DoneAI.

Privacy Policy

Showing a cached copy due to a network issue. Refresh when you’re back online for the latest version.

Effective Date: March 23, 2026

Introduction

This Privacy Policy explains how DoneAI, Inc. ("DoneAI," "we," "us," or "our") collects, uses, discloses, and retains personal information in connection with the DoneAI website, mobile applications, marketing pages, TSA wait-time pages, account features, waitlist and contact forms, and related communications and services (collectively, the "Service").

Scope

This Privacy Policy applies to personal information we collect through the Service and in related communications with you. It does not apply to third-party websites, services, products, or platforms that have their own privacy policies.

Information We Collect

Information You Provide Directly

Depending on how you use the Service, we may collect:

  • Contact and account information: such as your name, email address, phone number, mailing information, login credentials, and profile details.
  • Connected travel and profile information: information you choose to provide or connect through the Service, such as travel confirmations, itineraries, traveler details, emails, calendar data, uploaded screenshots or documents, notes, contacts, photos, or location signals you enable.
  • Communications and submissions: messages, feedback, support requests, survey responses, form submissions, and other information you choose to send us.
  • Search, booking-interest, and marketing information: airport searches, travel preferences, booking inquiries, attribution parameters, and your preferences regarding newsletters, promotions, and similar communications.

Information We Receive When You Sign In With Google

If you choose to sign in using Google, we and our identity or authentication providers may receive information made available through that login flow, such as:

  • your Google account identifier;
  • your name;
  • your email address;
  • your profile image; and
  • authentication and session metadata needed to maintain your login.

Information Collected Automatically

We and our service providers may automatically collect:

  • Device, browser, and app information: such as browser type, operating system, device type, language, approximate geolocation based on IP, referring URLs, and similar technical information.
  • Usage and log information: such as pages or screens viewed, searches, clicks, conversions, feature usage, timestamps, session events, error logs, request metadata, and security signals.
  • Cookies and similar technologies: such as cookies, local storage, session storage, SDKs, pixels, and similar tools used to remember settings, maintain sessions, measure traffic, support analytics and marketing preferences, and protect the Service.

Information From Third Parties

We may receive information from:

  • identity and authentication providers, including Google and our identity infrastructure providers;
  • analytics, advertising, fraud-prevention, and security providers;
  • communications, customer support, or marketing providers;
  • travel suppliers, payment processors, or travel partners if you ask us to help facilitate a booking or related service; and
  • public, official, licensed, or partner travel-information sources for content displayed on the Service.

Connected Inboxes and Email Forwarding

If you connect an inbox, authorize an email integration, or forward travel-related emails to DoneAI, we may automatically analyze the connected or forwarded messages and associated metadata to identify booking confirmations, itinerary changes, and related travel details, and to extract or organize the information needed for user-facing travel features. Depending on the product flow you use, this may involve connected inbox access, forwarded travel emails, uploads, or other travel-content sources you authorize.

Sensitive Information

Some information you provide or connect may be considered sensitive under certain laws, such as connected email content, travel documents, traveler identity details, or precise geolocation if you enable it. We use this information only to provide, secure, support, and improve the Service, or as otherwise permitted by law. Please provide only the information necessary for your use of the Service or your request to us.

California Sensitive Personal Information

If you are a California resident, some of the information we collect or process, such as account credentials, precise geolocation if you enable it, connected email contents, travel documents, or other information you choose to provide, may be considered "sensitive personal information" under California law. We use and disclose sensitive personal information only for purposes permitted by law, such as providing the Service, maintaining account security, preventing fraud, debugging, processing your requests, and legal compliance. Where California law gives you the right to limit certain uses or disclosures of sensitive personal information, you may contact support@itsdoneai.com or use our privacy request page.

How We Use Information

We may use personal information to:

  • provide, operate, maintain, personalize, and improve the Service;
  • create and manage accounts and sessions, including authenticating users who sign in with Google;
  • process connected or uploaded content to generate summaries, reminders, recommendations, and other AI-assisted outputs you request;
  • display, maintain, and improve public travel-information features such as TSA wait-time pages;
  • respond to support requests, inquiries, privacy requests, and other communications;
  • send service messages, security notices, newsletters, promotions, and other marketing communications consistent with your choices and applicable law;
  • measure website, app, and marketing performance, including signups, conversions, and campaign effectiveness where permitted by your consent or applicable law;
  • facilitate travel-related requests or future partner-assisted bookings that you ask us to support;
  • analyze usage, debug issues, detect fraud, prevent abuse, protect the security of the Service, and enforce our agreements; and
  • comply with legal obligations and protect our rights and the rights of others.

If you consent to advertising or conversion measurement where required by law, we may disclose limited identifiers or signals, which may include hashed or pseudonymized identifiers, attribution data, and device or browser signals, to selected analytics, advertising, or measurement providers to support campaign attribution, performance reporting, fraud prevention, and related marketing operations. We may change the providers we use over time. We do not use the contents of connected emails, travel documents, or Google user data for this purpose, and any such disclosures remain subject to your settings, applicable law, and our contractual restrictions with those providers.

If you ask us to help facilitate a booking or related travel request, we may disclose the information reasonably needed to the relevant supplier, processor, service provider, or partner to support that request. Any third-party checkout, reservation, or payment flow is governed by the applicable third party's own terms, policies, and practices.

Google User Data

If you sign in with Google:

  • we use Google sign-in information to authenticate you and operate your account;
  • we do not sell Google sign-in information as personal information;
  • we do not use Google user data obtained through Google sign-in or other Google APIs to train general-purpose AI models; and
  • we use Google user data only for user-facing features, security, support, legal compliance, and service improvement consistent with this Privacy Policy and applicable Google terms.

