Your trips are yours. Export or delete them whenever you like, and deletion is permanent within 30 days. We don't sell your data or run advertising trackers.
1. Introduction
triprovo ("we", "us", or "our") operates triprovo.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using triprovo, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information you provide directly:
- Account information: name, email address, and password when you register
- Profile data: travel preferences, interests, and travel style
- Trip data: destinations, dates, budgets, itineraries, expenses, saved places, and journal entries you create
- Booking documents: confirmation emails, PDFs, photos, or screenshots you upload or paste to import a booking. These may contain traveller names, confirmation and ticket numbers, flight numbers, and contact details
- Photos: pictures you add to a trip's photo album
- Chat messages: questions and requests you send to the Rovo assistant
- Shared content: links and text you share into the app (for example from the share sheet) so we can find the places they mention
- Payment information: processed securely by Stripe — we never store full card details
- Communications: support messages or feedback you send us
Information collected automatically:
- Usage data: pages visited, features used, and interactions with the service
- Device information: browser type, operating system, and IP address
- Push notification token: if you enable notifications in the mobile app
- Cookies: session cookies for authentication and preference cookies for settings like dark mode
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Generate AI-powered travel itineraries tailored to your preferences
- Answer your questions and make changes to your itinerary through the Rovo chat assistant
- Read booking confirmations you upload and add the details (dates, times, locations, confirmation numbers) to your trip
- Find and add places from links and text you share into the app
- Show flight status, weather, currency rates, and destination photos for your trip
- Send push notifications about your trips, if you enable them
- Process payments and manage subscriptions via Stripe
- Send transactional emails (welcome, trial expiry, collaboration invites)
- Provide customer support
- Improve and personalize the service
- Monitor for abuse and ensure the security of the service
- Comply with legal obligations
We do not sell your personal data to third parties.
4. Third-Party Services
We use the following third-party services that may process your data:
- AI providers (currently OpenAI) — for AI features: itinerary generation, Rovo chat, booking import, and finding places in shared links. See section 5 for exactly what is sent, and OpenAI's Privacy Policy.
- Stripe — for payment processing. See Stripe's Privacy Policy.
- Google — if you sign in with Google. See Google's Privacy Policy.
- Apple — if you sign in with Apple. See Apple's Privacy Policy.
We also rely on service providers for hosting, database and file storage, email delivery, push notifications, maps and place search, flight and pricing data, weather, photos, and currency rates. They process data only on our instructions and only as needed to run the service. Those that are not hosting or storage receive search terms, destinations, or flight numbers — not your identity.
Some links to booking sites are affiliate links. Clicking one may share a referral identifier with that site, not your personal data.
5. AI Features and Your Documents
Several features use an AI provider's API (currently OpenAI) to understand text and images. Here is exactly what is sent and what is not:
- Itinerary generation: your destinations, dates, and travel preferences.
- Rovo chat: your messages and the itinerary of the trip you are chatting about.
- Booking import: the confirmation email, PDF, photo, or screenshot you upload, so the details can be read and added to your trip. Because these documents come from your booking provider, they may contain your name, confirmation numbers, and contact details.
- Shared links: the text of the link or page you share, so we can find the places it mentions.
- We never send your account details — your name, email address, or user ID — with these requests. Requests are made from our servers under our own account and are not tied to you by OpenAI.
- OpenAI does not use data sent through its API to train its models.
- OpenAI may retain API content for up to 30 days for abuse monitoring, after which it is deleted.
- The details we extract from a booking are stored in your trip, on our servers, like any other trip data. The original uploaded file is not kept.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law (e.g., financial records retained for tax purposes for up to 7 years).
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Opt out of marketing communications
To exercise any of these rights, contact us at support@triprovo.com.
8. Cookies
We use cookies and similar technologies for authentication (session cookies) and user preferences (e.g., dark mode). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect the functionality of the service.
9. Security
We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and secure session management. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.
10. Children's Privacy
triprovo is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the service. Your continued use of triprovo after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy, please contact us at:
triprovosupport@triprovo.com