Privacy Policy
Last updated: March 31, 2026
1. Information We Collect
When you create an account, we collect your username, email address, and a securely hashed version of your password. We never store your password in plain text.
When you use TripTell, we process the travel destinations, preferences, and itinerary data you provide in order to generate your personalized trip plans. This data is sent to third-party AI and mapping services (see Section 3).
2. How We Use Your Information
- To generate and store your travel itineraries
- To authenticate your account and keep your session active
- To improve the quality of our AI-generated recommendations
- To communicate service updates if you opt in
3. Third-Party Services
TripTell relies on the following third-party services to function:
- OpenAI — to generate itinerary suggestions. Your destination and preferences are sent to OpenAI's API.
- Google Places API — to retrieve location data, photos, and place details.
- Mapbox — to display interactive maps. Your browser sends requests directly to Mapbox servers.
Each service has its own privacy policy. We encourage you to review them.
4. Data Storage & Security
Your data is stored in a server-side database. Passwords are hashed with bcrypt. Authentication uses JSON Web Tokens (JWT) transmitted over HTTPS. We apply rate limiting and input validation to protect against abuse.
5. Your Rights
You can delete your account and all associated data at any time by contacting us. You may also request a copy of the data we hold about you.
6. Cookies
TripTell uses localStorage to persist your authentication token and session preferences. We do not use tracking cookies or third-party analytics at this time.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the app or via email.
8. Contact
If you have questions about this policy, please contact us at [email protected].