1. Controller and contact
Questions about privacy can be sent to baderaum99@gmail.com.
2. Account and trip data
When you create an account or use TravelAI, we process account data such as your email address and authentication details, as well as trip content you create or share, including destinations, dates, activities, votes, budgets and member invitations. This processing is necessary to provide the requested account and planning features.
Authentication and application data are hosted using Supabase. If you choose Google sign-in, Google processes the authentication flow and shares the account details needed to create or access your TravelAI account.
3. AI features and images
When you request AI-powered destination suggestions, activity generation or planning assistance, the request data required for that feature, such as your travel preferences and trip context, is sent to OpenAI for processing. Please do not include sensitive personal information in AI prompts.
TravelAI may use Pexels to retrieve destination and activity images. Your browser may connect to that provider when images are displayed.
4. Payments
Payments, subscriptions and billing management are handled by Stripe. We receive payment status and billing identifiers needed to activate, manage or cancel your plan. TravelAI does not store full payment card details.
5. Analytics
We use Vercel Web Analytics to understand aggregated usage, such as page views, referrers, device type and approximate location. Vercel Web Analytics is designed to work without third-party cookies and uses anonymised, aggregated measurement data.
6. Retention, sharing and transfers
We retain account and trip data for as long as your account is active or it is needed to provide the service, meet legal obligations or resolve disputes. We share data only with service providers needed to operate TravelAI, including Supabase, OpenAI, Stripe, Vercel, Google and Pexels where applicable. Some providers may process data outside the European Economic Area using legally recognised transfer safeguards.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to certain processing. You may also lodge a complaint with a data protection authority. Contact us at the email address above to make a request.