Privacy Policy

This policy explains what data TripPlano collects, why, and the choices you have. We don't sell your personal data.

What we collect

• Account: your name, email, a hashed password or Google sign-in ID, and your plan.
• Trips: the destination, dates, preferences and notes you enter, the plans we generate, your edits, and images you upload.
• Billing: your subscription status and Creem customer ID. Card details are handled by Creem and never reach our servers.
• Technical: IP address (for security and rate limiting), browser type, and anonymous usage analytics.

Why we use it

• To create, store and show your trips, and to run your account.
• To process payments and send receipts, account and security emails.
• To prevent abuse and keep the service secure.
• To understand which features are used so we can improve them.

Who processes it

We share only what each service needs to do its job:

• OpenAI: writes itineraries from your trip details and notes.
• Google Maps Platform: place search, details, photos and opening hours.
• Wikipedia / Wikimedia, Unsplash, Pexels: place and cover photos.
• Jawg Maps and OpenStreetMap: the map background; your browser loads map images from Jawg.
• Photon by komoot: destination suggestions; what you type in the destination field is sent to it.
• Creem: payments, invoices and tax, as merchant of record.
• Vercel and Hostinger: hosting for the website, API and database.
• Google Analytics and Vercel Speed Insights: usage and performance analytics.
• Google: sign-in, if you choose “Continue with Google”.

Cookies

• auth_token: keeps you signed in (httpOnly).
• guest_trip_token: lets you see a trip you made without an account, for 30 days.
• Google Analytics cookies: anonymous usage statistics.

Sharing your trips

Trips are private by default. If you make a trip public or invite people by email, they can see that trip's plan, but not your account details.

How long we keep it

We keep your account and trips until you delete them or your account. Billing records are kept as long as tax law requires. Server logs are deleted after 14 days.

Your rights

You can access, correct, export or delete your data, and object to analytics. Email official@tripplano.com and we'll respond within 30 days. Deleting your account removes your trips and uploads.

Changes and contact

We'll post changes here and email you about significant ones. Questions: official@tripplano.com.