Privacy Policy

This policy explains what data typeatrip.com processes, why, and what rights you have. Controller: Daniel Rose, c/o IP-Management #9520, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany, contact@typeatrip.com.

The short version: we collect only what we need to create and deliver your travel plan, we use no advertising trackers, and we never sell your data.

1. What we process and why

Account and login. Your email address, and if you sign in with Google, your Google account email and basic profile. Used to create your account, send login codes and deliver your plan. Legal basis: performance of contract.

Your trip input. The trip description you enter, your answers to our questions, and your revision requests. Used to research and write your plan. Legal basis: performance of contract.

Payment. Payments are processed by Stripe Payments Europe Ltd. We receive confirmation of payment and the amount, never your card number. Stripe processes your payment data as described in Stripe's privacy policy. Legal basis: performance of contract.

Plan generation (AI). Your trip input is processed by Anthropic (Claude models, servers in the USA) to research and write your plan. We send only what is needed for the plan, no payment data. Transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses. Legal basis: performance of contract.

Email delivery. We send transactional emails (login codes, your plan, status updates) via Resend. No marketing emails without your separate consent.

Hosting and database. The website runs on Vercel; your account data and plans are stored with Supabase in Frankfurt, Germany. Technical logs (IP address, timestamps) are processed to operate and secure the service. Legal basis: legitimate interest in a secure, working service.

Web analytics. We use Vercel Web Analytics in its cookieless configuration: no cookies, no IP addresses stored, no cross device profiles. We collect anonymized, aggregated data only (page views, referrer, country, device type). Legal basis: legitimate interest in audience statistics. Details: https://vercel.com/docs/analytics/privacy-policy

2. What we do not do

No advertising trackers, no third party analytics profiles, no sale or sharing of personal information for advertising. Only cookies and similar storage that are strictly necessary to run the site (such as your login session and language hint choice).

3. How long we keep data

Your account, plans and revision history stay until you delete your account or ask us to delete it. Records we must keep for tax and commercial law (invoices, payment records) are kept for the statutory retention periods (up to 10 years under German law) and then deleted.

4. Your rights

You can request access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Email contact@typeatrip.com. You can also complain to a data protection authority; the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor access and deletion requests as described above.

5. Changes

We will update this policy when the service changes and publish the new version here.