This Privacy Policy explains how TripSums ("we", "us") collects, uses and protects your personal information when you use our Service. We take your privacy seriously and only collect what we need to run the Service.
| Data | Why we collect it | How long we keep it |
|---|---|---|
| Email address | Account creation, password reset, account communication | Until account deletion |
| Hashed password | Authentication (we never store your plain-text password) | Until account deletion |
| Session tokens | Keeping you logged in across sessions | 30 days or until logout |
| Usage counters | Enforcing fair-use limits per plan | Rolled daily; 90-day log |
| IP address | Rate limiting anonymous requests; abuse prevention | 24-hour rolling window |
| AI prompts | Sending to our AI backend to generate responses | Not stored after response |
| Subscription / order info | Activating Pro plan after payment via Lemon Squeezy | Until account deletion |
We do not collect browsing history, location data, or any data from pages you visit outside the Service. The Chrome extension only activates on travel booking sites you explicitly open.
We do not sell your personal data to third parties. We do not use your data for advertising.
The app stores your session token, theme and preferences in localStorage in your browser to keep you logged in and remember your settings — these are not advertising cookies.
We use our own privacy-friendly analytics to count page views and basic actions (e.g. searches, sign-ups) and the channel you arrived from. This is aggregated and not used to build a personal profile, and we do not sell it.
The third-party Travelpayouts "Drive" script (see section 3) and affiliate links may set their own cookies to attribute bookings for commission. If you do not wish to be tracked by third parties, you can use your browser's cookie controls or tracking-protection settings.
Passwords are hashed with scrypt before storage — we cannot see your password. Session tokens are randomly generated 256-bit values. All traffic between your browser and our server uses HTTPS. Access to stored data is restricted to necessary server processes only.
You have the right to:
To exercise any right, email privacy@tripsums.com.
The Service is for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us and we will delete it.
We may update this policy from time to time. We will indicate the "last updated" date at the top. Significant changes will be communicated via the app or email.
Privacy questions or requests: privacy@tripsums.com