Privacy Policy
1. Who we are
TravelOS is a group trip planning service (the "Service") operated by TravelOS ("TravelOS," "we," "us"). This policy explains what personal information we collect through our website and web app at usetravelos.com and app.usetravelos.com, how we use it, who we share it with, and the choices you have. If we release phone apps, this policy will cover them too.
2. Information we collect
Information you give us
- Account details: your email address, display name, and password (stored as a one-way hash by our authentication provider), or a sign-in identifier if you use Google or Apple to sign in.
- Trip content: trips, itineraries, activities, reservations, places you pin on the map, packing lists, messages, polls and votes, Group Agreements answers, expenses and settle-up records, and notes.
- Documents: traveler documents and important information you choose to store, such as passport details, tickets or insurance. These are designed to be visible only to you.
- Invitations: when you invite someone, we process the invite link and, if you provide it, their email address.
- Messages to us: anything you send to [email protected].
Information collected automatically
- Technical and security data: IP address, browser and device type, pages and features used, timestamps, and error and security logs. Our hosting and database providers keep these logs.
- Sign-in state: your browser stores a session token in local storage so you stay signed in. We do not use advertising cookies.
- Bot protection: we use Cloudflare Turnstile on sign-in and sign-up. It runs checks in your browser to tell people from bots and may read limited browser and device signals.
Payment information. Payments are handled by Stripe. We never see or store your full card number. We receive limited billing details from Stripe, such as your plan, subscription status, and the last four digits and brand of your card.
3. How we use information
- To provide the Service: create your account, run your trips, let invited people see and edit what their role allows, and sync changes across members.
- To process purchases and manage your plan (Free, Trip Pass, Pro).
- To send account and service emails such as sign-in links, password resets, invitations, receipts and important notices. We send marketing email only if you opt in, and you can opt out at any time.
- To power features you use, including AI Trip Copilot, reservation extraction, weather, travel advisories, currency conversion and maps.
- To keep the Service secure, prevent abuse and fraud, debug problems, and improve the product.
- To comply with legal obligations.
4. AI features
Some paid features use AI. When you use them, we send the trip details needed to answer your request, such as destinations, dates, planned activities, and first names, to an AI model provider that processes the request for us. We design these requests so they do not intentionally include your email address, payment details, or the private documents you store. The AI provider acts as our service provider. AI output can be wrong, so check anything important. AI suggestions are only proposals: the AI cannot book or change anything on your behalf unless you approve it.
5. Who we share information with
Other people on your trip. Trip members see the trip content their role allows, including your name and the items you add. Private items, such as your documents, are not shared with them.
Service providers who process information on our behalf:
| Provider | What they do for us |
|---|---|
| Supabase | Database, sign-in, and server functions |
| Cloudflare | Website hosting, DNS, security, and Turnstile bot protection |
| Stripe | Payment processing and subscription billing |
| Resend | Sending account and service emails |
| AI model providers (through OpenRouter) | Processing AI Copilot and other AI requests |
| Google and Apple | Sign-in, if you choose it |
| Map, weather, geocoding, advisory and exchange-rate data providers | Receive place names, coordinates or currency codes needed to return results. They do not receive your name or email from us. Map tiles come from OpenStreetMap, which can see your IP address when tiles load. |
Legal and safety. We may disclose information if we believe it is required by law or legal process, or needed to protect the rights, safety, or property of our users, the public, or TravelOS.
Business changes. If TravelOS is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal. We will tell you if that happens and if your choices change.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
6. How long we keep information
We keep your information while your account is active. If you ask us to delete your account, we delete or de-identify your personal information, except where we need to keep some for legal, tax, security or fraud-prevention reasons, or where it is part of a shared trip. On shared trips, records other members rely on, such as expense entries, may remain but will no longer be tied to your name. Backups roll off on a regular cycle. Payment records are kept by Stripe and by us as required for accounting.
7. Your choices and rights
You can review and edit your profile and trip content in the app. To ask for a copy of your data, a correction, or deletion of your account, email [email protected] from the address on your account. We will verify your identity and respond within 30 days, or sooner where the law requires.
Depending on where you live, you may have additional rights:
- California and other U.S. states: to know what we collect, to access, correct and delete your information, to opt out of sale or sharing (we do neither), and not to be treated unfairly for exercising your rights.
- European Economic Area, United Kingdom and Switzerland: to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. You may also complain to your local data protection authority. Our legal bases are performing our contract with you, our legitimate interests in running and securing the Service, your consent where we ask for it, and legal obligations.
Your device or browser may let you block or clear local storage. Doing so will sign you out.
8. Security
We use encryption in transit (HTTPS), access controls, and database rules that limit which rows each user can read. No online service is perfectly secure, so please use a strong, unique password and turn on the extra sign-in step when it is offered. If we learn of a breach affecting your information, we will notify you as the law requires.
9. International use
We are based in the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for transfers, such as standard contractual clauses.
10. Children
TravelOS is not for children. You must be at least 16 to use the Service. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service changes, for example when we add analytics or phone apps. If a change is significant, we will notify you in the app or by email. The date at the top shows the latest version.
12. Contact us
Questions or requests: [email protected].