These are the third parties that process data on NovaXplora's behalf. This list is kept current, and may change as we add or replace providers.
Our Privacy Policy governs how we handle your data. This page exists so you can see who is involved at any time.
AI providers
| Provider | Data Processed | Purpose |
|---|
| OpenAI | Trip descriptions, trip type, destination context; full contents of imported booking documents, including traveller names, booking references and addresses | AI-powered suggestions |
| Google Gemini | Trip descriptions, trip type, destination context; full contents of imported booking documents, including traveller names, booking references and addresses | AI-powered suggestions |
| OpenRouter | Trip descriptions, trip type, destination context; full contents of imported booking documents, including traveller names, booking references and addresses | AI-powered suggestions (model routing) |
Mapping and routing
| Provider | Data Processed | Purpose |
|---|
| Stadia Maps | Destination coordinates (latitude/longitude) | Route calculation between destinations |
| OpenStreetMap Foundation (tile servers) | Map area viewed (tile coordinates), IP address inherent to the request | Map imagery — your browser loads map tiles directly when a map is shown |
Place search and enrichment
| Provider | Data Processed | Purpose |
|---|
| Nominatim (OpenStreetMap) | Search queries, coordinates | Place search and geocoding |
| Photon (Komoot) | Search queries | Place autocomplete |
| Google Places | Search queries, coordinates | Place search enrichment |
| TripAdvisor | Place identifiers | Destination enrichment |
| Geoapify | Destination coordinates, search criteria (meal type, cuisine, radius) | Restaurant and place discovery |
| Wikimedia (Wikipedia, Wikidata, Commons) | Place and landmark names | Place summaries, descriptions, and photos |
| Pexels | Image requests, IP address inherent to the request | Destination photos — your browser loads some images from Pexels directly |
Weather
| Provider | Data Processed | Purpose |
|---|
| National Weather Service (NWS) | Destination coordinates and travel dates | Weather forecasts for destinations in the United States |
| MET Norway (Norwegian Meteorological Institute) | Destination coordinates and travel dates | Weather forecasts for destinations outside the United States |
Travel advisories
| Provider | Data Processed | Purpose |
|---|
| US State Department (Bureau of Consular Affairs) | Destination countries only — no user identity | Travel-advisory information for your destinations |
Content delivery and security
| Provider | Data Processed | Purpose |
|---|
| Cloudflare | IP address and the full contents of every request to the site | CDN and TLS proxy in front of all traffic |
File storage
| Provider | Data Processed | Purpose |
|---|
| Backblaze B2 | Data exports, attachments | File storage (S3-compatible API) |
Email delivery
| Provider | Data Processed | Purpose |
|---|
| Microsoft Graph | Email addresses | Transactional email delivery |
Push notifications
| Provider | Data Processed | Purpose |
|---|
| Apple Push Notification service (APNs) | A device push token, and a notification title/body naming the acting collaborator and event type — never comment text | Push notifications on iOS |
| Google Firebase Cloud Messaging (FCM) | A device push token, and a notification title/body naming the acting collaborator and event type — never comment text | Push notifications on Android |
| Browser push services | A device push token, and a notification title/body naming the acting collaborator and event type — never comment text | Push notifications for the installed web app |
Error monitoring
| Provider | Data Processed | Purpose |
|---|
| Sentry | Technical error details (the page and browser involved), configured to exclude personal information | Detecting and fixing failures in the service |
