Privacy Policy

Working draft · last updated 2026-10-27

Draft for review — this describes our intended practices and is not yet legal advice. It will be finalized (with company details and counsel review) before launch.

Who we are

TripWiz (operated by [Company]) is a group-trip planning app. Questions about your data: [contact@domain].

What we collect

Account: your email address (to sign you in) and an optional display name.
Your trips: the notes, itineraries, dates, destinations, participant names, tasks, polls and any images/screenshots you add.
Participants (no account): a chosen display name and their votes / task claims, tied to a cookie on their own device — not an account.
Payments: processed by Stripe; we store only the payment status and reference, never card numbers.
Technical: basic logs needed to run and secure the service.

How we use it

To provide the service (structure your pasted input into a plan, let you share it with your group), to send you sign-in links and activity notifications you’ve opted into, and to process the one-time trip pass. We do not sell your data or use it for third-party advertising.

Who processes it for us

Supabase — database, authentication and file storage.
Anthropic — the AI that structures the notes you paste; your input is sent to clean it up and is not used to train their models (per their API terms).
Resend — sign-in and notification emails.
Stripe — payments.
Unsplash — destination photos (we send a destination name to fetch an image).

Retention

We keep your trips until you delete them. Deleting a trip moves it to “Recently deleted” and then removes it; deleting your account removes your account and all your trips, uploads, polls and tasks. We minimize how long we keep raw pasted inputs.

Your rights

You can export or delete your data at any time from Settings → Your data. Depending on where you live you may also have rights to access, correct, or object to processing — contact us and we’ll help.

Security

Data is encrypted in transit (TLS) and at rest. Uploaded images are kept in private storage and served via short-lived signed links, never public URLs.

Cookies

We use a cookie to keep you signed in, and a cookie to remember a participant’s identity on their device so their votes/claims aren’t duplicated. No third-party ad tracking.