next-plans
DEEN
Go to login

Version 2026-07

Privacy Policy

next-plans helps you plan holiday periods and receive matching offers. This policy describes which data is processed – in particular, what happens when optionally connecting your Google account.

The key points in brief
  • To create an account, all we need is an email address – a pseudonym as a display name is sufficient.
  • Google Calendar and Gmail are only connected if you actively initiate this and give your consent.
  • We do not broker bookings and we do not sell data.
  • Any connection and any subscription can be revoked individually at any time.

1. Data Controller

The operator of next-plans is responsible for data processing.

J. Haitz, Feldstrasse, Hirzel (Switzerland) · info@next-plans.com

2. Account and profile

When you register, we process your email address and – if logging in with Google – also the name and profile picture from your Google account. You may voluntarily provide a display name (pseudonyms allowed), a holiday canton and a work canton. Purpose: Provision of the account and calendar defaults. Basis: Contract or your consent.

3. Planning data

Your holiday slots, planned holidays, preferred windows (period, regions, budget, guests, children, flexibility) and detected bookings are saved in your account and displayed only to you. Access is restricted to your account at database level.

4. Connection with Google (explicit consent)

The connection with Google Calendar and Gmail is optional and starts exclusively when you trigger it yourself in the settings. In the Google window, you will see the requested permissions and must explicitly agree to them. Without this consent, we do not access any Google data.

a) Google Login

When logging in with Google, we only receive your email address, name and profile picture. No access to calendar or emails.

b) Google Calendar sync

  • We read events from your chosen calendar and write your next-plans slots as events there (two-way sync).
  • We store calendar ID, event IDs, change markers (ETag) and a synchronisation token so that changes can be assigned correctly.
  • Other calendars or contacts are not read.
  • You can disconnect the sync at any time in the settings; after that, the access keys will be deleted. Events already created remain in your Google Calendar until you delete them there.

c) Gmail scan for bookings and newsletters

  • At your request, we search your inbox (read-only) for messages from known travel providers and senders you have added yourself.
  • The contents of these messages are processed by an AI service for extraction (see Section 6). Only key details are saved: provider, title, period, location, price, reference and the message ID for duplicate detection.
  • We do not send any emails from your account and do not delete or change anything in your inbox.
  • The scan only runs if you start it or enable automatic scanning.

d) Access keys and revocation

The access keys issued by Google are stored encrypted on our server and are never shared with your browser or third parties. You can revoke access at any time via Settings → Disconnect, or additionally in your Google Account under 'Connected apps'.

5. Newsletters and Subscriptions

For offer newsletters, we store your email address, optionally your first name, your filters (regions, accommodation type, price) and the subscribed accommodations. Subscription uses a double opt-in process: we only send offers after you click the confirmation link. Every email contains an unsubscribe link; you can cancel individual subscriptions in the Subscription Centre.

6. Use of AI

To evaluate booking and newsletter emails, as well as for text suggestions and image generation in the accommodation section, we use AI models via the Lovable AI Gateway (including Google Gemini). Only the required content is transmitted; the models are not trained using your data.

7. Hosting and Data Processors

Operations, database, authentication and file storage run on the Lovable cloud infrastructure (Supabase). We send emails via the domain notify.next-plans.com. These service providers process data exclusively on our behalf.

8. Retention Period and Deletion

We store your data for as long as your account exists. You can delete individual slots, bookings and newsletters at any time. Upon request, we will delete your account along with all associated data.

9. Your Rights

You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to revoke any consent given at any time with effect for the future. To do so, please contact us at the address listed above.

10. Cookies and Local Storage

We only use technically necessary storage: the login session and local settings (e.g. selected cantons in the calendar). No tracking, no advertising cookies.

Status: Version 2026-07. In the event of significant changes, we will request your consent again.

← Back to homepage