Legal

Privacy Policy

TPConnects IRIS Flight Search Connector

Last updated: 2026-10-16

This policy explains what data the TPConnects IRIS Flight Search connector (the “Connector”) collects, how it is used and stored, who it is shared with, how long it is retained, and how to contact us. The Connector is operated by TPConnects.

The Connector is a remote Model Context Protocol (MCP) server that lets an AI assistant (such as Claude or ChatGPT) search flight availability and fares on your behalf. It is read-only: it searches and returns offers. It does not book, hold, pay for, or modify any reservation, and it does not request payment details or passenger identity documents.

Data we collect

1. Authentication data.

When you connect, you sign in through our identity provider (Amazon Cognito). We receive and process:

  • Your account identifier and the email address associated with your TPConnects account, as provided by the identity provider.
  • OAuth tokens issued for your session (access and refresh tokens).

We do not receive or store your password; authentication is handled entirely by the identity provider.

2. Search request data.

When you run a flight search, the Connector processes the search criteria provided through your AI assistant, such as:

  • Origin and destination airports, travel dates, trip type, cabin, passenger counts (adults/children/infants), currency, and stop/supplier filters.

These are travel search criteria. The Connector does notrequest or require passenger names, dates of birth, contact details, government identifiers, or payment information, because it performs search only — not booking.

3. Operational data.

For reliability and security we may process limited request metadata (timestamps, endpoint, status, correlation identifiers) at the server. Full request/response payload logging is disabled by default and is used only transiently for diagnostics when explicitly enabled by an operator.

How we use data

  • To authenticate you and authorize access to the search tool.
  • To perform the flight search you request against the TPConnects IRIS Express API and return the results to your AI assistant.
  • To operate, secure, debug, and improve the service.

We do not use your data for advertising, and we do not sell it.

How data is stored

  • OAuth tokens are held only for the duration of your session and are not persisted to long-term storage by the Connector beyond what is needed to maintain the session.
  • Search criteria are processed in memory to fulfil each request and are not retained by the Connector as a user profile.
  • Operational data, where retained, is stored on infrastructure controlled by TPConnects.

Third-party sharing

To provide the service, data is shared with:

  • Amazon Web Services (Amazon Cognito) — identity and OAuth token issuance.
  • TPConnects IRIS Express API— the flight-shopping backend that returns availability and fares; your search criteria are sent to it to obtain results.
  • Your AI assistant provider(e.g. Anthropic for Claude, OpenAI for ChatGPT) — the assistant transmits your requests to the Connector and displays the results; their handling is governed by their own privacy policies.

We do not share your data with any other third parties except as required by law.

Data retention

  • Session tokens: retained only for the active session; expired tokens are discarded.
  • Search criteria: not retained as a profile; processed per request.
  • Operational data: retained for a limited period for security and debugging, then deleted.

Your choices

  • You can disconnect the Connector at any time from your AI assistant's connector settings, which ends its access to your account.
  • For questions about your data or to make a data request, contact us below.

Security

  • Access to the search tool requires OAuth authentication; unauthenticated requests are rejected.
  • All traffic is served over HTTPS.
  • Error responses are sanitized so internal details are not exposed to clients.

Contact

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.