Privacy Policy

Account Information

Email address, name, username, profile details (bio, phone number, date of birth, address, nationality, preferred currency, profile photo), subscription plan, and authentication identifiers. TripAlta never stores or logs plaintext passwords: our identity service stores one-way password hashes and separately protects multi-factor authentication (TOTP) secrets. We also record the date you accepted our Terms and Privacy Policy.

Marketing Attribution & Referrals

Acquisition data captured at sign-up, including UTM parameters (source, medium, campaign, content, term), referral codes, and referral invitation tokens. If you invite others (trip collaborators or referrals), we process the email addresses you provide for those people.

Booking & Reservation Data

Flight passenger details (legal name, date of birth, gender, nationality, email, phone, and — for international flights — passport or national ID number, expiry, and issuing country, plus optional frequent-flyer / Known Traveler / Redress numbers and emergency-contact details you supply); hotel guest information (name, email, phone, guest nationality, special requests, child age); activity booking details (booker/traveler names, contact details, and answers to booking questions); eSIM order details (recipient email, including any gift-recipient email you provide), including plan-included eSIM benefits.

Saved Traveler Profile

If you save a traveler profile to speed up checkout, we store legal name, date of birth, gender, nationality, residence country, Known Traveler Number (KTN), Redress Number, and emergency-contact name, relationship, phone, and email. The emergency contact is another person’s personal data that you provide to us.

Trip Data

Trip destinations, origin, dates, traveler counts, itineraries, places, activities, notes, checklists (including assignees), route options, and trip preferences (travel style, interests, accommodation preferences, accessibility requirements, dietary restrictions). Accessibility and dietary fields are optional and may reveal information about health or beliefs; you choose whether to provide them. If you set a price alert for a trip's planned flight or hotel, we store the search details, your target price and the prices we find; alerts expire after 30 days and are deleted when your account is deleted.

Budget & Expense Data

Budget amounts, currency, expense records, spending categories, payment methods, receipt photos, and expense-splitting and settlement information shared with the collaborators on a trip (the number of collaborators allowed depends on your subscription plan). Receipt images you upload may be sent to our AI provider (Google Gemini) for automated field extraction.

Collaboration Data

Collaborator invitations, user roles (Owner, Editor, Viewer), collaboration activity, presence indicators, comments, mentions, messages, polls, and public share links. Blocks you set before we removed the block controls stay in place and continue to prevent trip invitations between the two accounts; contact support if you need help with one. Abuse reports you submit are also stored.

Photo & Media

Trip photos, images uploaded to activities, receipt photos, and profile pictures (upload size, photo-count, and storage limits depend on the upload type and your plan). Photos may include embedded EXIF metadata such as GPS coordinates, the date the photo was taken, and camera make/model, which we may read and store alongside the image. Files are stored in Cloudflare R2 object storage and served via expiring presigned URLs.

AI Conversation Data

Trip-planning dialogues with the AI assistant, chat history, attachments and documents you upload, AI-generated recommendations, extracted fields, and conversation context. Your messages and trip context are sent to our AI providers (Google Gemini and/or OpenAI) for processing, and the conversation content is stored in our database. Booking and receipt documents you upload in chat are processed by the AI; the uploaded files are not kept, and extracted details are kept for about 14 days unless you turn on "Save uploaded document extractions" in AI settings. In AI settings you can also turn personalized AI planning, AI memory (preferences Alta remembers between conversations), and learning from completed trips and post-trip feedback on or off, and choose how long chat history is kept.

Forwarded Booking Emails

If you forward a booking confirmation to your personal TripAlta forwarding address (shown in Account Settings), we receive the whole email, including its sender, recipients, subject, body and attachments. We accept only mail sent from your account's email address that passes standard sender-authentication checks; other mail is rejected and deleted. The email text and up to five attachments are sent to our AI providers (Google Gemini and/or OpenAI) to extract booking details such as booking reference, traveler and guest names, flight numbers, airports and times, hotel name and address, dates, room details, price, and booking and payment status. You review the results in Ask Alta before adding them to a trip. Forwarded emails may include other people's details, such as fellow travelers' names.

AI Usage & Billing Data

Ask Alta message counts, model usage statistics, token consumption metrics, cost telemetry, and feature utilization associated with your account. Message counts are used for plan allowance enforcement; token and cost metrics are used for observability, service optimization, and capacity planning.

Location Data

Destination and activity locations, places to visit, and coordinates used for trip planning (processed via Google Places, Routes, and Maps). With your explicit device permission, precise GPS coordinates from your browser or mobile device may be attached to AI chat requests and nearest-airport lookups (and may be sent to our AI and Google providers for those features). Coordinates are also sent to Eventbrite to find live events near you. We do not use third-party services to infer your location from your IP address; when precise location is unavailable or denied, location-aware features fall back to details you have given us, such as the home airport in your profile or your trip destinations. Mobile camera, photo-library, and location OS permissions are requested only for the features that use them.

Notification & Communication Data

Email notification preferences, in-app notification settings, push-notification device tokens, communication history, support tickets, and feedback. Transactional emails (verification, password reset, booking confirmations, trip alerts) and, where you have opted in, onboarding and marketing emails are sent via SparkPost. Marketing and newsletter emails are off by default and require opt-in; SparkPost open and click tracking is enabled on the emails we send. Push notifications are delivered through Expo and onward via Apple (APNs) and Google (FCM).

