Privacy Policy

Andeor is responsible for the Andeor marketplace and the Andeor app in ChatGPT. Questions and privacy requests can be sent to info@andeor.travel.

Andeor Vault is a private password manager for authorised Andeor team members. Its sole purpose is to let a team member save, synchronise and fill login credentials that they choose to place in their personal encrypted vault.

Encryption and access

Vault uses authenticated encryption for the saved vault and derives its encryption key from the team member's master password in their browser. Andeor stores and synchronises the encrypted vault but does not receive the master password or the decrypted credential entries. Authorised infrastructure providers process the encrypted vault and limited account, device and request data needed to deliver the service.

A trusted browser keeps an encrypted offline copy and limited connection information. Unlocking places the derived key and decrypted working data in protected browser-session storage for the active Vault session. The user can lock Vault at any time. The session also locks automatically after inactivity.

Retention and controls

Encrypted entries are retained until the team member deletes them or deletes the vault. Device access records are retained while that browser remains approved and can be revoked from the Vault security centre. Disconnecting the extension removes its local connection, encrypted cache and session material. Limited security logs are ordinarily retained for no more than thirty days unless a longer period is needed to investigate abuse, a security incident or a legal claim.

Team members can review, add, change and delete entries, export an encrypted backup, revoke one or all browsers and delete their vault. Support requests must never include a password, master password, recovery secret, device token or decrypted backup.

Andeor Vault's use of information received from Google APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Vault does not sell credential, browsing or account data, use it for advertising or allow people to read decrypted credentials.

The public Andeor app helps people discover current Mauritius experiences and check published departure information. It is a read-only discovery service. It does not create an Andeor account, make a booking, take payment or send a message to an experience partner.

Andeor does not receive your complete ChatGPT conversation. We receive only the tool arguments that ChatGPT sends to the Andeor service. The tool schema does not ask for a name, email address, phone number, account credentials, payment information, passport details, precise home address or health information. If you place personal information inside a free-text search, that text may still be included in the search phrase sent to Andeor. Please do not include sensitive information in a search.

Information returned to ChatGPT

Search results can include the number of matches and public listing facts such as listing identifiers, titles, partner display names, categories, locations, duration, difficulty, starting prices, ratings, family suitability, availability model, summaries and public images. An experience detail result can also include highlights, inclusions, exclusions, gallery images, group-size information and family policies. A departure result can include the requested date and guest count, calendar status, published dates and times, labels, places remaining, alternatives and a plain-language status message.

The visual card can keep the selected listing, preferred date and guest count in ChatGPT's widget state so the card remains usable in the conversation. Andeor receives the date and guest count only when a departure check is sent to our tool. ChatGPT and OpenAI handle conversation history and widget state under their own terms, privacy policy, plan settings and retention controls.

We use the data described above to provide the exact function requested by the user.

• We match search preferences against current public Andeor marketplace listings.
• We return public facts for the selected experience.
• We check a published departure calendar for the requested date and guest count.
• We format the results as readable text and visual cards inside ChatGPT.
• We operate, secure, troubleshoot and prevent misuse of the service.
• We measure aggregate tool reliability, public listing interest and journeys that continue to Andeor.
• We comply with lawful obligations and respond to valid legal requests.

Andeor does not use ChatGPT app tool inputs or outputs to create advertising audiences, personal marketing profiles or automated decisions about a person. We do not sell this data.

Data is disclosed only as needed for the purposes described in this policy.

The public ChatGPT app does not send a user's tool inputs to experience partners and does not expose private customer, booking, account, admin or travel-agency records.

• You can avoid including personal or sensitive information in an Andeor search.
• You can stop using or disconnect the Andeor app through the controls available in ChatGPT.
• You can manage or delete the relevant conversation through your ChatGPT account controls.
• You can contact info@andeor.travel to ask whether Andeor holds data about your request or to request access, correction or deletion. Depending on applicable law, you may also have rights to restrict or object to processing and to complain to a competent data-protection authority.

The public app does not receive a ChatGPT account identifier that lets Andeor find a request by account. Please include an approximate date, time and the tool action involved if you ask us to locate a technical log. Do not send passwords, payment data or other sensitive information with your request.

The Andeor tool endpoint and embedded discovery card do not set Andeor advertising cookies and do not use advertising pixels. Requests for the endpoint and public images can still produce the limited technical logs and aggregate app telemetry described above. OpenAI may use its own storage to operate ChatGPT and the widget.

If you leave ChatGPT and visit the Andeor website separately, that website may use essential account, preference and booking storage, first-party performance and interaction analytics, Vercel Analytics and Google Analytics. Website analytics help us understand visits and improve performance. They are separate from the public ChatGPT app tool inputs and outputs.

When you separately create an Andeor account, save a plan, request a guide, join a newsletter, contact us, submit a review, apply as a partner or affiliate, place an order or make a booking, we process the details you provide to deliver that service, provide support, prevent fraud, maintain business records and comply with law. This can include contact details, account details, participant information, booking and order records, communications, consent choices, reviews, referral attribution and transaction status. Payment credentials are handled by the applicable payment provider and are not exposed through the public ChatGPT app.

We share those records only with the service providers and experience partners needed to fulfil the request, with authorised Andeor personnel and where legally required. Service and financial records are kept for the period required by applicable accounting, tax, fraud-prevention and legal obligations. Marketing contact data is kept until you unsubscribe or ask for deletion, subject to a minimal suppression record needed to respect that choice.

When a participant signs an Originals or Editions participation acknowledgement, Andeor records the participant's name, optional email address, drawn signature, tour and date, the exact version and language of the wording shown, the responsible guide and the server signing time. This creates an auditable record of what the participant acknowledged and supports safety follow-up and the establishment, exercise or defence of a claim. The form does not record health details. A participant can instead tell the guide privately about anything that could affect safe participation.

Signed participation records are available only to authorised Andeor personnel and necessary infrastructure providers. They are kept through the period in which the tour may reasonably give rise to a complaint, safety follow-up or legal claim, and longer only when a specific dispute, legal duty or preservation requirement applies. We erase or de-identify the record when those purposes have lapsed.

We use access controls, encrypted connections and service-provider safeguards intended to protect data. No internet service can guarantee absolute security. Providers may process information outside your country. Where required, we use appropriate contractual or legal safeguards for that processing.

We will update this policy when the Andeor app, its tool inputs or outputs, our recipients or our retention practices materially change. The date at the top identifies the current version.

Send questions, requests or complaints about this policy to info@andeor.travel. Please state that your request concerns the Andeor app in ChatGPT when applicable.