unPlan.es
Partner & Provider Brief · 2026
An end-to-end itinerary concierge

Real bookings, on a coherent day.

unPlan.es turns a budget, a style and a date range into a fully reserved day — morning to night, transit-aware, with timed-entry slots and bookings we handle for them (each with its real provider). Customers ride a 7-step wizard; partners get qualified, high-intent traffic and end-to-end fulfilment in 24 hours.

Domain
www.unplan.es
Stack
Vercel · Supabase · Stripe
Inventory adapters
15 live providers across 12 categories
Networks approved
Directo · Awin · Impact · TradeDoubler · Travelpayouts
Destinations live
78 cities · curated catalogue
Compliance
GDPR · LOPDGDD · PCI-SAQ A

A document for inventory providers, affiliate networks, and commercial partners — what we are, what we ship, how to connect.

unPlan.es
Partner & Provider Brief · 2026

Contents

Contents

What you will find inside this document.

unPlan.es
Partner & Provider Brief · 2026

What unPlan.es is

Section 1

Not a marketplace of loose activities. A planner that stitches a whole day — morning, lunch, afternoon, dinner, night — anchored to the real flight time, with transit checked against Google Maps, and timed-entry sessions stamped from each provider's catalogue.

Coherent

A full agenda, not a list

Six daily slots with two alternatives per slot, plus a "free time" opt-out. Arrival and return days adapt to the real landing/takeoff time, never promising a 13:30 welcome lunch when the plane lands at 16:00.

Real data

No synthetic fallback

When a provider is connected, the options shown are live inventory with EUR prices. If a category has no real resolver, it stays empty until we onboard one — we never invent.

Concierge

Real concierge, bookings with their provider

The customer doesn't book piece by piece. As intermediary by mandate, we hold inventory (Duffel hold orders, LiteAPI prebookId, Viator cartRef) and confirm in 24 h; each reservation is paid with its real provider and unplan charges only its management fee (not the merchant of record). Locators are delivered by email and push notification.

The customer journey, in seven steps

1
Plan type
Weekend · Trip · Local
2
Budget & dates
Travellers · nights
3
Style
10 styles
4
Origin
Places autocomplete
5
Recommendation
Destination + agenda
6
Your plan
Swap alternatives
7
Checkout
Stripe · 24 h fulfilment

The whole journey runs on a single serverless function (Vercel) with strict CSP, HSTS, and RLS on the Supabase database.

Why this beats a generic travel aggregator

unPlan.es
Partner & Provider Brief · 2026

For inventory providers

Section 2

If you supply flights, hotels, tickets, tours, restaurants or experiences, this is what we plug in, how, and what it costs you.

15
Live adapters in production
8
Affiliate programs monetised across 5 networks
78
Destinations in the live catalogue

Live coverage today

Category Providers Integration mode Status
Vuelos Aviasales · Duffel · Kiwi.com · LiteAPI Flights Aggregator · API E2E · Aggregator · API E2E Live
Trenes Rail Europe Aggregator Beta
Alojamiento LiteAPI Hotels API E2E Live
Actividades & tours Awin product feeds · Civitatis · Fever · GetYourGuide · Groupon · Klook · Tiqets · TradeDoubler product feeds · Viator Feed · Aggregator · Aggregator · Aggregator · Aggregator · Aggregator · Aggregator · Feed · API E2E Live
Museos & cultura Fever · Tiqets · Viator Aggregator · Aggregator · API E2E Live
Guías locales GuruWalk · Viator · WeGoTrip Aggregator · API E2E · Aggregator Live
Experiencias premium Tiqets Aggregator Live
Restaurantes Yelp Fusion Feed Beta
Vida nocturna Fever Aggregator Live
Conciertos Fever · Ticketmaster Aggregator · Aggregator Live
Plan gratuito OpenStreetMap POIs Feed Live

How we integrate — three ladders

Ladder 1

End-to-end API

Search → prebook → book → cancel under our serverless backend. The customer doesn't book piece by piece: we call your API with the deferred booking pattern and each reservation is paid with its real provider (unplan acts as intermediary by mandate and charges only its management fee, not the merchant of record). Used by Duffel, LiteAPI (Hotels + Flights), Viator Partner (gated).

Best for: direct revenue at wholesale + margin, no affiliate cookie loss.

Ladder 2

Product feed + deep-link

We ingest your Product Data Feed (Awin, TradeDoubler, Impact, Partnerize), apply our tagger + L2 cache, and surface options inside the agenda. Click-through to your checkout with the publisher / SID / CID pre-stamped.

Best for: brands with affiliate programs and CPA / CPL models.

Ladder 3

Search-only + redirect

Where there is no booking API, we use search APIs (Yelp, OSM Overpass) and redirect the customer with our partner ID. Inbound parser captures the locator email reply.

Best for: long-tail and complement coverage.

unPlan.es
Partner & Provider Brief · 2026

For affiliate networks & partners

Section 3

unPlan.es is a content-editorial publisher with a clear commercial model: every wizard journey ends in a plan we handle as intermediary by mandate (each booking with its real provider). The traffic we send is buying-intent traffic with a known budget and a confirmed itinerary, not curiosity clicks.

