Security Practices

1. Security summary

Tripanomics uses reasonable technical and organizational safeguards designed to protect accounts, itinerary content, payment flows, and operational systems. No internet-based service can guarantee absolute security.

2. Current safeguards

Current launch-baseline safeguards include:

• managed authentication through Supabase;
• HTTPS encryption in transit;
• payment processing through Stripe rather than storing payment-card details on our systems;
• consent-gated product analytics;
• rate limiting and bot protection for sensitive flows;
• operational logging and error monitoring for reliability and abuse detection;
• privileged admin flows designed to use step-up checks and audit context; and
• provider review before adding major processors or security-sensitive integrations.

3. Itinerary safety limits

Security controls do not make generated itinerary content authoritative. Recommendations and third-party travel data can still be wrong, stale, or unavailable. Users remain responsible for verifying travel details with official sources before relying on them.

4. Shared responsibility

You are responsible for keeping your login credentials secure, using a trusted device and network, reviewing public share links before distributing them, and promptly reporting suspicious account activity.

5. Incident reporting

If you believe you found a security issue, account compromise, privacy incident, or exposed itinerary link, email support@tripanomics.com with a clear description and enough detail for us to investigate.

Please do not access, modify, destroy, or disclose another person's data while investigating or reporting an issue.

6. Security notices

We investigate suspected security incidents and provide notices where legally required.

7. Questions

Security questions can be sent to support@tripanomics.com.