Privacy Policy

Destiny Blue in ChatGPT

The app answers questions from owner-approved information, checks live availability and quoted totals, and searches flexible dates for our two condos. It may return photos and links to checkout on our website. It has no Destin Condo Getaways account and cannot access existing bookings, take payment, reserve or hold dates, or contact Ozan for you.

For a tool call, ChatGPT may send dates or a date window, nights, adult, child and infant counts, a condo choice, an optional budget, a short question, relevant wording from your request, and an opaque signed token carrying earlier stay results. Our server receives standard HTTP headers, including a network IP address that may belong to an intermediary rather than your device. We use the wording to check that stay criteria were understood; we do not request your full ChatGPT history. Do not send card details, government identifiers, passwords, door codes, medical information or other sensitive details.

Our database creates one log row per tool call. It records the tool name, result or error, duration and, for stay tools, dates or window, nights and guest counts. For a question it stores only the question length, not the text. It does not store your relevant request wording or budget. It stores a keyed hash of the network IP, not the raw IP, to rate-limit requests and group logs. That hash can link activity and is not anonymous.

The signed result token can contain dates, party size, stay options, totals and booking links. It expires for server use after two hours. It is signed against alteration, not encrypted; copies may remain in ChatGPT after it expires. We do not store a separate token copy in our application log.

Vercel hosts and routes app requests and keeps runtime request logs, including path, status and IP, for one day on our current plan. Supabase stores our application logs in its US East database. OwnerRez receives property, dates and guest counts for availability and test quotes, not the question text. OpenAI receives tool results so ChatGPT can answer. Our app itself does not call a separate AI model, embedding service, analytics tool or ad service for these requests.

App tool logs are deleted from our live database after 90 days from creation. Per-minute rate-limit counters are removed after two days. Provider logs and any backup copies follow separate provider schedules. A legal preservation obligation may require keeping a specified record longer. Disconnecting the app stops new tool calls but does not delete past records; ChatGPT conversations and OpenAI-held data are managed through ChatGPT and OpenAI, not through us.

Website visits and bookings

When you use our website or contact us, we may receive your name, email, phone, travel dates, party size, reservation details and messages. We use them to answer inquiries, provide requested planning information, manage reservations and support stays. Website hosting and analytics may also receive IP, browser and device information, referring pages, pages visited, approximate location and interaction events.

Checkout takes place through OwnerRez, with Stripe handling payment processing. We receive reservation and payment-status information needed to manage a stay. Enter card information only on the secure checkout page, never in ordinary chat, voice or email. Booking and accounting records may have separate legal retention obligations.

Destiny Blue on the website

Website chat and voice are separate from the ChatGPT app. OpenAI processes chat messages, speech and transcription so Destiny can respond. Encrypted conversation memory in our live database expires within 24 hours. Our chat log retains guest messages, Destiny replies, links and tool activity; voice logs retain call identifiers, transcripts with email addresses masked, timings and tool events. We do not store audio recordings in our database. These live chat, voice and client-event logs are automatically deleted after 90 days.

Ozan can review relevant conversations in Headquarters to answer requests and improve the service. Discord receives an owner notification when someone starts a voice call, or when a new chat starts with the first 200 characters of the guest's first message. If the older fallback chat is enabled, it may also store conversations in a Google Sheet. A website owner-request form can send your contact details and request to Ozan through Brevo. The ChatGPT app cannot submit that form.

The voice interface processes speech and displays call controls; end the call to stop voice processing. Do not read payment details, access codes or other sensitive information aloud. Private guest links can connect website content to a reservation; keep those links private. The ChatGPT app cannot retrieve an existing reservation.

Cookies, analytics and privacy controls

Our website loads Google Tag Manager, Google Analytics and Microsoft Clarity, including Clarity session replay, without a cookie-consent banner. They may use cookies or similar identifiers to measure visits and interactions. You can block or clear cookies in your browser, use the Google Analytics opt-out browser add-on, and use your browser's tracking controls for Clarity. Some website features may not work normally if cookies are blocked.

We do not currently offer a separate on-site cookie-choice panel or a separate automatic response to Do Not Track or Global Privacy Control signals. Third-party services may offer their own controls. Affiliate links and analytics may involve disclosures beyond a monetary sale of data; contact us with a privacy request about your choices.

Emails, providers and external links

Brevo sends requested recap and owner-request emails. A recap goes to the address you type and is not a reservation. We may also send offers or newsletters to subscribers or past guests; marketing messages include an unsubscribe link. Necessary booking or safety messages may continue after a marketing opt-out.

Our website may link to Aviasales or Travelpayouts for flights, TripShock for activities, DiscoverCars for rental cars, and restaurant or other external services. We may earn a commission from qualifying referrals. Those providers have their own terms and privacy practices when you follow a link. Weather, tide and map providers may receive a location or date needed for a requested answer, not your booking identity.

Access, correction and deletion

Email ozan@destincondogetaways.com with Privacy request in the subject. Tell us whether you seek access, correction or deletion, which Destiny service you used, and the approximate date and time with timezone. Include only enough information to locate your records; do not send a full conversation or sensitive details. We may ask for limited verification before disclosing or deleting records.

For records we can identify in our live chat and voice logs, we will complete a valid deletion request within 30 days, subject to applicable law. The ChatGPT app has no account and omits names and question text from tool logs, so a date alone may not identify one person's rows reliably. We will explain when a record cannot be confidently linked to you. We cannot delete ChatGPT chats, memories or records held by OpenAI for you. Provider records, accounting records and legal holds may be subject to different requirements.

Privacy rights depend on your location and applicable law. We will explain any applicable exception and respond within required legal deadlines. Deleting data needed for an active reservation may affect our ability to provide the stay; it does not cancel the booking or change its cancellation terms.

Children, security and updates

These services are not directed to children under 13. Adults arranging travel should provide only the party details needed for a stay. If you believe a child sent us personal information, contact us. We use access controls and other safeguards appropriate to the information handled, but no transmission or storage method is completely secure.

We may update this policy and its effective date. A change does not by itself authorize a new use of data previously collected; we will give notice or obtain consent when applicable law requires it.