Privacy Notice
This Privacy Notice explains what personal information Triplanio (the “Service”) collects, why we collect it, how we use and share it, and what choices you have. The Service is operated by Triplanio (“we”, “us”, “our”), based in Madrid, Spain. By using the Service, you agree to the practices described here.
This Notice covers our role as the controller of the personal information that you and the people you invite to your trips enter into the Service. Where we use third-party providers (for example, our hosting platform or payment processor), they act as our processors except where otherwise stated.
1. Information We Collect
1.1 Account information
When you create an account, we collect basic identity information from the sign-in method you use, such as your email address, your name, and, where provided, a profile picture URL. We also store your in-app preferences (UI language, theme, email-notification settings, current subscription status and, for Pro subscribers, the subscription end date).
1.2 Trip content
We store the content you create in the Service, including trip titles, descriptions, dates, notes, city visits, hotels, transfers, activities (including times, locations, and addresses), documents you attach, budget categories and expenses (including amounts, currencies, and how a cost is split among members), hotel proposals, comments, and votes. This content is associated with the trip and is visible to the trip members in accordance with their role.
1.3 Collaboration and invitations
When you invite someone to a trip, we store the invitee’s email address, the display name you give them, who invited them, when they accepted, and their role and status. We also store the same information for “offline” placeholder members you add without an email. You should not add personal information about other people that they would not want stored in the Service.
1.4 Communications and notifications
We send transactional emails (for example, trip invitations, role changes, hotel-proposal updates, trip reminders), and we store records of those communications so we can support you and avoid duplicates. You can opt out of non-essential email notifications in your account settings; essential service emails (for example, security and account-status messages) cannot be turned off while you have an account.
1.5 Payment information
If you purchase a Pro plan, your payment is handled by Stripe, Inc. (“Stripe”). Stripe collects your payment-card details directly under its own privacy policy. We do not receive or store your full card number. From Stripe we receive a customer identifier, your billing email, the plan you purchased, the status of your subscription, and a record of relevant events (checkout completed, subscription created, updated, cancelled, payment failed, refunded). We use this information to grant or revoke your Pro entitlement and to support you.
1.6 Telegram integration (optional)
If you connect a Telegram chat to a trip, we store the Telegram chat ID associated with you and that trip, the integration’s “active” status, and the contents of trip notifications we send to that chat. The Telegram service itself is operated by a third party and processes messages under its own terms.
1.7 AI-planner inputs and outputs
When you use the AI trip planner, the text of your prompt, your prior conversation with the planner in the same session, the current draft trip, and your chosen response language are sent to a third-party large-language-model provider through our hosting platform. We store the resulting draft if you save it to a trip. Do not include in your AI prompts any sensitive personal data, yours or anyone else’s, that you do not want sent to the AI provider.
1.8 Location, mapping, and reference data
Place names and addresses you enter are sent to LocationIQ for geocoding, so we can resolve them to map locations. Maps themselves are rendered by Mapbox, which receives your IP address and map-usage metadata when a map loads. We also fetch city cover images and short descriptions from Wikipedia/Wikimedia, and currency exchange rates from the Frankfurter API for the trip budget. These third parties may receive your IP address and request metadata when their services are loaded by your browser.
1.9 Technical and usage data
When you access the Service, our hosting platform and infrastructure providers automatically receive technical information such as your IP address, browser type, device and operating-system information, language, time-zone, the pages and features you accessed, and the timestamps of those accesses. We use this information to operate, secure, and debug the Service.
We also run an aggregate visit counter (Vercel Web Analytics) on every page. It stores nothing on your device and does not build a profile of you; it produces anonymous totals such as page views and referrers. We rely on our legitimate interest in knowing whether the Service is reachable and used. You can object to this processing at any time by writing to support@triplanio.com.
Separately, we use Sentry to record diagnostic data when something goes wrong. Sentry captures a session replay only when an error occurs, with page content masked, and we rely on our legitimate interest in diagnosing and fixing faults.
1.10 Cookies and local storage
We use cookies and similar browser storage (including localStorage) that are strictly necessary to run the Service: keeping you signed in, remembering your interface preferences (such as language, theme, units and display choices), keeping certain in-app state between visits, protecting sign-in from abuse, and recording the cookie choice you make below. These do not require your consent.
With your consent we additionally use PostHog product analytics, which stores identifiers on your device (keys beginning ph_) so we can understand how the Service is used and measure our advertising. Nothing is stored and no analytics event is sent before you agree. You are asked on your first visit, and you can change or withdraw your answer at any time through “Cookie settings” in the site footer or in your account — withdrawal deletes those identifiers from your device, though it does not delete data already collected.
Some third-party components set or read their own storage when they load: Stripe when a payment form is shown, and Mapbox when a map is opened. We do not use third-party advertising cookies.
2. How We Use Your Information
We use the personal information described above to:
- Provide and maintain the Service, including authenticating you, displaying your trips, sharing trips with members you invite, and remembering your preferences.
