Privacy Policy — tripcoord

1. Information We Collect

When you use tripcoord, we may collect the following information:

Account data: Name, email address, and password (hashed) when you create an account
Trip data: Destinations, dates, group details, itineraries, and preferences you enter
Usage data: Pages visited, features used, and interactions with the Service
Photos: Images you upload to Trip Story or other features
Saved links: URLs you paste to your wishlist (TripAdvisor, blog posts, etc.) — we fetch the page's public Open Graph metadata to render a preview card; we do not store or proxy the URL's content beyond title, description, and image URL
Likes & engagement: When you opt your itinerary into the community feed, likes on the itinerary or its activities are visible to anyone viewing it
Payment data: Billing information handled securely by Stripe — we do not store card numbers

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Personalise AI-generated itineraries and recommendations
Process payments and manage subscriptions
Send transactional emails (trip invites, confirmations, account alerts)
Respond to support requests and communicate about the Service
Detect and prevent fraud or abuse

3. Data Sharing

We do not sell your personal data. We may share data with:

Service providers: Supabase (database/auth), Stripe (payments), SendGrid (email), Twilio (SMS), Vercel (hosting) — each bound by data-processing agreements
AI providers: Anthropic (Claude) to generate itinerary content — prompts may include trip details but not payment or identity data
Trip members: Information you choose to share within your trip group is visible to that group
The community feed (opt-in): If you toggle "Share publicly to community" on your itinerary, the itinerary contents — destination, days, activities, organizer name, photo — become viewable by anyone at /community/[your-trip-id] and may be forked into other users' own trips. Group chat, expenses, and member roster stay private regardless. You can turn this off at any time from the itinerary header.
Analytics: Vercel Analytics + Speed Insights collect anonymized page-view counts and Web Vitals. No personal identifiers are sent.
Error reporting: If you encounter a bug, anonymized stack traces and the action that triggered the error may be sent to our error monitoring provider (Sentry) so we can fix it.
Photo attribution: Cover photos sourced from Unsplash include the photographer's public name and profile link, per Unsplash's API terms.
Legal requirements: If required by law or to protect our rights

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or billing purposes.

5. Cookies & Tracking

tripcoord uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. We do not use third-party advertising cookies. You can control cookie settings through your browser, but disabling cookies may affect Service functionality.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Data portability

To exercise these rights, email us at hello@tripcoord.ai.

7. Security

We use industry-standard security measures, including encryption in transit (TLS) and at rest, to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

8. Children

tripcoord is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us to have it removed.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.

10. Contact

Questions or concerns about this policy? Reach us at hello@tripcoord.ai.