Privacy Policy

Last updated: September 2026 · Effective: September 2026

This Privacy Policy describes how SafariClose (“SafariClose”, “we”, “us”) collects, uses, stores, and shares information when you use the SafariClose application and related services at safariclose.com. SafariClose is booking-recovery software for safari and tour operators.

Information we collect directly

• Workspace account information — such as your name, email address, job title, phone number, and profile photo when you provide them.
• Business/workspace information — such as company name, website, location, country, currency, timezone, booking terms, and team membership.
• Inquiry and booking records — traveler contact details, trip details, quotes, deposits, follow-ups, conversation history, and activity you or your team create or import into SafariClose.
• Technical and usage information — such as device type, browser, session identifiers, product event names, and pages or features used. See Analytics and cookies below.
• Newsletter sign-ups — email addresses submitted on our public website.
• Support requests — information you send when contacting us.

How we use information

We use the information above to:

• operate, secure, and improve SafariClose;
• authenticate users and isolate data by workspace;
• help your team manage inquiries, conversations, follow-ups, quotes, and recovery workflows;
• deliver notifications and support you request;
• process billing and prevent abuse; and
• send optional product updates if you subscribe to our newsletter.

Google user data

SafariClose connects to Google services only after a workspace member authorizes access through Google’s consent screen. This section describes SafariClose’s use of information received from Google APIs.

SafariClose’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google user data is used only to provide or improve user-facing SafariClose features described in this policy.
• Google user data is not sold.
• Google user data is not used for advertising or re-identified for advertising purposes.
• Google user data is not used to determine creditworthiness or for lending purposes.
• SafariClose does not use Google user data to train SafariClose’s own generalized machine-learning models.
• Google user data is not used for targeted advertising, selling to data brokers, providing to information resellers, determining creditworthiness, lending, personalized or retargeted advertising, interest-based advertising, or building unrelated databases.
• Google user data is not transferred to third parties for any of those prohibited purposes.

Google user data SafariClose accesses

When you connect Google services, SafariClose may access the following categories of Google user data:

Google identity (OAuth)

• Google account email address
• Google account display name
• Google account identifier (sub)

Gmail (when Gmail is connected)

• Email addresses appearing in message headers (From, To, Cc)
• Sender and recipient information
• Subject lines
• Message body text
• Email threads
• Gmail message IDs and thread IDs
• Message timestamps
• Gmail history IDs and watch state used for synchronization
• Messages in Inbox and Sent mail monitored for inquiry activity
• Short snippets or previews shown in the product

SafariClose does not download or store email attachment file contents. Attachment filenames may appear in message structure but attachment files themselves are not retrieved or stored.

Google Calendar (when Calendar is connected)

• Owned calendar identifiers, names, and timezones
• Free/busy availability for a selected owned calendar (queried transiently before creating events)
• Event identifiers for events SafariClose creates or updates
• Event start and end times, titles, and descriptions SafariClose writes for follow-up or test events

How SafariClose uses Google user data

SafariClose uses Google user data only to provide or improve user-facing features, including to:

• identify safari and travel inquiries in connected Gmail mail;
• create and update inquiry and customer records;
• highlight potential missed sales or unmatched opportunities;
• display customer communications and conversation history in SafariClose;
• synchronize new replies and sent messages while Gmail remains connected;
• draft or recommend follow-up and recovery messages;
• send email through Gmail when you send manually, approve a draft, or use Automatic mode within your guardrails;
• check calendar availability before creating an event on a calendar you own;
• create, update, and link follow-up or call reminders on your selected owned Google Calendar; and
• operate integration health, security, and support for connected Google accounts.

SafariClose does not use Google user data for unrelated business analytics, advertising, or resale.

Google account information

When you connect Gmail or Google Calendar, SafariClose receives through Google OAuth:

• your Google account email address;
• your Google account display name; and
• a Google account identifier (sub) used to recognize the connected account.

SafariClose uses this information to show which Google account is connected, route messages and calendar actions to the correct mailbox or calendar, and maintain the integration securely.

