Overview
This Policy explains what we collect, why, who else is involved, how long we keep it and what you can do about it. It applies to the Triplanio website, web application and connected assistants (together, the “Service”).
Who is responsible
The data controller is a self-employed entrepreneur (sole trader) registered in Spain, trading as Triplanio. Business details are available on request. For any question about your data, write to info@triplanio.com.
What we collect
- Account data
- email address, name, avatar if you upload one, interface language and units. If you arrived from an ad or a shared link, we also record how you found us (campaign tags such as UTM parameters or an ad-click ID) as part of your account record
- Trip content
- cities, dates, bookings, transfers, activities, notes, budget entries, and files and documents you add. Bookings may include details you type in yourself, such as a hotel’s contact details or a booking reference
- Messages
- trip chat messages and your conversations with the AI assistant
- Support requests
- if you contact us through the in-app feedback form: your message, any screenshots you attach, and technical context (the page you were on, app version, browser and device type, timezone)
- Payment data
- your plan, purchase and subscription history, amounts and currency, and our payment provider’s identifiers. We never receive or store card numbers — payment details are entered directly with Stripe
- Technical data
- IP address, browser and device information, timestamps, error reports, and short-lived rate-limiting records that protect the Service from abuse
- Interface playback (only if you accept analytics cookies)
- for some sessions, a recording of interface activity: layout, clicks, scrolling and navigation. Text, form input and images are masked in your browser before transmission. See “Analytics and advertising” below
Why we use it and on what legal basis
- To provide the Service (contract)
- your account, trips, sharing with participants, payments, transactional email such as invitations and password resets, reminders, AI features you invoke
- To keep the Service safe and working (legitimate interest)
- abuse prevention, rate limiting, error monitoring, aggregate visit statistics
- To understand and improve the product, and to measure our marketing (consent for storage on and access to your device; legitimate interest for the processing itself)
- product analytics, advertising measurement, recording how new accounts found us
- To meet legal obligations
- accounting and tax records for payments
We do not use your trip content for advertising, and we do not sell personal data to anyone.
Analytics and advertising
Before you answer the cookie banner (and if you choose “Necessary only”), our product analytics (PostHog) collects nothing from your browser: no events are sent from your device and nothing is stored on it. Regardless of your choice, account events generated by our servers are recorded against your account ID, without cookies, on the basis of legitimate interest. Error monitoring (Sentry) and privacy-friendly aggregate visit counting (Vercel Web Analytics) run without storing anything on your device.
If you choose “Accept all”, analytics starts and stores identifiers on your device (see the next section), so we can recognise the same browser across days. With the same choice, we load advertising measurement from Google Ads and OpenAI Ads (ChatGPT Ads), which store advertising identifiers on your device to attribute sign-ups to ad clicks. For conversion matching we send Google and OpenAI a hashed form of your email address; the address itself is not sent.
Interface playback. With the same choice, a selection of sessions is recorded as an interface playback (a “session replay”), used to diagnose usability and technical faults. Text, form input and images are masked in your browser before transmission, so a recording contains interface activity and not the content displayed. Nothing is recorded before you accept, and recordings are deleted after 30 days.
You can change your choice at any time via “Cookie settings” in the footer or in your account. Withdrawing consent stops analytics storage and advertising measurement; identifiers already stored are removed, and any remaining Google cookies can be deleted in your browser settings.
Once you have accepted and are signed in, product usage is recorded against your account. The analytics profile holds your account ID, email address and name; trip content, messages and profile photos are not sent to analytics. Legal basis: legitimate interest — you can object at any time via support@triplanio.com. Deleting your account deletes the analytics profile and its records.
Independently of your cookie choice, the campaign tags of the visit that led to a sign-up (for example utm_source or an ad-click ID) are recorded once, as part of the account record, on the basis of legitimate interest.
AI features
AI features are processed only when you invoke them. The content transmitted to the AI providers named above is limited to what the requested feature requires: the file or text you submit, your request, and — for the trip assistant — recent messages of that trip’s chat as context.
Your content is not used to train AI models. Usage records kept for cost accounting (feature, time and volume of computation) do not include the content of your requests.
International transfers
Your data is stored within the European Union. Some providers are established in, or process limited data in, the United States (for example Stripe, Google, LocationIQ). Those transfers are covered by the European Commission’s adequacy decision for the EU–US Data Privacy Framework or by standard contractual clauses.
How long we keep data
- Account and trip data
- for as long as your account exists. Deleting a trip deletes its content and files
- After account deletion
- your personal details are erased or anonymised right away (see “Your rights”). Content you added to shared trips remains available to the other participants, without your name attached
- Payment and accounting records
- 6 years, as Spanish commercial law requires
- Error reports
- 90 days
- Interface playbacks
- 30 days
- Product analytics records
- for as long as your account exists; deleted with the account
- Database backups
- data you delete disappears from live systems immediately, but may persist in our backups for up to 7 days before they are overwritten
- Support requests
- kept while we work on them and to improve the Service; you can ask us to delete yours
- Invitation links
- expire after 7 days
- Rate-limiting records (including IP addresses)
- kept for about 24 hours
Your rights
- access a copy of your data;
- correct anything inaccurate — most account details can be edited in the app;
- delete your account and data — directly in the account settings. Deletion erases or anonymises your personal details (email, name, avatar), deletes your private documents, notifications, personal integrations and your analytics profile with its records, and signs you out everywhere. An active subscription must be cancelled first. Shared trip content and legally required payment records remain, without your identity attached;
- restrict or object to processing based on legitimate interests;
- receive your data in a machine-readable format;
- withdraw consent at any time — for analytics and advertising via “Cookie settings” — without affecting what happened before.
Write to info@triplanio.com and we will respond within 30 days. You can also complain to a data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es), or the authority of the country where you live.
Security
We implement appropriate technical and organisational measures, including encryption in transit and at rest, restricted and authenticated access to production systems, and storage of credentials in a form we cannot read. No system is perfectly secure; if a breach affects your rights, we will notify you and the supervisory authority within the time the law requires.
Children
The Service is not intended for children under 16. If you believe a child has given us personal data, write to info@triplanio.com and we will delete it.
Changes to this Policy
We update this Policy when the Service or the law changes. The current version is always on this page, with the date of the last update at the top. When a change materially affects you, we tell you in advance, by email or in the Service.
Contact
Data protection questions and requests: info@triplanio.com. General support: support@triplanio.com.