Who we are
Argo is operated by Miguel Alves, an individual based in Hortolândia, SP, Brazil, doing business under the trade name Taurus Technology ("Argo", "we", "us"). For the purposes of LGPD and GDPR, Miguel Alves is the data controller for the personal data described in this Policy, and also serves as its Data Protection Officer (Encarregado) — reachable at [email protected] for anything related to your data or this Policy.
What we collect
Account information
When you create an account: your email address, full name, and a password, which we never store in readable form — it's hashed with Argon2id (the current OWASP-recommended algorithm for password storage) before it ever touches our database. We also record login timestamps, failed-login counts, and IP address on login attempts, purely to detect and block credential-stuffing/brute-force attempts.
Trip content
Everything you put into a trip: destinations, dates, itinerary items, flights, ground transport, accommodations, budget categories and expenses, packing and shopping lists. This is the core of what Argo stores on your behalf, and it's yours — see Your rights below for how to export or delete it.
AI copilot conversations
If you use the AI assistant, we store the full text of your messages and its replies, scoped to the trip and conversation you had them in, so you can come back to a conversation later and so the assistant can refer back to earlier context. See Who we share it with for how this data reaches our AI provider. Don't send us Sensitive Personal Data (as defined by LGPD Art. 11 — health, religious belief, sexual orientation, political affiliation, and similar categories) through the copilot; it isn't designed to receive or protect that category of data.
Information about people you invite
If you invite someone to collaborate on a trip, we store their email address and the role you gave them (editor or viewer) — even before they create an account. If they never accept the invitation, this is the only data we hold about them, and it's deleted if you cancel the invitation or delete the trip. By sending an invite, you confirm you're authorized to share that person's email address with us for this purpose.
Payment & AI credit information
When you purchase a Plus or Premium trip tier, or an AI credit pack, payment is processed by Stripe — your card details go directly to Stripe and never touch our servers. We store the resulting transaction record (amount, currency, what you purchased, status, and Stripe's own reference ids) linked to your account, along with your AI credit balance and the history of what added to or removed from it (a free signup bonus, a tier purchase, a credit-pack purchase, AI usage, or a refund).
Information collected automatically
For every request to our servers, we log: IP address, user agent (browser/device string), the endpoint called, and a user/trip identifier where you're authenticated. We do not log request or response bodies — passwords, tokens, AI conversation text, and trip content never appear in these logs. This data stays on infrastructure we operate ourselves; it is not sent to a third-party analytics or logging vendor. We do not use any advertising, analytics, or behavioral-tracking scripts anywhere in Argo. We keep IP address and connection records to meet our obligation under Brazil's Marco Civil da Internet (Law 12.965/2014) to retain application-access logs — see How long we keep it for the retention period.
Why we use it
- To create and secure your account, and to authenticate you.
- To provide the core product — storing and organizing your trip content.
- To power the AI copilot's answers and the actions it takes on your trip when you ask it to.
- To process payments and keep an accurate record of what you've paid for.
- To send transactional email: verification, password reset, and trip-invitation emails. We do not send marketing email.
- To detect and prevent abuse, fraud, and unauthorized access.
- To meet legal and accounting obligations (for example, retaining transaction records for tax purposes).
Legal basis for processing
Depending on what we're doing with your data, we rely on one of the following:
- Performance of a contract — most of what Argo does: storing your trip content, running the AI copilot when you use it, processing payments you request.
- Legitimate interests — securing the service (rate-limiting, fraud/abuse detection, the security logging described above), where this doesn't override your own rights and interests. You can object to processing based on this ground — see Your rights.
- Legal obligation — retaining transaction records for accounting and tax compliance.
- Consent — where we ask for it explicitly (for example, if we ever add optional marketing communications — we don't send any today).
We won't start using your data for a new purpose materially different from those listed above without telling you first and, where the law requires it, asking for a fresh consent. Where we rely on your consent for something, you can withdraw it at any time — this won't affect the lawfulness of anything we did with it before you withdrew.