Affiliate & Referral Tracking

When you click certain outbound booking links (for example car rentals, flight comparison, or travel insurance partners), we and our affiliate networks may record the click and attach attribution parameters so partners can credit any resulting purchase. Your search parameters (such as origin, destination, and dates) may be included in the outbound link, and the partner network may set its own tracking cookies after you leave TripAlta. TripAlta may earn a commission on these referrals.

Security, Device & Diagnostic Data

IP address, user-agent, browser and operating-system details, a hashed device fingerprint (used to detect new-device logins and limit abuse), CAPTCHA challenge signals, rate-limiting and account-lockout state, server logs, and application error/diagnostic reports. Error reports are scrubbed of obvious personal data before being sent to our error-monitoring provider (Sentry), but stack traces and device metadata may still constitute personal data. CAPTCHA and bot-protection signals on the feedback form are processed by Cloudflare (Turnstile).

Product Analytics

Product interactions linked to your internal account ID when sharing is on, including trip and search activity. Events include environment, app, platform, app version and build release. PostHog processes these data in the United States. TripAlta services also check your saved sharing choice before sending optional analytics.

With Your Direction

• • Collaborators: When you invite others to a trip, they can see trip details, activities, budget (if shared), and notes based on their role (Owner, Editor, or Viewer).
• • Public Trips & Share Links: If you make a trip public or create a share link, anyone with the link can view it.
• • Invitations & Referrals: When you invite collaborators or refer friends, we use the email addresses you provide to send your invitations.

Service Providers & Sub-processors

We share data with the third-party processors below to operate the Service. Each operates under its own privacy policy, and we share only the data needed for the stated purpose.

When you make a booking, the relevant supplier (and, for flights and stays, the airline or property) receives the details needed to fulfill your reservation and applies its own terms and privacy policy.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or others.

Security Measures

• • Encryption: Data is encrypted in transit using TLS and at rest using AES-256. We do not provide end-to-end encryption.
• • Access Controls: Role-based access controls and authentication requirements.
• • Secure Infrastructure: Hosted on Microsoft Azure in the United States with a Cloudflare security edge.
• • Authentication: A TripAlta-operated identity service manages credentials, sessions, social sign-in, and optional multi-factor authentication.
• • Monitoring: Security monitoring, error tracking, rate limiting, and new-device login detection.

Your Role in Security

• • Use a strong, unique password and enable MFA.
• • Don’t share your account credentials.
• • Be careful when sharing trips publicly or with collaborators.
• • Log out from shared devices.
• • Report any suspicious activity immediately.

Access Your Data

Request a copy of the personal data we hold about you. Self-service export covers your profile, settings, support history and booking-import forwarding address; trip, booking, payment, and AI data can be requested and is provided where available.

How to exercise: Use Export Data in Account Settings, or email privacy@tripalta.com. We aim to respond within 30 days.

Correct Information

Update or correct inaccurate personal information, trip details, or account settings.

How to exercise: Update directly in Account Settings or contact support for assistance.

Delete Your Data

Request deletion of your personal data, including trips, photos, expenses, and account information. Some records may be retained where required by law (for example, booking/tax records).

How to exercise: Delete individual trips, request account deletion from Account Settings (typed confirmation), or contact support.

Data Portability

Export your trip data in machine-readable formats. Trip PDF and ICS calendar export are available client-side; a JSON export of account data is available from settings.

How to exercise: Use Account Settings > Export Data, or the per-trip export options.

Limit Processing

Restrict how we process your personal information: turn off usage analytics, marketing emails, personalized recommendations, AI data use, personalized AI planning, AI memory, or AI learning from your trips and feedback, and choose how long Ask Alta keeps your chat history.

How to exercise: Adjust privacy and notification settings in Account Settings, use Cookie settings, or contact support.

Opt Out of Marketing

Marketing and newsletter emails are off by default. You can unsubscribe at any time while continuing to receive essential service emails.

How to exercise: Use the unsubscribe link in any marketing email or manage preferences in Account Settings.

Object to Processing

Object to processing of your personal data for certain purposes under applicable law (such as GDPR).

How to exercise: Contact privacy@tripalta.com with your request.

Withdraw Consent

Object to or turn off optional processing at any time, including usage analytics, marketing emails, personalized AI planning, AI memory and AI learning from your trips, using the controls in Settings.

How to exercise: Update consent and privacy preferences in Account Settings or contact support.

How to Delete Your Data

Social Login Users (Facebook, Google, Apple)

If you signed up using a social login provider, you can request data deletion through either method above. Additionally:

• • Facebook: Remove TripAlta from your connected apps at Facebook Settings → Apps and Websites.
• • Google: Remove access at Google Account → Security → Third-party apps
• • Apple: Manage at Apple ID → Sign-In and Security → Apps Using Apple ID

What Gets Deleted

When your account is purged after its 14-day restore window, we remove:

• • Account information and profile
• • Trips and itineraries, unless an eligible collaborator keeps a shared trip within 14 days
• • Photos and media uploads
• • Budget and expense data, except amounts retained without your name or account in other people’s trips
• • Collaboration history
• • AI conversation history
• • Saved traveler and booking preferences
• • Notification settings

Note: Some records must be retained for legal compliance (for example, booking and tax records) for up to 7 years.

Your comments in other people’s trips are deleted. After account purge, security operation logs may be kept for up to 90 days without your identity.

Company Address