Traffic quality

High intent, attributable

We pre-stamp Publisher ID / SID / CID on every deep-link, drop the network cookie in the same window, and surface postback URLs (Impact, Partnerize) when available. Every redirect is a downstream search where we already know dates, party size, budget, and the alternative they considered.

Commercials

Concierge model, intermediary by mandate

No back-and-forth, no refund races. The customer doesn't book piece by piece: each reservation is paid with its real provider and unplan charges only its management fee (it is not the merchant of record for the bookings). We hold inventory for 24-72 h and reconcile manual + API bookings before the auto-confirm fires. If we cannot deliver, the system auto-refunds — the partner sees a clean cancellation, not a chargeback.

Brand fit

Luxury-light, travel content

Editorial tone, no pop-ups, no incentivised traffic, no coupon scraping. Inventory is shown side-by-side with cultural and gastronomic context. The brand reads as a concierge, not a comparison engine.

Geography

EU first, ES anchor

Spanish market with active EU expansion. Origin autocomplete uses Google Places (post-March-2025), and the wizard supports 10 styles across ES, FR, IT, PT, NL, DE, plus a curated Eastern-EU expansion (9 cities added 2026-05).

What we offer affiliate networks

"We never show a plan we cannot fulfil. The catalogue only names networks where we have an active partnership, and the operator never sees an option behind a channel that is not approved."   — catalogue policy enforced at runtime
unPlan.es
Partner & Provider Brief · 2026

Trust, tech, and operations

Section 4

A serious technical posture is not optional when you are calling other people's APIs with their reputation on the line. Here is the stack and what we do to protect it.

Stack

Serverless & auditable

  • Single Vercel serverless function (Go) — no CORS, one domain.
  • Supabase Postgres with strict RLS (deny anon / authenticated); service-role only on server.
  • Stripe Checkout, HMAC-verified webhooks, manual refund flow.
  • Cloudflare Email Routing + Worker for inbound parser (locator capture from confirmation emails).

Security

Encrypt-at-rest, audit log

  • AES-256-GCM with key versioning on locator codes, passport, DOB, nationality.
  • Webhook idempotency (durable table) — no double-charge on Stripe replays.
  • Body caps + Origin gating on every POST. Rate limiter per IP.
  • govulncheck + gosec + Dependabot on every PR; weekly re-scan of main.
  • Nightly orders backup to R2 / S3 SigV4 (ciphertext preserved).

Compliance

GDPR + LOPDGDD + PCI SAQ A

  • GDPR Article 15 (export) and Article 17 (erase) endpoints.
  • Five-year fiscal retention with PII blind-index for lawful search.
  • 2FA TOTP on the operator console, durable session tokens, full kill-switch.
  • Incident runbook in docs/runbooks/security-incident.md (T+0 / 15 m / 1 h / 24 h / 7 d).

Operations

Concierge orchestrator

  • Deferred E2E booking pattern — Duffel hold orders, LiteAPI prebookId, Viator cartRef.
  • Cron /api/cron/expire-holds every 5 min auto-refunds expired holds and notifies the customer.
  • Synthetic transaction monitor every 6 h: plan + health + Stripe test PI.
  • Slack ops channel for orders, bounces, refunds, breaker state.

Pricing & revenue model — what the customer sees

The customer pays the wholesale price as is. Our management fee is set to 0 % — unPlan.es revenue is the upstream affiliate / partner commission, net to the customer. The single optional line is the prepaid virtual card ("All-Inclusive"), capped at EUR 50 / person / day with a EUR 25 admin fee absorbed in the management line. Total fixed-fee ceiling: EUR 25 per plan.

Why this matters to a partner

unPlan.es
Partner & Provider Brief · 2026

Working with us

Section 5

There are three doors. Pick the one that fits and we will hand back a 1-page integration plan within 5 business days.

Door 1

Direct API partnership

If you operate a booking API (NDC, hotel content + book, ticketing reservation), we build the adapter in pkg/providers/, certify with your sandbox, and ship to production with our deferred-booking and idempotency-key patterns.

Timeline: typically 2–4 weeks per adapter, certification-bound.

Door 2

Affiliate / network

If you run a Product Data Feed or a Click + Postback program (Awin, TradeDoubler, Impact, Partnerize, Travelpayouts), share the FID / SID / publisher ID and we activate within the same week. We accept JSON, CSV, JSONL, and the new Awin Enhanced Feed v2.

Timeline: 1–7 days from credentials to first revenue.

Door 3

Co-branded campaign

Custom editorial integrations: branded styles in the wizard, curated city packages, B2B vouchers, gift cards through the prepaid virtual card line. Suited for travel boards, DMOs, hospitality groups, premium card programs.

Timeline: by campaign brief.

What we need from you to start

Talk to us

Commercial

partners@unplan.es

Sales, partnerships, co-marketing, affiliate onboarding, revenue share questions.

Technical

integrations@unplan.es

Adapter implementation, sandbox handoff, postback configuration, certification.