Gmail — data accessed

With your authorization, SafariClose uses the Gmail API with read-only access to identify, import, and keep safari and travel inquiry communications up to date. Depending on the feature, SafariClose may access:

• messages in your Inbox and Sent mail that SafariClose monitors for inquiry activity;
• email metadata such as sender, recipients, subject line, date/time, labels, message ID, thread ID, and history ID;
• message body text decoded from email messages; and
• short snippets or excerpts where the product displays a preview.

SafariClose reads email text from message bodies. It does not download or store email attachment files. SafariClose does not delete, archive, move, or change labels on your Gmail messages.

Gmail access is used to detect legitimate travel inquiries, create or update inquiry and conversation records, display related communications in SafariClose, support follow-up and recovery workflows, and analyze whether unmatched messages may represent new opportunities.

Gmail — sending

With your authorization, SafariClose may send email through your connected Gmail account using the Gmail send scope. Sending occurs when:

• You or a teammate manually sends a message from a SafariClose conversation;
• You send a Gmail test message from SafariClose integration settings;
• Your workspace recovery agent is in Automatic mode and SafariClose determines a low-risk automated email may be sent within your configured guardrails; or
• You approve an AI-generated draft when your workspace is in Approval mode.

In Assist mode (the default), SafariClose may draft or recommend messages but does not automatically send Gmail messages unless you send them manually or approve a queued draft. SafariClose does not send Gmail messages outside the product features you configure.

Gmail synchronization

While Gmail remains connected, SafariClose may continue synchronizing relevant Gmail activity in the background. This includes registering for Gmail change notifications and periodically checking for new or updated messages in monitored mail so inquiry records and conversations stay current. Synchronization stops when you disconnect Gmail in SafariClose, when Google notifies SafariClose that access was revoked, or when the integration requires reconnection.

Google Calendar — data accessed and used

SafariClose requests two Calendar permissions:

• Free/busy (calendar.freebusy) — SafariClose may query free/busy information for your selected owned calendar before creating an event. SafariClose does not store free/busy results as standalone calendar records.
• Owned calendar events (calendar.events.owned) — SafariClose may list calendars you own, read calendar metadata such as calendar name and timezone, create events on the calendar you select, and update events SafariClose previously created for pending follow-ups or test events.

SafariClose does not read your entire Google Calendar history. It does not access calendars you do not own, and it does not delete Google Calendar events when a follow-up is completed or cancelled in SafariClose—only the local link and sync status in SafariClose are updated unless you remove the event directly in Google Calendar.

Calendar data is used to schedule follow-up or call reminders on the connected user’s selected owned calendar and to keep those events aligned when follow-up details change.

AI processing

SafariClose uses third-party AI services to power specific product features. This may include Google-derived information.

• OpenAI — When configured for your deployment, SafariClose may send Gmail thread text (subjects, participants, timestamps, and trimmed message bodies), together with connected-mailbox context, to OpenAI’s API to classify whether messages represent travel inquiries, verify discovery candidates, and analyze opportunity threads during Gmail import and live synchronization. SafariClose may also send inquiry fields and conversation message text—including content that originally came from Gmail after synchronization—to OpenAI to generate suggested or automated traveler-facing replies in supported channels.
• Telnyx — When configured, SafariClose may use Telnyx for optional voice-call transport and workspace voice-agent sync. Telnyx is not used for email or WhatsApp text generation.

AI providers process this information as service providers acting on SafariClose’s instructions to deliver the features above and only for those user-facing purposes.

Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. SafariClose does not use Google user data to train SafariClose’s own generalized models. Third-party AI providers process applicable content solely to provide SafariClose functionality described in this policy; whether a provider may use API inputs for its own model improvement is governed by that provider’s applicable API terms.

What SafariClose stores from Google services

SafariClose distinguishes between data it accesses transiently and data it persists:

• OAuth credentials — encrypted access and refresh tokens, token expiry metadata, and granted scopes.
• Connection metadata — connected Google email, display name, Google account identifier, selected calendar ID/name/timezone, Gmail watch and history cursor state, and integration health timestamps.
• Gmail-derived business records — inquiry records, conversation messages (including email body text), thread and message identifiers, discovery candidate summaries, and activity entries derived from Gmail.
• Calendar linkage — Google Calendar event IDs and sync status for follow-ups SafariClose created or updated.

