Privacy policy

• Account details. Your name and email. If you sign in with Google, we also get your profile photo.
• Profile details you add, such as a handle or home airport.
• Trip content.Destinations, dates, ideas, votes, comments, bookings, expenses, and who's on each trip.
• Things you bring in. Emails you forward to your trip address, spreadsheets you import, and links you save.
• Email addresses of people you invite, so we can send the invite.
• Feedback you send us.
• Basic technical logs, such as IP address and browser type, kept by our hosting provider to run the site.

We use your data to run Triplicate: to show your trips, send invites and sign-in emails, answer feedback, and fix problems.

We don't sell your data, show ads, or use advertising trackers. Our only cookies keep you signed in.

We use the name, email, and photo from Google sign-in only to sign you in and show your profile.

We also use how people plan trips to improve Triplicate, including the suggestions it makes.

We use emails you forward to your trip address only to find bookings and add them to that trip. The email is stored with the trip. We read one ourselves only if you ask for help with it.

People on a trip see what you add to that trip. Anyone you send a share link to can view that trip.

These services process data for us, only to provide their part of the app:

• Vercel hosts the site.
• Supabase stores the database and handles sign-in.
• Anthropic runs the AI features, such as drafting itineraries, reading forwarded emails, and estimating costs. Anthropic doesn't train its models on this data.
• Google handles Google sign-in and place details. Place searches you type are sent to Google.
• Mapbox draws the maps.
• Resend sends and receives email.

We'll share data with others only if the law requires it.

You can edit or delete what you add to a trip at any time.

To get a copy of your data, correct it, or delete your account, email team.triplicate@gmail.com. We'll take care of it within 30 days of your email.

We keep your data while your account is open. After you delete your account, it's removed from backups within 30 days.

Data is encrypted in transit and stored with Supabase. If you think someone else got into your account, email team.triplicate@gmail.com.

Triplicate is for people 18 and older.

We'll update this page and the date at the top when the policy changes. For major changes, we'll email you first.