What we collect

When you use Moonshot Travel, we collect:

• Phone number or work email — your sign-in identifier, managed through Clerk
• Email address — also collected at booking, because the airline or hotel needs it to fulfill your reservation
• Traveler details — names, dates of birth, and passport details where a supplier requires them to complete a booking
• Booking history — flights and hotels you book through us
• Travel preferences — preferences you state or that Mission Control learns; view and delete them anytime at msos.ai/memory
• Chat messages — conversations with Mission Control
• Device information — platform and push notification tokens for price and disruption alerts
• Corporate data — if your organization enables it: calendar data (via Google) and CRM data (Salesforce or HubSpot, via Nango). We only access these with your organization's consent

How we use it

• Search and book flights and hotels on your behalf
• Monitor prices on your bookings after you book
• Ask you when we find a meaningful price drop — rebooking happens only with your explicit confirmation
• Monitor booked flights for delays and cancellations
• Personalize suggestions based on your history and stated preferences
• Power corporate dashboards for organizations you've joined
• Improve our price prediction models using anonymized, aggregated data

Who we share it with

We share data with these services to operate Moonshot Travel:

• Duffel — flight search, booking, and rebooking (receives traveler details and travel dates)
• LiteAPI and Hotelbeds (HBX Group) — hotel search, booking, and rebooking (receive guest details and stay dates)
• Airlines and hotels — receive the traveler details and email address needed to fulfill your reservation
• Stripe — payment processing (receives payment details; we never store card numbers; charges appear as "MOONSHOT TRAVEL")
• Clerk — authentication (manages your phone-number sign-in)
• Nango — CRM connections for corporate accounts (Salesforce, HubSpot), only with your organization's consent
• FlightAware (AeroAPI) — flight disruption monitoring (receives flight numbers and dates, not your identity)
• AI providers — process your Mission Control conversations to generate responses

We do not sell your data. We do not serve ads. We do not share your information with data brokers.

Corporate visibility

If you join an organization on Moonshot, its admins can see your travel spend, trips, expenses, and revenue matched from the organization's CRM. Calendar and CRM data are accessed only with the organization's consent. If you leave the organization, admins lose access to your future activity.

Data retention

We keep your data for as long as your account is active. Booking records are kept for 7 years (tax and legal compliance). Chat history is retained for 12 months. Preferences you delete at msos.ai/memory are removed immediately.

Deleting your account

You can delete your account at any time from Settings. This removes your profile, preferences, and chat history. Two things to know:

• Existing reservations remain valid — deleting your account does not cancel your flights or hotel stays. Cancel those separately first if you want to
• Booking records we're legally required to keep are retained for 7 years in anonymized form

Your rights

Regardless of where you live, you can:

• Access all data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential data processing

GDPR (EU/EEA): You have the right to data portability, restriction of processing, and to lodge a complaint with your local supervisory authority.

CCPA (California):You have the right to know what data we collect, request deletion, and opt out of data sales (we don't sell data).

Security

All data is encrypted in transit (TLS) and at rest. Authentication is handled by Clerk with industry-standard security practices. Payment data is processed by Stripe and never touches our servers. Database access is restricted and audited.

Contact

Questions about your data? Email support@msos.ai. Legal questions? Email legal@msos.ai.