Privacy Policy

Last updated: April 2026

1. Introduction

Travacker ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights in relation to it. By using Travacker you agree to the practices described in this policy.

2. Data We Collect

We collect the following categories of personal data:

  • Account information — your name, email address, and a securely hashed version of your password when you register.
  • Trip and itinerary data — trip names, destinations, activities, notes, estimated and confirmed costs, and any booking information you attach.
  • Location data — place names and coordinates you search for via our Mapbox-powered destination search. We do not collect your device's GPS location.
  • Booking confirmation emails — if you choose to forward booking confirmations to your unique Travacker address, we process the content of those emails to extract booking details. Forwarding is always user-initiated.
  • Usage data — pages visited, features used, and general interaction data to help us understand and improve the service.
  • Communications — any messages you send to our support team.

3. How We Use Your Data

We use the data we collect to:

  • Provide and maintain the Travacker service, including trip planning, collaboration, and sharing features.
  • Power AI-assisted features such as cost estimation, packing list suggestions, and the trip assistant.
  • Display destination search results and route maps via Mapbox.
  • Process marketplace transactions and subscription billing via Stripe.
  • Send transactional emails such as email verification, password reset, and booking confirmations.
  • Send service-related notifications (trip updates, collaborator activity) where you have opted in.
  • Improve and develop the platform based on aggregated usage patterns.
  • Comply with legal obligations and enforce our Terms & Conditions.

4. Third-Party Services

Travacker relies on the following trusted third-party processors, each bound by appropriate data protection agreements:

  • Mapbox — location search and map rendering. Your destination queries are sent to Mapbox to return place suggestions and map tiles.
  • Stripe — payment processing for marketplace bookings and premium subscriptions. Card data is handled entirely by Stripe; we never store card numbers.
  • Amazon Web Services (AWS) — cloud hosting, database storage, and email ingest infrastructure. All data is encrypted at rest and in transit.
  • Google AI (Gemini via Vertex AI) — powers AI trip suggestions, cost estimates, email parsing, and the trip assistant. Data passed to this service is limited to what is needed to fulfil your request.

5. Data Sharing

We do not sell your personal data. We share it only in the following circumstances:

  • With processors — the third-party services listed in section 4, where necessary to provide the service.
  • With collaborators you invite — trip data (destinations, activities, notes) is visible to anyone you invite to collaborate on or view a trip, according to the permission level you grant them.
  • Publicly shared trips — if you choose to publish a trip to the community gallery, it will be visible to all Travacker users and potentially indexed by search engines.
  • Legal requirements — where required to comply with applicable law or to protect the rights, property, or safety of Travacker, our users, or others.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for financial records).

7. Cookies

We use a small number of essential cookies to maintain your authenticated session and store your preferences. We do not use advertising or tracking cookies, and we do not share cookie data with third-party advertisers.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate or incomplete data.
  • Deletion — request that we delete your personal data (subject to legal retention requirements).
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to certain processing activities, including direct marketing.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected].

9. Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, hashed password storage, and short-lived authentication tokens. No system is completely secure; if you believe your account has been compromised, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Your continued use of Travacker after any change constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected].