Privacy Policy
Last updated: June 2026 · DRAFT
1. Who We Are
TRVL (“we”, “us”, or “our”) operates the TRVL trip-planning platform at [trvl.app — PLACEHOLDER]. This policy explains how we collect, use, and protect your personal information.
2. Information We Collect
Account data
- Name and email address (required to create an account)
- Password (stored as a secure hash — we never see your plaintext password)
Travel preferences
- Home airport(s) and origin city
- Dietary needs and mobility/accessibility requirements
- Trip history: destinations visited, budgets, travel style
- Discover swipes (used to build your Travel Genome)
- Traveler count and car availability preferences
Payment data
Subscription payments are processed by Stripe. We do not store your card number or full payment details — Stripe handles all payment processing. We receive a Stripe customer ID and subscription status.
Usage data
- Trip itineraries and items you generate, view, or book
- Concierge chat messages (used to improve your trip and for context)
- Approximate location (inferred from home airport, not GPS tracking)
3. How We Use Your Data
- To generate personalised trip itineraries via AI
- To show relevant flight and hotel prices
- To manage your account and subscription
- To send transactional emails (booking confirmations, password reset)
- To improve our AI recommendations over time
- To comply with legal obligations
We do not sell your personal data to third parties.
4. Third-Party Services
We share data with the following service providers as necessary to operate TRVL:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication and database | Email, account data, trip data |
| Stripe | Payment processing | Email, billing details |
| Anthropic | AI itinerary generation (Claude) | Trip details, preferences, chat messages |
| Places / Maps / Distance Matrix | Search queries, city names | |
| Travelpayouts / Aviasales | Flight price data | Route, dates |
| Booking.com | Hotel affiliate links | Search parameters |
| Resend | Transactional email | Email address |
| Unsplash | Destination photos | Search queries only |
5. Data Retention
We retain your account and trip data for as long as your account is active. You may delete your account at any time from your profile settings, which will permanently remove your account data and trip history. [PLACEHOLDER — specify backup retention period after attorney review.]
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Data portability (receive your data in a machine-readable format)
- Object to or restrict processing of your data
- Withdraw consent at any time (where processing is consent-based)
To exercise any of these rights, contact us at [privacy@trvl.app — PLACEHOLDER].
[PLACEHOLDER — GDPR / CCPA / other jurisdiction-specific rights clauses to be added by attorney.]
7. Cookies
TRVL uses essential cookies for authentication and session management (via Supabase). We do not currently use third-party advertising or tracking cookies. [PLACEHOLDER — add cookie banner if analytics cookies are introduced.]
8. Children
TRVL is not directed at children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice before they take effect.
10. Contact
Privacy questions or data requests: [privacy@trvl.app — PLACEHOLDER]
[PLACEHOLDER — registered address / DPO contact if required by GDPR.]