If we later request access to broader Google data beyond sign-in identity information, we will update this Privacy Policy and related disclosures before doing so.

Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, Brazil, or another jurisdiction that requires a legal basis for processing, we process personal information under one or more of the following bases: performance of a contract with you, your consent, our legitimate interests, compliance with legal obligations, and, in limited circumstances, vital interests or public interest. Where processing is based on consent, you may withdraw that consent at any time, subject to lawful processing already performed.

AI-Generated Content and Automated Decision-Making

DoneAI uses AI systems, and in some cases third-party AI processors acting on our behalf, to analyze the content you provide and generate outputs for user-facing features. Authorized personnel may access relevant data when needed for support, debugging, security, abuse prevention, or legal compliance.

DoneAI does not use solely automated decision-making that produces legal effects or similarly significant effects on you without appropriate human involvement or other safeguards required by law.

Cookies, Advertising, Tracking, and reCAPTCHA

We use cookies and similar technologies for several purposes:

  • Essential technologies: to operate the Service, remember your settings, keep you signed in, preserve session state, and secure the Service.
  • Analytics technologies: to understand how people use the Service and improve it.
  • Advertising or conversion measurement technologies: to measure marketing and signup performance where you have consented or where otherwise permitted by law.

Depending on your location, settings, and marketing practices, providers may include analytics, attribution, advertising, remarketing, social-media, affiliate, audience, and conversion-measurement services, and we may change or add providers over time.

Some forms or public endpoints may use Google reCAPTCHA or similar anti-abuse technology to help protect the Service from spam, bots, and abuse. Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

Your Choices

  • You can control cookies through your browser settings.
  • If we present consent controls, you can use those controls to manage non-essential tracking.
  • You can unsubscribe from marketing emails using the unsubscribe link in those messages.
  • You may also opt out through https://optout.aboutads.info and https://optout.networkadvertising.org.
  • We honor Global Privacy Control signals where required by applicable law.
  • You can contact us at support@itsdoneai.com or use our privacy request page regarding tracking or privacy choices.

How We Share Information

We may disclose personal information in the following circumstances:

  • Service providers and processors: with vendors and contractors who help us host, secure, analyze, operate, market, or support the Service.
  • Identity and authentication providers: to support sign-in, session management, fraud prevention, and account security.
  • Analytics and advertising partners: for analytics, conversion measurement, and related marketing purposes consistent with your settings, consent, and applicable law.
  • Travel suppliers and partners: if and when you ask us to help facilitate a travel booking, booking inquiry, or related travel service.
  • Legal and safety reasons: when required by law, legal process, or governmental request, or when we believe disclosure is necessary to protect users, DoneAI, or others.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, asset sale, or similar transaction.
  • At your direction: when you ask us to share information or clearly direct us to do so.

We may also share aggregated, de-identified, or otherwise non-personal information for lawful business purposes.

TSA Wait-Time and Public Travel-Information Pages

The Service may display travel-related information sourced from public, official, licensed, partner, or other third-party pages. Information we display about airport wait times or related travel content is generally informational content about public conditions, not personal information about you. If you search for airports or interact with these pages, we may log those interactions for analytics, security, and service-improvement purposes.

Data Security and Retention

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate and maintain the Service, maintain account and session integrity, provide support, comply with legal obligations, resolve disputes, enforce our agreements, and protect security. If you delete your account, disconnect a data source, or ask us to delete information, we will delete or anonymize it within a reasonable period subject to backup, legal, fraud-prevention, audit, and similar retention needs. We may retain de-identified or aggregated information for longer periods.

Your Privacy Rights

Depending on where you live, you may have rights to:

  • request access to personal information we hold about you;
  • request correction of inaccurate personal information;
  • request deletion of personal information, subject to legal exceptions;
  • request portability of certain information;
  • object to or restrict certain processing;
  • withdraw consent where processing is based on consent; and
  • appeal certain privacy decisions where available under law.

To exercise privacy rights, contact support@itsdoneai.com or use our privacy request page. We may need to verify your identity before fulfilling your request.

We may take reasonable steps to verify your identity and authority before fulfilling a privacy request. If you have an account, we may ask you to submit the request through your authenticated session or respond to a verification email. We may also request information reasonably necessary to verify you or your authorized agent.

If we deny a request, we will explain the basis for the denial to the extent permitted by law. Where applicable law provides an appeal right, you may appeal by replying to our response or contacting support@itsdoneai.com with the details of your original request. You may also have the right to contact your local data protection or consumer protection authority.

California

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, access, delete, correct, and opt out of certain sharing for cross-context behavioral advertising. To the extent our consent-based analytics or advertising practices are considered "sharing" under California law, you may opt out through available consent controls, Global Privacy Control where required, by contacting us, or through our privacy request page. Authorized agents may also submit requests on your behalf, subject to verification.

You can also use our Do Not Sell or Share My Personal Information page, which links to our opt-out methods and privacy request portal.

Other Jurisdictions

If you are located in the EEA, UK, Brazil, or another jurisdiction with applicable privacy rights, we will honor rights required by law, including rights relating to access, correction, deletion, portability, objection, restriction, consent withdrawal, and complaints to a supervisory authority where applicable.

International Data Transfers

We may process personal information in the United States and other countries where we or our service providers operate. If you access the Service from outside the United States, your information may be transferred to countries with different data-protection laws. Where required, we use appropriate safeguards for those transfers.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and post the updated policy on the website or app. Your continued use of the Service after the updated policy becomes effective means you accept the revised policy to the extent permitted by law.

Contact Us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at:

Email: support@itsdoneai.com

Mailing Address: DoneAI, 584 Castro St, Suite #4036, San Francisco, CA 94114