Keytours Vacations AI Assistant & MCP Integration Privacy Notice
Last updated: November 6, 2026
Keytours International, Inc. ("Keytours Vacations," "Keytours," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, share, store, and protect information when you access Keytours travel services through third-party AI assistants, including ChatGPT, Claude, and other compatible AI platforms, using the Keytours Model Context Protocol (MCP) server or Keytours Travel Planner plugin (collectively, the "Integration").
This notice supplements our Privacy Policy, which continues to govern your Keytours account, travel reservations, and related services. If the policies address the same processing activity, they should be read together, subject to applicable law.
1. Scope of the Integration
The Keytours Integration enables supported AI assistants to help you:
- Discover destinations, hotels, flights, cruises, tours, and other travel services.
- Search availability and obtain current pricing.
- Design and customize personalized travel itineraries.
- Organize and manage selected travel services.
- Review itineraries and reservation information.
- Initiate and complete supported reservations with your authorization.
The Integration communicates with Keytours through our secure MCP server at https://mcp.keytours.com.
Your conversations with an AI assistant are governed by that assistant provider's privacy policies and terms. Keytours does not automatically receive your entire AI conversation history. We receive information included in the specific requests submitted to our Integration, which may contain information from your conversation relevant to the travel service requested.
2. Guest Access and Account Authentication
You may search travel services, review availability, compare pricing, and prepare travel itineraries without signing in to a Keytours account.
To create or manage reservations requiring authenticated access, you must securely sign in through Keytours' authorized authentication process.
Authentication uses OAuth-based authorization. Your Keytours password is entered through Keytours' secure sign-in process and is not provided to the AI assistant through MCP tools.
Following successful authentication, the Integration receives limited, time-bound authorization credentials that permit approved actions within the scope of your account permissions.
You may disconnect the Integration through your AI assistant's account settings. You may also contact Keytours to request revocation of authorization.
Disconnecting an Integration does not automatically cancel confirmed reservations, remove your Keytours account, or delete records that must be retained for legal or operational reasons.
3. Information We Collect
We collect only the information reasonably necessary to provide the travel services requested through the Integration.
Depending on the features used, this may include:
Travel search information
- Destinations and travel dates.
- Number of travelers and children's ages where relevant to pricing.
- Hotel preferences, travel categories, and requested services.
- Travel preferences directly relevant to arranging your trip.
Trip planning information
- Selected transportation, accommodation, and activities.
- Travel itinerary details and service preferences.
- Trip identifiers and itinerary modifications.
Reservation and contact information
- Traveler names and required contact information.
- Information necessary to complete reservations.
- Account identifiers and booking references.
- Additional traveler details only when necessary for a requested reservation and permitted by the applicable AI platform.
Technical and security information
- Request timestamps and service operations.
- Technical diagnostic information.
- Authentication and account-reference information.
- Security events and error records.
We do not intentionally request your entire AI conversation history, unrelated personal information, passwords, or payment card details through the Integration.
Please avoid submitting unnecessary sensitive personal information through your AI assistant.
4. Payment Information and Reservations
The Keytours Integration is not designed to collect payment card numbers, security codes, or other payment credentials through AI conversations or MCP tool requests.
When payment is required, you will be directed to Keytours' secure payment environment, including KeyPal, or another approved payment channel.
Before completing a reservation, you should review the relevant itinerary, pricing, traveler information, booking conditions, and cancellation terms.
Reservations may involve contractual or financial obligations. Any reservation action must be authorized in accordance with the supported Integration's functionality and applicable booking requirements.
Keytours processes payments and reservation records in accordance with its main Privacy Policy and applicable booking terms.
5. Information Shared with AI Assistants
To fulfill your requests, Keytours returns relevant information to the connected AI assistant.
Depending on the action, this may include:
- Available travel services and pricing.
- Hotel, cruise, flight, tour, and activity information.
- Selected itinerary details.
- Reservation status and booking references.
- Trip links and information needed to display or manage your booking.
We aim to limit responses to information necessary for the requested action.
The AI assistant provider independently processes information received through its platform under its own privacy policy, terms, and data-handling practices.
6. How We Use Your Information
Keytours processes information obtained through the Integration to:
- Provide travel searches, availability, and prices.
- Create, customize, and manage travel itineraries.
- Process authorized reservations and related travel services.
- Communicate essential booking and service information.
- Provide customer support and resolve service issues.
- Maintain security, detect misuse, and troubleshoot technical problems.
- Comply with applicable legal, regulatory, accounting, and tax obligations.
Marketing and promotional communications
Information collected solely through Integration requests is used primarily to fulfill the travel services you request.