Who we share it with
We do not sell your personal data, and we do not share it for advertising purposes. We share it only with the service providers ("sub-processors") that Argo actually depends on to function:
| Provider | What it's for | What it receives |
|---|---|---|
| OpenAI | Powers the AI copilot | Your messages to the assistant and the trip context needed to answer them |
| Stripe | Payment processing | Billing details you enter at checkout (handled entirely on Stripe's own systems) |
| Resend | Transactional email delivery | Your email address, name, and the content of verification/reset/invite emails |
| Open-Meteo | Destination geocoding and weather | Place names and country you enter — no personal data |
| AwesomeAPI | Currency exchange rates | Currency pair codes only (e.g. "USD-BRL") — no personal data |
OpenAI does not use data sent through its API to train its models — this is a commitment in OpenAI's own API terms, separate from and stricter than the default behavior of consumer products like ChatGPT. We use the API, not the consumer product, specifically because of this.
We may also disclose data where required by law, to comply with a valid legal process, or to protect the rights, property, or safety of Argo, our users, or the public.
International data transfers
OpenAI, Stripe, and Resend process data outside Brazil (primarily in the United States). Where we transfer personal data internationally, we rely on the transfer mechanisms those providers make available for their business customers (such as Standard Contractual Clauses) and on their own published data-processing and security commitments —we require the same level of protection those providers commit to, regardless of where your data is processed. If you'd like more detail about a specific transfer, contact us at [email protected].
How long we keep it
- Account and trip data: kept while your account is active. When you delete your account or a trip, it's soft-deleted immediately (recoverable by you for 30 days), then permanently and irreversibly deleted.
- Shared trips: if you own a trip shared with collaborators and you delete your account, the trip — and every collaborator's access to it — is deleted along with it once the 30-day window passes. Consider transferring ownership or exporting shared content first if this matters to you.
- Payment records: kept after account deletion, but with the link to your identity removed, so we can meet accounting/tax record-keeping obligations without retaining data that identifies you.
- Login attempt records (used for abuse detection): kept for 24 hours only.
- Server logs: kept for 30 days on our own infrastructure, then deleted.
- Webhook event records (Stripe idempotency guard): kept for 7 days.
Your rights
Under LGPD and GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data — most of this you can already do directly in your account settings.
- Delete your account and data — self-service, from your account settings, no need to contact us. Deletion is reversible for 30 days, then permanent.
- Export your data in a portable format.
- Object to or restrict certain processing, and withdraw consent where we rely on it.
- Lodge a complaint with your local data protection authority — in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD).
For anything not available directly in the product, email [email protected] — we aim to respond within 15 days.
Security
- Passwords are hashed with Argon2id — we cannot see or recover your actual password, ever.
- Authentication uses a short-lived access token plus a refresh token stored in an HttpOnly, Secure, SameSite cookie — never in a place JavaScript (or an XSS attack) could read it.
- Login is rate-limited and lockable to slow down credential-stuffing and brute-force attempts.
- Stripe webhook events are cryptographically verified before we act on them, and processed exactly once even if delivered more than once.
- Every request is scoped server-side to the authenticated user and the trips they actually belong to — access isn't just "logged in," it's checked against real ownership/membership on every request.
- Security is a two-way responsibility: we're not liable for unauthorized access resulting from malware, a keylogger, or another compromise of your own device, or for a session stolen through a phishing site that isn't part of Argo.
Cookies
Argo uses exactly one cookie: refresh_token, which keeps you logged in. It's strictly necessary for the service to function, HttpOnly (JavaScript cannot read it), Secure (HTTPS only), and scoped SameSite=Lax. There are no third-party cookies anywhere on Argo — no advertising, analytics, or tracking cookies of any kind — so there's nothing else to opt in or out of.
Children's privacy
Argo is not directed at, and is not intended to be used by, anyone under 18. We do not knowingly collect personal data from minors. Because a minor lacks legal capacity to enter into our Terms of Service under Brazilian law, an account we discover belongs to someone under 18 is deleted immediately and permanently — the usual 30-day recovery window described above doesn't apply to it. If you believe a minor has created an account, contact us at [email protected] and we will delete it.
Changes to this Policy
If we make a substantial change to this Policy — one affecting the purpose, form, duration, or sharing of your data — we'll notify you in a clear, prominent way (email and/or an in-product notice) at least 15 days before it takes effect, and you'll have the right to object to it or delete your data before the new version applies. A cosmetic change (wording, formatting) can take effect immediately. The "Last updated" date at the top always reflects the current version.
Contact us
Miguel Alves, operating Argo under the trade name "Taurus Technology"
Hortolândia, SP, Brazil
[email protected] — Data Protection Officer (Encarregado) contact for LGPD/GDPR matters
We aim to respond within 48–72 business hours.