Privacy Policy — NorthTally
Last updated: 2026-07-22.
NorthTally is a travel decision engine: it helps you compare trip options by their real total cost and hands you off to partner sites to book. We are not a booking site and we never process payments.
What we collect
- Account: your email address and a password (stored as a salted hash — we never see or store the plain password), plus session cookies to keep you signed in.
- Trips you save: the search parameters you set — cities, dates, number of travellers (party size), and your home airport — plus the options and line items you create (hotel/flight/car details you paste or save from a search, their prices as you saw them, any notes) and the results our engine computes for them.
- Account preferences (optional): if you provide them, we store your home airport and preferred currency so we can prefill new trips for you. You can change or clear these at any time from your account page.
- Searches you run: the city, dates and airports you enter to get a recommendation. City-level discovery results (which tourist areas exist in a city) are cached WITHOUT any link to you.
- Nothing else. No ad trackers, no analytics profiles, no location tracking, no contact scraping.
Who processes it (our subprocessors)
| Processor | What they see | Why |
|---|---|---|
| Neon (Postgres, EU/US cloud) | your account + saved trips | our database |
| Google Maps Platform (Places) | the city/area you search | tourist-area + hotel discovery |
| OpenAI and/or Anthropic | text you paste for parsing + the computed trip figures being explained | turning pasted text into structured data; explaining results. We send trip facts, not your identity. |
| LiteAPI / Nuitée | the area and dates you search | indicative hotel rates |
| Travelpayouts / Aviasales, Trip.com | nothing from us; when you click a partner link, THEIR site sets its own cookies and terms | booking handoff (we may earn a commission) |
We never sell your data. We never send your email or identity to AI providers or travel partners.
Prices and partner sites
Prices shown in NorthTally are indicative; the live, bookable price is shown on the partner site. When you follow a partner link, that site’s own privacy policy applies. NorthTally is not affiliated with the hotel, airline or rental brands displayed.
Travel guides and how they’re made
Our public travel guides (the /guides pages) are founder-curated and AI-assisted: a language model helps write the narrative prose, but every price, distance and figure in a guide is computed by our own scoring engine — the AI never invents or restates numbers. Reading a guide is anonymous; we don’t need an account or any personal data from you to show one.
Guides combine data from a few sources, attributed on the page:
- Maps and place data come from OpenStreetMap (© OpenStreetMap contributors, ODbL).
- Photos come from Wikimedia Commons under each image’s own Creative Commons or public-domain licence (attributed per image), from partner/affiliate sources, and from our own city photography.
- We do not store or display Google Places content off Google; Places data is used only in-session to power discovery.
Your rights (GDPR and equivalents)
- Export: download everything we hold about you as JSON from your account page, any time.
- Delete: delete your account from your account page — it permanently removes your account and all your trips from our database. This is immediate and irreversible.
- Access/rectification: your data is visible and editable in the product itself.
- Questions or requests: privacy@northtally.com.
Retention
Your data lives as long as your account does. Shared city-discovery caches (no personal data) expire automatically within 30 days. Server logs are minimal and never include your pasted text or prices.
Changes
We’ll post any material change here with a new “last updated” date before it takes effect.