Privacy Policy

1. Information we collect

We collect information you provide when creating an account (email, display name), your search, click, and booking activity on the platform, and standard usage data (device type, IP address, pages visited) to improve the service.

2. How we use your information

We use your data to operate price comparison and affiliate redirects, process hotel bookings, personalize your deal feed, and improve search and offer matching. We do not sell your personal information to third parties.

3. Data sharing

Individual user identities are never disclosed to retailers or suppliers. We use Stripe for payment processing — your payment details are handled directly by Stripe and never stored on our servers.

4. Data retention

We retain your account data for as long as your account is active. Price history and order data are retained for analytics and service improvement. You can request deletion of your account and associated data at any time.

5. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest), bcrypt password hashing, and short-lived JWT tokens. See our Security page for more details.

6. MCP Server & AI agents

PriceTik publishes an MCP (Model Context Protocol) server so AI agents — Claude, Cursor, and other MCP clients — can search hotels, tickets, and deals on your behalf. When you use it through an agent:

• What we receive. The server forwards your tool inputs (a destination, dates, a product URL) to the PriceTik Intel API to fulfill each request. Unauthenticated requests are attributed to an anonymous fingerprint — a SHA-256 hash of IP + user agent used only for rate-limiting and abuse prevention, not to identify you. Requests become associated with your PriceTik account only if you link it (see below) or supply an optional API key — then they are used for usage analytics and higher rate caps.
• Linking your account (OAuth). You can connect your PriceTik account to an agent with a one-time sign-in, which unlocks personal tools (your bookings, trips, savings, and loyalty). You approve exactly what the agent may access on a consent screen, scope by scope. Sensitive actions — cancelling or modifying bookings and viewing or managing payment methods — are listed separately and are off by default; you must opt in to each. We share with the agent only the data covered by the scopes you grant, and you can revoke access at any time from Settings → Connected apps, which immediately invalidates that agent's tokens.
• Providers. To return travel inventory we query upstream partners with permission. Affiliate checkout links (pricetik.com/go/…) carry attribution parameters so we earn commission when you complete a purchase on a retailer or provider site.
• No payments through agents. Booking tools never charge a card — they return a signed pricetik.com checkout URL that you complete in your browser. Card data never touches the MCP server or your agent runtime.
• Local extension. The Claude Desktop extension runs the MCP server on your own machine; it stores nothing locally and acts as a stateless proxy to the PriceTik API over HTTPS.

7. Contact

Questions about this policy? Email us at privacy@pricetik.com