Outpass in ChatGPT & Claude

Privacy Policy for Outpass in ChatGPT & Claude

Last updated: October 17, 2026

This policy explains what data Outpass in ChatGPT and Outpass in Claude (together, the "AI apps") receive and how we handle it. The AI apps let you search Outpass adventures, departures, destinations and agencies from inside an AI assistant. They are run by Outpass (operated by Federico Rodriguez), "we" or "us" below.

This policy covers only the AI apps. The Outpass mobile app and the outpass.app website are covered by our general Privacy Policy.

1. The short version

  • There is no Outpass account or login in the AI apps, and we do not build a profile of you.
  • We receive the search request the assistant sends us (for example "trekking in Patagonia, 4–6 days, in March"), not your conversation.
  • We use technical data such as the IP address of the request only for security and rate limiting, and keep it in memory for a short time. Our hosting and monitoring logs may also record it (see section 4).
  • When you tap a contact button, you leave the assistant and talk directly with the agency. From then on, the agency's own policies apply.
  • The result cards set no cookies and run no analytics.

2. What the AI apps receive

The AI apps are a server that the assistant (ChatGPT or Claude) calls when it decides that Outpass can help with your request. You never send data to us directly; the assistant does, and only the following reaches us:

  • The tool request. One of four read-only tools (search adventures, get adventure details, explore destinations, get agency profile) and its parameters, which the assistant writes based on your conversation: free-text search terms (up to 200 characters, such as a place or activity), filters (country, region, difficulty, trip length, activity categories, departure dates, maximum price per person, sort order), the identifier of an adventure or agency from earlier results, and the language of the conversation (Spanish or English).
  • Technical data from the assistant. The network address (IP) of the request, which usually belongs to the assistant provider's servers rather than your device; the software name the assistant identifies itself with (for example its user agent); and, from ChatGPT, the interface language and an anonymous identifier that OpenAI generates for rate limiting (openai/subject). Claude does not send that identifier.

We do not receive your name, email address, phone number, your ChatGPT or Claude account details, your payment details, or the rest of your conversation. Please do not include personal or sensitive information in what you ask the assistant to search for.

3. How we use it

  • To answer the request. We forward the search terms and filters, or the adventure or agency identifier, to the Outpass API and return the results as cards. We do not forward your IP address, the anonymous identifier or the assistant's technical data to the API.
  • To show results in your language. The conversation language or the assistant's interface language decides whether cards appear in Spanish or English.
  • To credit the right assistant. Outpass links, such as "View on Outpass" and contact buttons that go through Outpass, carry a tag in the link that says which assistant they came from (ChatGPT, Claude or a generic "AI assistant"). The draft message itself does not name the assistant. To work this out we may remember, in memory only, which assistant last connected from a given IP address, for up to 6 hours.
  • Security and rate limiting. To prevent abuse we count requests per IP address and, when ChatGPT sends one, per anonymous identifier, in one-minute windows. These counters live only in the server's memory and are discarded after the window ends or when the server restarts.
  • Performance. Public results are cached in memory for up to 1 minute (searches), 5 minutes (adventure and agency details) and 10 minutes (featured lists), keyed by the search parameters.

We do not sell this data, use it for advertising, or combine it with an Outpass account.

4. What we log and for how long

  • AI app server. It does not record the content of tool requests in its logs. It logs startup information and technical errors. We do not turn on request or application logging in our hosting provider (Microsoft Azure App Service) for this server. Azure keeps only its own standard infrastructure and platform telemetry, under Microsoft's policies.
  • Outpass API. To understand which searches work and which return no results, the API logs the search text and filters it receives. Searches reach the API from our AI app server, not from your device, so your IP address is not part of them. Rolling log files are deleted after about 7 days. Warnings, such as searches with zero results, are also sent to our monitoring service (Azure Application Insights), where they are deleted after 30 days. Search requests are also kept in the API's audit log, which stores the request parameters, the time, and the address of our own AI app server. Audit records are deleted after 90 days.

5. Contacting an agency (handoff)

Adventure and agency cards include contact buttons such as "Contact the agency on WhatsApp", "Book on the agency's website" or "Email the agency", and a "View on Outpass" link. When you tap one, the assistant opens the link and you leave the conversation.

  • WhatsApp and email open with a draft message, in Spanish, such as "¡Hola! Vi «adventure name» en Outpass y quiero más información.", plus the departure date if you picked one. The message does not name the assistant you used. Nothing is sent until you send it, and you can edit it first.
  • What you send goes directly to the agency through WhatsApp or your email provider. Outpass is not part of that conversation and does not receive it. The agency's own privacy policy applies, as do the policies of WhatsApp or your email provider.
  • The agency's website is run by the agency, under its own policies.
  • Outpass links (outpass.app) include tags that identify the assistant (for example src=chatgpt), not you. The outpass.app website is covered by our general Privacy Policy and asks for your consent before using analytics cookies.
  • Click counting. Some contact buttons may go through an Outpass link (on api.outpass.app) that counts the click and then redirects you to the agency. For each click we store the adventure, agency, departure, contact channel, which assistant it came from, and the time. We do not store your IP address with that record. To avoid counting the same click twice, we keep a one-way hash of the IP address combined with the link for 5 minutes, and we use the IP address briefly to limit how many redirects one address can request per minute.

6. Cookies and the result cards

The cards you see in the assistant set no cookies, use no local storage and include no analytics or tracking. They do not make network requests of their own; data arrives through the assistant. Your device does load the photos in the cards: each photo is downloaded straight from Outpass's image storage (Azure Blob Storage, hosted on Microsoft Azure). Like any image request, that storage receives your device's IP address; the Outpass API does not.

7. Third parties

  • OpenAI (ChatGPT) and Anthropic (Claude) process your conversation, including what you write before and after using Outpass, under their own terms and privacy policies. We have no control over that processing.
  • Microsoft Azure hosts the AI app server, the Outpass API, our logs and our image storage.
  • Agencies, WhatsApp (Meta) and your email provider receive what you choose to send when you contact an agency.

Outpass is based in Uruguay, and our servers are hosted by Microsoft Azure in the United States, so data may be processed in countries other than your own. These transfers are covered by Microsoft's Data Protection Addendum, which includes standard contractual clauses.

8. Your choices and rights

You can stop using the AI apps at any time by disabling the Outpass app in ChatGPT or removing the Outpass connector in Claude. Because the AI apps have no accounts and keep no data linked to your identity, we usually cannot find records about a specific person. You can still write to us to ask what we hold, or to exercise any right you have under the data protection laws that apply to you (such as access, correction, deletion or objection): privacy@outpass.app.

9. Children

The AI apps are not directed at children. They are intended for users who are 18 or older, and only for those the assistant providers allow to use their services.

10. Changes to this policy

We will update this page when the AI apps change how they handle data, and change the "Last updated" date above. For significant changes we will also add a notice on this page.

11. Contact

Questions about this policy: privacy@outpass.app. Help with the AI apps: see Support. Our postal address is listed in the general Privacy Policy.