Policies and disclosures
Product terms, privacy details, and operational disclosures that match how Tripanomics works today.
Tripanomics is operated by Shard Software LLC, doing business as Tripanomics.
This policy explains how Tripanomics collects, uses, shares, and retains information when you browse the site, create an account, generate or share itineraries, buy a plan, or contact support.
| Category | Examples | Why we collect it |
|---|---|---|
| Account and profile data | Email address, authentication identifiers, display name, profile metadata | Create your account, sign you in, and personalize your dashboard |
| Trip inputs and itinerary content | Destination, dates, travelers, budget, preferences, accessibility needs, generated itinerary content, saved share state | Generate, save, and let you manage itineraries |
| Generation and enrichment request context | Trip inputs, preference context, selected constraints, destination queries, and limited prompt context needed to generate or enrich an itinerary | Produce itinerary output, retrieve travel data, troubleshoot quality issues, and prevent abuse |
| Billing and subscription data | Stripe customer and subscription references, current plan, billing status, cancellation state | Sell paid plans, manage renewals, and support billing questions |
| Product analytics | Consent state, PostHog anonymous or user identifiers, page paths, event names, and product-usage metadata | Measure product usage only after you allow analytics |
| Support and email activity | Transactional email events, support messages, resend attempts, delivery metadata | Send account and billing emails and respond to requests |
| Security and operational data | Rate-limit and IP metadata, error logs, and admin audit entries for privileged actions | Protect the service, detect abuse, and investigate incidents |
We collect information:
We use the information above to:
When you ask Tripanomics to generate or refine an itinerary, we may send the minimum practical trip context to our configured AI provider and enrichment providers. That context can include destination, dates, trip length, budget, traveler count, stated preferences, accessibility needs you choose to provide, generated itinerary content, and retrieval results from travel-data providers.
Itinerary generation is not used to make legal, employment, credit, housing, insurance, or similarly significant decisions about you. It is used to create travel-planning output and related recommendations.
We do not sell trip content or itinerary history. We may use aggregated, de-identified, or product-usage signals to understand which recommendations are useful, improve ranking and retrieval quality, debug failures, and prevent abuse.
If you are in the EEA, UK, or another jurisdiction that requires a legal basis for processing, we generally rely on:
We share information only with service providers that help us run the product, including:
AI providers and travel-data providers receive only the context needed for the requested generation, lookup, or enrichment task. They may process that information under their own security, retention, and subprocessor terms when acting as our service providers or integrated providers.
We do not sell personal information or run advertising-targeting cookies.
See the separate Subprocessors page for the current launch-baseline vendor list.
We use a mix of required and optional browser storage:
See the separate Cookies & Device Storage page for the current storage inventory.
Current launch-baseline retention rules are:
You can currently:
If you make an itinerary public, the share page becomes accessible to anyone with the link until you turn sharing off.
Unless you enable sharing, saved itinerary content is intended to remain private to your account and operational service providers.
If you are in the EEA or UK, you may also have rights to access, correct, delete, restrict, object to certain processing, or request portability of your personal information, subject to applicable law.
If you are a California resident, you may request information about the categories of personal information we collect, use, disclose, and retain, and you may request deletion or correction where applicable. We do not sell personal information or share it for cross-context behavioral advertising as those terms are used in California privacy law. Because we do not sell or share personal information for cross-context behavioral advertising, Global Privacy Control signals do not currently change our processing; you can still contact us directly with privacy requests.
Some of our vendors may process data outside your country. We rely on the safeguards offered by those vendors and limit the data shared to what each feature needs.
We use reasonable technical and organizational safeguards designed to protect personal information, including authentication controls, encryption in transit, payment processing through Stripe, access controls, and operational logging for security and abuse prevention. Payment card details are handled by Stripe and are not stored on our systems. We investigate suspected security incidents and provide notices where legally required. No internet-based service can guarantee absolute security.
See the separate Security Practices page for the current public security summary.
Tripanomics is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 provided personal information, we will delete it where required by law.
We may update this policy when the product, vendors, analytics behavior, or legal requirements change. When we do, we will update the "Last updated" date at the top of this page.
For privacy, export, correction, or deletion questions, email support@tripanomics.com.