Privacy Policy

1. What We Collect

We collect your name, email address, and profile picture when you sign in. We store the trip data you create: destinations, dates, expense entries, and the places you pin to them (a hotel, a restaurant, a station or a spot you drop on the map, with its address and coordinates). A trip you share by link is shown as you planned it, the places you stayed included, because that is what someone reading it is there to see; your booking links are never shown and never copied. A trip with a few planned days is also listed in the community automatically, with the same rule and with its dates shifted, and you can hide it from the community at any time from your trips list. If you press the my-location button on a map, your browser shares your position only to center that map; we never store or send it. Payment details are handled entirely by Lemon Squeezy; we only receive what you bought and the receipt, never your card number. We also record how the product is used (pages visited, key actions, coarse country, city and device type) to improve Trip Budget; see Cookies below. When you ask for an email sign-in link, Vercel BotID checks signals from your browser to tell a person from a script, and we record only whether the request was flagged, never who sent it. If you post on the suggestions and bug reports board, we store what you write, any screenshot you paste into it, your comments and your votes.

2. How We Use It

We use your data to provide the service, authenticate your account, sync your trips, process payments, and send transactional emails (sign-in links, receipts). Our team may also email you directly, for example to help with a problem on your account, and keeps a copy of each message it sends. We do not use your data for advertising and we never sell it.

3. Shared Trips and Public Posts

When you enable sharing for a trip, the itinerary becomes publicly visible. Your name and email are never shown on shared trips. You can turn off sharing at any time, which immediately removes public access.

Suggestions, bug reports and comments on the board at /changelog/suggestions are public and can be indexed by search engines. They show your first name only, never your full name or email, and screenshots you paste are published with the post. You can delete your own posts and comments at any time. Open posts that get no votes or comments in 60 days are deleted automatically.

4. Third Parties

We share data only with the services required to run Trip Budget: Lemon Squeezy for payments, Google for sign-in, maps and the city and place search (what you type into a place search is sent to Google to find matches), Supabase for database hosting, Vercel for hosting and the bot check on sign-in links, Resend for email delivery, and OpenAI for AI trip generation. When you use AI trip generation, the inputs you provide (destination, dates, budget tier, interests) are sent to OpenAI to produce the itinerary. No one else.

5. Cookies

We use a session cookie to keep you signed in, and one analytics cookie of our own that holds a random ID for 30 days so a return visit counts once. It records which pages you open and which key actions you take (like creating a trip or starting a checkout), on our own servers. No third-party analytics script, no advertising cookies, and never your trip names, prices, email or IP address. Your display currency preference is saved to your browser's localStorage.

6. Security & Retention

All data is transmitted over HTTPS. Your data is kept while your account is active. You can delete your account yourself at any time from the account menu in the dashboard, and it happens immediately: your profile, sign-in details, trips, community listings, share links, comments, saved trips, purchase history and your posts, comments and votes on the suggestions board (along with other people's votes and comments on your posts) are erased. We also keep a one-way, keyed code derived from your email address, written when you sign up or sign in and not only after you delete your account, so the free first trip is not granted twice to the same person; it cannot be turned back into your email address, and we hold it on the basis of our legitimate interest in preventing abuse of the free trip. Error logs we keep to diagnose faults are stripped of your email and account reference rather than deleted, and so are product analytics events, which stay only as anonymous counts. Page views are deleted after 180 days and other analytics events after two years. Invoice records held by our payment provider, Lemon Squeezy, are kept as tax and accounting law requires, and database backups roll off within 30 days.

7. Your Rights

You can access, correct, or export your data at any time, and delete your account yourself from the account menu in the dashboard, without contacting us. For anything else, or if you cannot reach the dashboard, email us at support@tripbudget.io.

8. Children

Trip Budget is not intended for children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

9. Changes

We may update this policy and will notify you by email for material changes. Continued use after changes take effect means you accept the updated policy.

10. Contact

Questions about your privacy? support@tripbudget.io