Privacy Policy
Waypoint · Last updated 27 October 2026
What Waypoint is
Waypoint is a private customer-relationship tool built and used by one person, Vishal Mehra, to manage his own travel-sales enquiries. It is not offered to the public, and only the owner's own Google accounts (vishal@vishalmehra.com and mehravishal@gmail.com) can sign in.
What Google data Waypoint accesses, and why
- Your Google email address (sign-in): to confirm that the person signing in is the owner.
- Read access to Gmail (gmail.readonly): to read incoming and outgoing messages in the connected inboxes so that new travel enquiries can be spotted, replies can be matched to the right deal, and follow-up emails can be stopped when the other person replies.
- Send access to Gmail (gmail.send): to send follow-up emails that the owner has written and chosen to send, from the owner's own address.
Waypoint uses this access only to provide these features to the owner. It does not use Google data for advertising, and it does not sell or share it.
Where the data is stored
Email content and contact details are kept in a private database on a server controlled by the owner. They are not placed in any public location and are visible only to the owner after signing in.
Emails sent through Waypoint
Follow-up emails sent through Waypoint contain a very small image. When an email is opened, the image tells Waypoint that it was opened and when, so the owner can see whether a message was seen. Links in these emails pass through Waypoint's own address before taking the reader to the page they asked for, so the owner can see which links were clicked and when. For a click, an approximate location (country, region and city) is worked out from the visitor's internet address using an offline database, and only that approximate place is kept; the internet address itself is not stored and is not sent to any outside service. Locations are rough and sometimes wrong. Each email also ends with a line explaining that the recipient can reply "stop" to receive no further follow-ups, and Waypoint then stops. Waypoint keeps the recipient's name and email address, and the messages exchanged with them, only to run the owner's own correspondence. Anyone who would like their details removed can write to the contact address below.
Third-party processing
The text of incoming and outgoing emails is sent to Anthropic's Claude API solely to decide whether a message is a travel enquiry and to extract details such as destination, dates and quoted amounts. It is not used for any other purpose.
Google API Services User Data Policy
Waypoint's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Keeping and deleting data
Data stays in the owner's database until the owner deletes it. Access can be withdrawn at any time at myaccount.google.com/permissions, and Waypoint then stops reading and sending mail.
Contact
Vishal Mehra · vishal@vishalmehra.com