Privacy Policy

Last updated 2026-11-11

Trips MCP is a small, personal, non-commercial service run by the owner of woodu.io for themselves and invited family members. It lets an AI assistant you choose (such as Claude) read your TripIt itinerary on your request.

What data is accessed

• Google sign-in: your Google account email and name, used only to identify you. No access to Gmail, Drive, Calendar or any other Google data is requested.
• TripIt: your private TripIt calendar feed: trips, flights, lodging, restaurants and other bookings, with times and addresses. Read-only.

How it is used

• Your email is checked against the list of invited users.
• Your itinerary is fetched only when your AI assistant calls a tool, and passed straight back to that assistant.
• Data is not sold, shared with third parties, used for advertising, or used to train models by this service.

What is stored

• Stored: your Google email and name inside an encrypted session token (Cloudflare Workers KV), and your TripIt feed URL as an encrypted secret.
• Not stored: Google tokens, passwords, or your itinerary. The feed is cached in memory at the edge for at most 5 minutes.
• Cloudflare may keep short-lived request logs for operations and abuse prevention.

Third parties

The service runs on Cloudflare and uses Google for sign-in. Data returned to your AI assistant is governed by that provider's privacy policy (e.g. Anthropic). Your TripIt data remains governed by TripIt's privacy policy.

Your choices

Stop access at any time by removing the connector, revoking the app at myaccount.google.com/permissions, or resetting your TripIt calendar feed.

Contact

Questions or deletion requests: contact the operator of woodu.io.