Your data
Manage your data
Take a copy of everything, or erase it. Both are available here and inside the app. We verify it’s really you first.
Export your data
Request a portable copy of your trips, Trip-Board items, preferences, prompts, and account metadata, in a structured, machine-readable format. We send a secure download link to your verified email.
Request an export
We’ll email a magic link to confirm it’s you, then prepare your archive.
Delete your data
Erase your personal data and close your Zestli account. This is permanent. After verification we delete your trips, itineraries, prompts, preferences, voice transcripts, guest data, and account, subject to the limited legal retentions below. Deletion removes your data — it is not the same as deactivating; we do not merely freeze your account.
Request deletion
We’ll email a magic link, then ask for your second factor (MFA) before anything is erased.
You can also delete your account inside the app (Settings → Account → Delete account). This web page is always available so you can request deletion without the app.
What is retained
To meet legal and financial obligations we retain a minimal record of completed bookings and payments (for tax, accounting, and dispute resolution), and we may retain limited information needed for security and fraud prevention, even after deletion. We retain these only for as long as the law requires, and they are not used for any other purpose. Everything else — itineraries, prompts, transcripts, preferences, guest data — is removed. If you are a guest with no completed booking, deletion removes your data in full.
Timeline
We act on a verified export or deletion request within 30 days (and within the shorter period your local law may require, such as one month under the GDPR; we may extend once, with notice, for complex requests as the law allows). We’ll confirm by email when it’s done.
How we verify you
Because export and deletion are sensitive, we verify identity with a magic link sent to your email and, for deletion, your second factor (MFA). There is no social login. An authorized agent may make a request on your behalf where the law allows, with proof of authority. Questions: privacy@zestli.ai.
Your other rights
Beyond export and deletion, you can ask us to correct or restrict your data, object to certain processing, and withdraw consent at any time — see the Privacy Policy for the full list and, depending on where you live, how to contact your data-protection regulator. To exercise any of these, email privacy@zestli.ai.