Importing Gmail content into SafariClose inquiry and conversation records means that information remains part of your workspace data even after Gmail is disconnected, unless you delete those records or request workspace deletion as described below.

Retention

SafariClose retains workspace and Google-derived business records while your workspace remains active and as needed to provide the service, comply with law, resolve disputes, enforce agreements, maintain security, and meet billing or accounting obligations. SafariClose does not apply a separate fixed deletion period to all Google-derived records.

Disconnecting Google stops future API access and removes stored OAuth tokens for that integration, but it does not by itself delete inquiry, conversation, or calendar-linkage records already stored in SafariClose.

Disconnecting Google and revoking access

You can disconnect Gmail or Google Calendar at any time from Settings → Integrations in SafariClose.

When you disconnect in SafariClose, SafariClose:

• stops Gmail watch / background synchronization for that connection;
• deletes the encrypted OAuth tokens stored for that integration; and
• marks the integration as disconnected so SafariClose will not make further Google API calls with those credentials.

You can also revoke SafariClose’s access at any time from your Google Account permissions page. If Google notifies SafariClose that access was revoked, SafariClose disables the affected connection and removes stored credentials.

Disconnecting Google or revoking access does not automatically delete inquiry, conversation, or other business records already saved in your workspace.

Account and data deletion

SafariClose does not currently offer a self-service “delete my entire workspace” button. To request deletion of your SafariClose account, workspace, or associated personal data—including Google-derived records stored in SafariClose—email hello@safariclose.com from your account email address. We may need to verify your request before processing it.

We may retain limited information where required or permitted by law—for example billing records, fraud- prevention logs, or security audit records—even after deletion of active workspace content.

Sharing and service providers

We share Google-derived information with service providers only as needed to provide SafariClose functionality:

• Supabase — application database, authentication, and file storage infrastructure;
• Hosting providers — such as Vercel for application hosting and scheduled jobs;
• OpenAI — Gmail classification, inquiry-discovery analysis, and traveler-facing text generation as described above;
• Telnyx — optional voice-call transport and voice-agent sync;
• Resend — transactional platform email such as sign-in codes and support notifications (not your connected Gmail mailbox);
• Payment processors — when you purchase a paid plan; and
• Meta (Facebook Pixel) — website and in-app product analytics events as described below.

We do not sell Google user data. We do not share Google user data with analytics or advertising providers for the content of Gmail messages or Calendar events. Meta Pixel and first-party analytics receive only non-content product events as described in Analytics and cookies.

Analytics and cookies

SafariClose uses first-party product analytics (stored in SafariClose’s database) to understand feature usage and reliability. SafariClose also uses the Meta (Facebook) Pixel on public pages and in the authenticated application to record page views and certain product events such as sign-up milestones or integration connection events.

These analytics systems receive event names, page context, device/browser characteristics, and non-content identifiers such as inquiry IDs. They do not receive Gmail message bodies, Google Calendar event details, OAuth tokens, or other protected Google user data from SafariClose.

Human access

SafariClose personnel may access workspace data only when reasonably necessary—for example to provide support you request, investigate abuse or security issues, or maintain the service. Authorized personnel with production database access could access stored inquiry, conversation, and integration records, including Google-derived content saved in SafariClose. Access is limited by role and business need.

Security

SafariClose uses administrative, technical, and organizational safeguards designed to protect information, including HTTPS for data in transit, encrypted storage of integration OAuth tokens, workspace isolation in the application, and restricted production access. No method of transmission or storage is completely secure.

International processing

SafariClose and its service providers may process information in countries other than your own, including where our infrastructure or subprocessors operate.

Children’s privacy

SafariClose is a business product for tour operators and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above when we do. If we change how SafariClose accesses, uses, stores, or shares Google user data, we will update this policy accordingly and may notify workspace owners through the product or by email where appropriate.

Contact

Privacy questions or requests: hello@safariclose.com