Providers & data sharing

Base44

Hosting, authentication, database and file infrastructure

Data involved: Account records, profile and trip data, social content, uploaded media, app settings, support requests and other information stored by Gather.

Base44 operates the managed backend and storage infrastructure used by Gather, including private saved assistant chats. Its AI service and model providers process consented assistant messages and limited context when direct OpenAI streaming is not configured.

Duffel

Flight search, airline offers and booking infrastructure

Data involved: Airport search terms, origins, destinations, travel dates, traveler details required for an airline order, selected services, and booking identifiers when a Duffel flow is used.

Gather supports Duffel test or live inventory according to the backend access token and verifies that offers and orders match that mode. The current Duffel Card path charges only the provider checkout amount for the airline fare and selected airline services; Gather's separate booking-fee preview is not collected through this route. Live transactions are identified before purchase and are subject to the applicable airline/supplier rules.

Square

Legacy sandbox payment testing

Data involved: Payment amount, currency, order/payment identifiers and the information required by the sandbox flow.

Gather's current Square implementation is sandbox-only and refuses a live Square account for simulated fares. It is not an approved production half of Gather's 50/50 payment-method plan, and no user should treat a sandbox result as a real charge.

Stripe Connect

Professional payout onboarding and payout delivery

Data involved: Professional payout-provider account identifier, payout amount/currency, payout status, and identity/tax/bank information entered directly into Stripe's hosted onboarding when Professional payouts are configured.

Gather stores the Stripe connected-account identifier and high-level requirement/readiness states. Bank-account numbers and tax identifiers are entered with Stripe rather than stored in the Gather Professional workspace. Live payouts remain disabled unless Gather explicitly enables the backend live-payout flag.

Apple Push Notification service (APNs)

iPhone/iPad push delivery

Data involved: Device push token, app bundle information and the notification content needed to deliver enabled alerts.

Users can control optional alert categories in Gather Settings. Essential booked-flight changes remain transactional.

Apple WeatherKit

Primary weather forecasts

Data involved: Destination coordinates, trip date and the destination timezone derived from coordinates when weather intelligence is available.

Gather prefers Apple WeatherKit when configured. Traveler identity, passenger profile and payment details are not needed for the weather request.

Open-Meteo

Weather forecast fallback

Data involved: Destination coordinates and trip date when WeatherKit is not configured or a fallback is needed.

Traveler identity, passenger profile and payment details are not needed for the weather request.

Photon / OpenStreetMap

City location search

Data involved: The city/location text entered into a location search.

Gather uses this source for public geographic search results, not for ad tracking.

OurAirports public dataset

Airport-search fallback data

Data involved: No traveler identity is sent to the public airport dataset. Gather loads public airport reference data and matches searches against it.

OpenAI

CEO/admin intelligence and traveler-facing Gather Intelligence assistant

Data involved: For the traveler-facing assistant, after explicit consent, Gather can send the traveler’s message, scoped history and planning notes from that private conversation, its visible context, explicitly remembered preferences, and only the selected authorized Trip Room or personal booking snapshot. Linking a trip does not share private chat history with its members. The assistant is designed not to send payment details, passenger booking profiles, passport information, Known Traveler Numbers, Redress Numbers, direct messages or the traveler's private friend list.

The assistant records the current disclosure version on the traveler profile and can be turned off from the assistant’s AI privacy control. Direct streaming uses a server-side OpenAI key and requests store:false. Saved chats remain in Gather until deleted individually or through account deletion; turning off AI access does not delete them. Provider-controlled retention still follows the provider’s policies. Gather's separate CEO/admin intelligence continues to use aggregate product, SEO and reliability information.

Google Search Console

Internal SEO performance data

Data involved: Verified-site search performance data for Gather's admin intelligence tools.

This is an administrative integration and is not used to read a traveler's Google account or personal trip information.