Keytours may send promotional communications when it has a separate lawful basis to do so, including any consent required by applicable law and platform policies.
You may unsubscribe from promotional emails using the link provided in those communications or the available preferences in your Keytours account.
We do not use AI conversation content received through the Integration for unrelated advertising or behavioral profiling without the disclosures, permissions, and controls required by applicable law and platform policies.
7. Sharing Information with Third Parties
We may share information with third parties when reasonably necessary for the requested travel services or as otherwise permitted by applicable law.
These parties may include:
Travel suppliers: Hotels, airlines, cruise operators, transportation providers, tour operators, and other suppliers necessary to arrange or deliver selected travel services.
Technology and service providers: Organizations providing secure hosting, infrastructure, authentication, booking support, technical operations, and customer support services.
Connected AI assistant providers: Information returned through the Integration is processed by the platform through which you initiated your request.
Affiliates and business partners: Where relevant to providing your travel services and consistent with our Privacy Policy.
Legal authorities: When disclosure is necessary to comply with applicable laws, enforce contractual rights, or protect the security of customers and our services.
We limit information sharing to what is reasonably necessary for the relevant purpose and applicable legal requirements.
8. Data Retention and Deletion
We retain information for the periods necessary to provide requested services, operate and secure the Integration, and satisfy applicable obligations.
Technical logs
Technical logs may be retained for up to 12 months before deletion, subject to applicable legal requirements and authorized security investigations. Personal information within these logs should be minimized wherever practical.
Unbooked guest itineraries
Travel itineraries created without signing in to a Keytours account are automatically deleted after 15 days.
Authenticated account itineraries
Unbooked itineraries associated with a signed-in Keytours account remain available until deleted by the account holder or otherwise removed in accordance with applicable retention policies.
Where supported, you may request deletion of an unbooked itinerary through the connected AI assistant or directly through Keytours.
Confirmed reservations
Reservation records are retained as necessary to fulfill travel services, support customers, maintain accounting records, resolve disputes, and meet applicable legal and regulatory obligations.
Deleting a trip or disconnecting an Integration does not necessarily remove related reservation records or technical logs that are retained for legitimate purposes.
9. Data Security
Keytours uses technical and organizational safeguards designed to protect personal information.
These include encrypted communications through HTTPS/TLS, authenticated account access, authorization controls, and technical monitoring intended to prevent unauthorized access or misuse.
Authorized Integration requests are restricted according to the applicable account permissions.
Although we take reasonable steps to protect information, no internet-based service or electronic storage system can guarantee absolute security.
10. International Data Transfers
Keytours operates from the United States and processes information in connection with its travel services.
Because travel arrangements frequently involve international destinations, relevant traveler and reservation information may be transmitted to suppliers in other countries.
Where required by applicable law, Keytours uses appropriate safeguards for international transfers.
Information independently collected or processed by the AI assistant provider is governed by that provider's applicable privacy practices.
11. Your Privacy Rights and Choices
Subject to applicable laws, you may have rights to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of eligible personal information.
- Object to or restrict certain processing activities.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Opt out of eligible marketing communications.
- Exercise additional privacy rights provided by applicable regional laws.
Residents of certain jurisdictions, including California and the European Economic Area, may have additional rights.
You may also disconnect the Keytours Integration at any time through the relevant AI platform.
To submit a privacy request, contact info@keytours.com. We may need to verify your identity before processing certain requests.
Where applicable, you may lodge a complaint with the relevant data protection authority.
12. Children's Privacy
The Keytours Integration is intended for use by adults who are authorized to arrange travel services.
The Integration is not directed toward children, and Keytours does not knowingly solicit personal information directly from children through AI assistants.
For family travel, an authorized adult may provide limited information about accompanying children, such as ages necessary for pricing or traveler names required for reservations, where the AI platform permits such information to be processed.
We seek to minimize collection of children's information and apply applicable privacy protections and platform requirements.
13. Changes to This Notice
We may update this Privacy Notice periodically to reflect changes in our travel services, Integration capabilities, technology, legal requirements, or privacy practices.
Updates will be published with a revised "Last updated" date.
Where required by law, we will provide additional notice of material changes.
14. Contact Information
Keytours International, Inc.
11096 Lee Hwy., Suite B-104
Fairfax, VA 22030
United States
Email: info@keytours.com
Phone: +1 (703) 591-3550
Website: https://www.keytours.com
Contact: https://www.keytours.com/sp/contact-us
General Privacy Policy: https://www.keytours.com/sp/privacy-policy
MCP Server: https://mcp.keytours.com