, trips and notes in the app at any time, and you may request deletion of your memory brief by contacting us.

Financial data is retained only as long as your Plaid connection is active. If you disconnect Plaid, we delete the associated data from our systems within 30 days.

Membership status is retained after a subscription ends, so that the app can tell you when your membership ended and let you resume it. Card and billing details are never held by Elitr.

Account deletion. If you request account deletion, we will remove your data from our active systems within 30 days. Residual data in backup systems will be purged on the next scheduled backup cycle.

You have the right to access, correct, export, or delete your personal information. You may also withdraw consent for data connections (Plaid, Google Calendar) at any time by disconnecting them in the app.

If you are a resident of California, the European Union, the United Kingdom, or another jurisdiction with applicable privacy legislation, you may have additional rights including the right to know what data we hold, the right to portability, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

Elitr is not directed at or intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete that information within 1 business day.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, where the changes are material, notify active users by email.

Continued use of the Elitr platform after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or want to exercise your rights, please contact us.