Privacy Policy

The controller of your personal data is [Legal name — company or your full name], [Street, postcode, city, country]. Contact: [privacy@triipster.com].

• Account data: email address, first name, and your Google profile name and picture if you sign in with Google.
• Travel preferences: home airports, travel months, destinations, number of travellers and trip frequency that you enter during setup.
• Onboarding answers, such as how you heard about us.
• Membership data: plan, trial and subscription status. Whop processes your payment details — we never see your full card number.
• Email data: which alerts we sent you, and your unsubscribe choices.
• Usage and device data: IP address, browser type, pages visited and deal links clicked, collected through server logs and partner scripts.

• To run your account and send the deal alerts you signed up for — performance of our contract with you (GDPR Art. 6(1)(b)).
• To handle billing and meet tax and accounting obligations — contract and legal obligation (Art. 6(1)(b) and (c)).
• To send welcome and service emails — contract. Marketing emails only with your consent or where the law allows, and you can always unsubscribe.
• To keep the Service secure, prevent abuse and improve it — our legitimate interests (Art. 6(1)(f)).
• Anonymous, cookieless product analytics (page visits and which steps people complete) — our legitimate interests in understanding and improving Triipster.
• To track clicks on affiliate booking links so partners can credit us — our legitimate interests, or your consent where the law requires it.

We don't sell your personal data. We use these service providers, who process data on our behalf:

• Supabase — database and login.
• Vercel — website hosting.
• Whop — payments and memberships.
• Resend — sending emails.
• PostHog (US hosting) — cookieless product analytics, to understand how people use Triipster.
• Google — sign in with Google (only if you use it).
• Travelpayouts and its travel partners — affiliate links and click tracking when you open a deal.

When you click through to book, the airline or travel site you land on handles your data under its own privacy policy.

Some providers are based outside the EU/EEA, including in the United States. Where this happens, we rely on adequacy decisions (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses to protect your data.

We use essential cookies to keep you logged in, and your browser's local storage to save your onboarding progress. Our affiliate partner (Travelpayouts) loads a script that may set cookies to attribute bookings to us. You can block or delete cookies in your browser settings; essential cookies are needed for login to work.

Analytics: we use PostHog to see which pages and steps people use and where they drop off. It runs without cookies or local storage and never records sessions. Visits are counted with a privacy-preserving hash that PostHog calculates on its servers from a salt that changes daily and is then deleted, so it can't be linked back to you or followed across days.

We keep account data while your account is active. After you delete your account, we delete or anonymise it within 30 days, except for billing records we must keep for tax purposes (usually up to 10 years).

Depending on where you live, you can ask to access, correct, delete, restrict or export your data, object to processing based on legitimate interests, and withdraw consent at any time. Email [privacy@triipster.com]. You also have the right to complain to your local data protection authority.

Every alert email has an unsubscribe link. Unsubscribing from alerts doesn't cancel a paid membership — cancel that through Whop.

The Service is for people aged 18 and over. We don't knowingly collect data from children.

We use encrypted connections (HTTPS), access controls and trusted providers to protect your data. No system is perfectly secure, but we'll tell you and the authorities about a breach where the law requires it.

We may update this policy. We'll change the date at the top, and email you about significant changes.