Privacy policy

Who looks after your data

The data controller is the founder of Trip&Go, who publishes the service. For any question about your data or to exercise your rights, write to support@tripandgo.co.

What Trip&Go keeps

Your account: your email address and, if you sign in with Google, your name and profile photo, nothing else from your Google account.

Your trips: city, dates, answers to the questionnaire (pace, interests, budget, diet, mobility), your accommodation address if you give it, itineraries, and what you add: bookings, packing, expenses, journal notes and photos, Spots and the video links you import.

Your companions: the first name and photo shown in the trips you share. Your plan: its status and dates; the payment itself is processed by Whop, which does not pass on your card details.

Technical data: sign-in and error logs, kept for security and to keep the service running.

What it is used for

To run the service you asked for: building and showing your trips, sharing them with your companions, managing your plan (performance of the contract). To ensure security and prevent abuse (legitimate interest). To keep the accounting records required by law (legal obligation).

No advertising, no sale of data, no tracking of your browsing on other websites.

Who receives it

Your data is hosted by Vercel (app) and Supabase (database, in Ireland). To build itineraries and read the video links you import, the content of your trip is sent to an AI model provider based in the United States, without your name or email address; it does not use it to train its models.

To compute travel times and weather and to display the map, only place locations are sent to mapping services (openrouteservice, Google Maps Platform, Open-Meteo, OpenFreeMap). Payment goes through Whop, and the service's emails through an email provider. The companions you invite can see the shared trip.

When a provider is located outside the European Union, the transfer is covered by the safeguards provided for by the GDPR (adequacy decision or the European Commission's standard contractual clauses).

How long

Your data is kept for as long as your account exists. When you delete a trip, it is erased with its photos; when you ask for your account to be deleted, your data is erased within 30 days. Technical logs are kept for one year at most, and accounting records for the period required by law (ten years).

Your rights

You may access your data, correct it, have it erased, ask for a copy in a reusable format, object to or restrict certain processing, and give instructions on what happens to it after your death. Write to support@tripandgo.co; you will receive an answer within one month.

If you believe your rights are not respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.

Cookies and storage

Trip&Go only uses essential cookies: your sign-in session and your language. Your browser also keeps, on your device, your answers to the questionnaire in progress and the offline copy of your trips. No advertising or audience measurement cookie is set, which is why no banner asks for your consent.

Security and minors

Connections are encrypted, access to data is limited to what each feature needs, and journal photos are stored in a private space, readable through temporary links. The service is reserved for people aged 16 and over.

Changes

This policy may change along with the service. The update date appears at the top of the page; any significant change is announced to you.