Privacy Policy

1. Information We Collect

When you use Trip OS, we collect the following information:

• Account information: Name, email address, and hashed password (for credential-based accounts) or OAuth profile data (for Google sign-in)
• Trip data: Trip details, itineraries, places, accommodations, transport, and all content you create within the Service
• Chat messages: Conversations with the AI advisor, including any images you upload
• Usage data: Basic server logs including timestamps, IP addresses, and request paths for operational purposes

2. How We Use Your Information

Your information is used to:

• Provide and operate the trip planning Service
• Generate AI-powered suggestions tailored to your trips
• Send transactional emails (verification, password reset)
• Maintain and improve Service reliability and performance

We do not sell your personal data to third parties. We do not use your trip data for advertising purposes.

3. AI Processing

Your trip data and chat messages are sent to third-party AI providers (such as Anthropic and Google) to generate planning suggestions. This data is processed according to the AI provider's data handling policies. We send only the minimum context needed to generate relevant suggestions. AI providers do not use your data for training their models.

4. Data Sharing

Your data may be shared in the following circumstances:

• Trip collaborators: Trip data is visible to all members you invite to a trip
• AI providers: As described in section 3, for generating suggestions
• Legal requirements: If required by law, court order, or governmental authority

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on secured infrastructure. Passwords are hashed using bcrypt. We use HTTPS for all data transmission. While we implement reasonable security measures, no system is completely secure, especially during our pre-release period.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Some data may be retained in backups for a limited period.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your trip data

To exercise these rights, please contact us through the Service.

8. Cookies & Local Storage

Trip OS uses essential cookies for authentication sessions and localStorage for user preferences (e.g., dismissing notifications). We do not use tracking cookies or third-party analytics.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance.