Privacy Policy

1. Information We Collect

When you use Trips, we collect the following information:

• Account Information: Email address, password (encrypted), and account preferences
• Trip Data: Trip names, travel events, dates, locations, and confirmation numbers
• Email Content: Travel confirmation emails you forward to us (encrypted and automatically deleted after 30 days)
• Usage Data: How you interact with our service, pages visited, and features used

2. How We Use Your Information

We use your information to:

• Provide and maintain our travel itinerary mapping service
• Process your travel confirmation emails using AI to extract event details
• Convert location names to map coordinates for visualization
• Improve our service and develop new features
• Communicate with you about your account and our service

3. Data Security

We take data security seriously:

• All email content is encrypted in our database
• Passwords are hashed using industry-standard encryption
• All connections use HTTPS encryption
• Email content is automatically deleted after 30 days
• Only essential staff have access to user data

4. Third-Party Services

We use the following third-party services:

• Google Gemini AI: For parsing travel confirmation emails
• OpenStreetMap/Nominatim: For geocoding and map tiles
• MailerSend: For receiving and sending emails

These services have their own privacy policies governing how they handle data.

5. Your Rights (GDPR Compliance)

You have the right to:

• Access: Export all your data in JSON format
• Deletion: Delete your account and all associated data
• Correction: Update your trips and events at any time
• Portability: Download your data for use elsewhere

6. Data Retention

• Trip and event data: Kept until you delete it or your account
• Email content: Automatically deleted after 30 days
• Anonymous trips: Deleted after 7 days of inactivity
• Account data: Deleted immediately when you delete your account

7. Cookies

We use essential cookies only:

• Session cookies to keep you logged in
• CSRF tokens for security
• No tracking or advertising cookies

8. Children's Privacy

Trips is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy.

10. Contact Us

If you have questions about this privacy policy or your data, please contact us at:

Email: privacy@joelgaff.com