- Process payments and manage Pro subscriptions through Stripe.
- Send transactional emails and, if you opt in, optional notifications such as trip reminders or Telegram messages.
- Generate AI trip suggestions in response to your prompts.
- Operate, monitor, secure, and improve the Service, including diagnosing problems, preventing abuse, and detecting fraud.
- Comply with applicable legal obligations and respond to lawful requests from public authorities.
- Enforce our Terms of Use and protect the rights, safety, and property of us, our users, and third parties.
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
- With other trip members. Information you enter in a trip is visible to the members of that trip in accordance with their role (owner, admin, viewer), including their names, emails, expenses, votes, and comments.
- Through public share links. If you generate a public read-only link for a trip, anyone who knows the link can view the read-only trip content (without member emails) until you revoke the link.
- With our service providers, who process information on our behalf under contractual confidentiality and security commitments. These include our application hosting and content delivery provider (Vercel, which also provides the aggregate visit counter), our database, authentication and file-storage provider (Supabase), our payment processor (Stripe), the workflow-automation service and third-party LLM providers used by the AI planner and the assistant, the email-delivery provider, our error-monitoring provider (Sentry), our product-analytics provider (PostHog, only if you consent to analytics cookies), our mapping and geocoding providers (Mapbox and LocationIQ), Wikipedia/Wikimedia, the Frankfurter exchange-rate service, and — if you choose to enable it — Telegram.
- With travel booking partners. When you open or follow a booking or activity link in the Service (for example to accommodation, activities or experiences), your browser contacts the relevant partner — currently Stay22, Viator and Tripster — which receives your IP address and the referring link, including an identifier that lets the partner attribute the visit to us.
- When required by law, including to comply with a subpoena or court order, to respond to a lawful government request, or to investigate suspected fraud, security, or abuse incidents.
- In connection with a corporate transaction such as a merger, acquisition, financing, or asset sale, where personal information may be transferred as part of the assets. We will use reasonable efforts to ensure that the recipient honours the commitments in this Notice.
4. International Data Transfers
The third-party providers we rely on operate globally and may process your information in countries other than the one in which you live, including countries that may have different data-protection laws. Where applicable, we rely on the safeguards offered by those providers (for example, standard contractual clauses or similar mechanisms) to protect international transfers.
5. Data Retention
We keep your personal information for as long as your account is active and for as long as we need it to provide the Service and to comply with our legal obligations. When you delete your account, we permanently delete the trips you own and the related child records (hotels, activities, transfers, city visits, budget categories and expenses, budget segment shares, documents, services, member rows, notifications addressed to you, and your subscription records) shortly after the deletion request, and we remove you as a member of any trips owned by other users.
Some information may be retained for a limited additional period in backups, security and abuse-prevention logs, and in records that we are required to keep for legal, accounting, or tax reasons (for example, Stripe transaction records). One-time Pro Trip purchases are recorded as informational entries even after account deletion, as they are not subject to ongoing billing.
An active recurring Stripe subscription (Pro Monthly or Pro Yearly) must be cancelled in the Stripe billing portal before account deletion; this prevents future billing for a deleted account.
6. Your Rights
Depending on the laws applicable to you, you may have the following rights regarding your personal information:
- Access — to ask whether we hold personal information about you and to receive a copy.
- Rectification — to ask us to correct inaccurate or incomplete information.
- Erasure — to ask us to delete your information, including by using the in-app account-deletion flow.
- Restriction or objection — to ask us to restrict or stop certain uses of your information.
- Portability — to receive your information in a structured, commonly used, machine-readable format, where this right applies.
- Withdraw consent — where we rely on your consent, to withdraw it at any time without affecting the lawfulness of earlier processing.
- Complaint — to lodge a complaint with the data-protection authority in your country, where applicable.
To exercise any of these rights, you can use the in-app settings (for example, the “Delete account” flow and the notification preferences) or contact us at info@triplanio.com. We may need to verify your identity before responding.
7. Security
We rely on our hosting platform and on commonly used industry safeguards — including TLS-encrypted transport, scoped database access, hashed/managed credentials at the identity provider, and server-side authorisation checks — to protect personal information. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. If you have reason to believe that your account or our Service has been compromised, please contact us at info@triplanio.com.
8. Children
The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe that a child has provided us with personal information, please contact us at info@triplanio.com and we will take steps to delete that information.
9. Third-Party Links and Content
Trips may contain links to third-party websites (for example, hotel booking pages, attractions, or maps). When you click such a link, you leave the Service and are subject to the destination website’s own terms and privacy policy. We are not responsible for the content or practices of third-party sites.
10. Changes to this Notice
We may update this Privacy Notice from time to time. The most current version will always be posted in the Service and the “Effective date” at the top will be updated. If a change is material, we will use reasonable efforts to give you notice through the Service or by email before it takes effect.
11. Contact
If you have questions about this Privacy Notice or about your personal information, please contact us at info@triplanio.com.