Introduction

Welcome to TravPair ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our travel planning platform and services.

By using TravPair, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

1. Personal Information You Provide

• Account Information: Name, email address, password, profile photo
• Profile Information: Bio, location, travel preferences
• Trip Information: Destinations, dates, activities, budgets, accommodation details
• Payment Information: Processed securely through Stripe (we do not store full credit card details)
• Communications: Messages, comments, feedback you send through our platform

2. Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General location based on IP address (not precise GPS)
• Cookies and Tracking: See our Cookie Policy for details

3. Information from Third Parties

• OAuth Providers: When you sign in with Google, we receive your name, email, and profile photo
• Payment Processors: Transaction details from Stripe
• Analytics Services: Aggregated usage data (if you consent to analytics cookies)

How We Use Your Information

We use your information for the following purposes:

• Provide Services: Create and manage your account, trips, and collaboration features
• Process Payments: Handle subscription payments and billing
• Communication: Send service updates, notifications, and respond to inquiries
• Improve Services: Analyze usage patterns to enhance features and user experience
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and enforce our terms
• Marketing: Send promotional content (only if you opt-in)

How We Share Your Information

We may share your information in the following situations:

With Your Consent

When you share trips publicly or invite collaborators, that information is visible to others as you specify.

Service Providers

• Hosting: Vercel (hosting and CDN services)
• Database: Supabase (database and authentication)
• Payments: Stripe (payment processing)
• Email: Resend (transactional emails)
• Analytics: Google Analytics (if you consent)
• Error Tracking: Sentry (application monitoring)

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

Business Transfers

If we are involved in a merger, acquisition, or sale, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure password hashing (bcrypt)
• Regular backups and disaster recovery

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

CCPA Rights (California Users)

• Know what personal information we collect
• Know if we sell or share personal information
• Access your personal information
• Delete your personal information
• Non-discrimination for exercising rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at: support@travpair.com

You can also manage many of these preferences directly in your account settings.

Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you signed in
• Remember your preferences
• Analyze how you use our services
• Provide personalized content (if you consent)

You can control cookie preferences through our cookie consent banner. For more information, see our Cookie Policy.

Children's Privacy

TravPair is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

Our primary data processing occurs in the United Kingdom. For users located outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

Your continued use of TravPair after changes become effective constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@travpair.com

For GDPR-related inquiries, you may also contact your local data protection authority.