Privacy Policy

We collect the trip brief and preferences you submit, such as destination, dates or number of nights, budget, travelers, meal plan, desired activities, transfer preferences, and what matters to you in a stay.

If you ask us to email a PDF report, we use the address only for that transactional delivery. This does not create an account or subscribe you to marketing.

If you create an account or contact support, we may also collect your name, email address, authentication details supplied by the sign-in provider, support messages, and the reports you choose to save.

We store report requests, generated previews and reports, access status, and product activity needed to deliver the service. For purchases, we receive only the PayPal order, capture, checkout, amount, currency, payment-status, refund, reversal, and dispute metadata needed to confirm payment and maintain access.

Trip Concierge does not receive or store full payment card numbers or card security codes. PayPal collects and processes payment credentials within its checkout as the payment processor.

Our hosting and security systems may process IP address, browser and device information, request times, referring pages, error logs, cookie identifiers, and similar diagnostic data.

We use a short-lived pseudonymous product-session cookie and limited product events to understand whether visitors start the planner, view a preview, begin checkout, receive a paid report, and submit a rating. We mark local, internal, and test activity so it can be excluded from operating metrics. We do not put trip-brief text or optional feedback text inside general analytics events.

Ratings and written feedback are optional. Permission to quote written feedback in marketing is requested through a separate unchecked consent control and can be withdrawn by contacting support.

We use information to:

• understand a trip request and produce previews and Full Reports;
• deliver a requested PDF report to the email address you provide;
• provide report access, accounts, saved reports, payment status, and customer support;
• research travel options and improve report relevance and quality;
• protect the service, investigate errors or abuse, and prevent fraud;
• comply with accounting, tax, legal, and payment obligations.

Where privacy law requires a legal basis, we rely on performance of our contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

We share data only when needed to operate the service, complete a transaction, comply with law, or protect users. Providers may include Vercel for hosting, Supabase for database and authentication services, PayPal for payment processing, Resend for transactional report-email delivery, and AI or research providers used to understand requests and prepare reports.

These providers process information under their own terms and contractual responsibilities. We do not sell personal information. We may disclose information when legally required, in connection with a business reorganization, or to protect rights, safety, and service integrity.

We retain information for as long as needed to provide reports and account access, resolve support or payment issues, maintain security and business records, and satisfy legal obligations. When information is no longer needed, we delete or anonymize it where reasonably possible. PayPal may retain transaction records under its own legal obligations.

We use reasonable technical and organizational safeguards, including access controls and secure service providers. No online system is completely secure, so please do not place passport numbers, payment-card data, medical records, or other unnecessary sensitive information in a trip brief.

Trip Concierge and its providers may process information in countries other than your own. Where required, providers use contractual or legal safeguards intended to protect information transferred internationally.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to your local data-protection authority.

Send a request from the email associated with your report or account to support@aitripconcierge.com. We may need to verify your identity before acting. Some transaction, security, or legal records may need to be retained.

The service is intended for people who can enter a binding purchase agreement and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.

We may update this policy as the service and its providers change. The date above shows the latest revision. Product terms are available in our Terms of Service.