Privacy policy

Last updated: Sep 15, 2026

1. Introduction

Welcome to PrimeTrip ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our trip sharing service. By using our service, you consent to the collection and use of information in accordance with this policy.

2. Information we collect

2.1 Information you provide

We collect several types of information that you directly provide to us:

Account information (email address, name, profile photo, bio).
Payment processing information via Stripe, including billing details.
Trip details you create, including destinations, dates, notes, and budget estimates.
Itinerary items, comments, and files you add to a trip.
Groups you create or join, and the email addresses of people you invite to a trip or group.
Communications with our support team.

2.2 Automatically collected information

When you interact with our service, we automatically collect:

Usage data and analytics through Umami and Vercel Analytics (privacy-focused analytics).
Device information (browser type, operating system, device type).
IP address and approximate location data (country/region), derived via IPInfo.
Access timestamps and session duration.
Performance and error data.
Cookie and similar technology data.

3. How we use your information

We use your information for the following purposes:

To provide and maintain our service, including creating and managing trips, itineraries, and groups.
To share trip and group content, such as itineraries and comments, with the collaborators you invite or the groups you grant access to.
To process payments and manage subscriptions.
To send trip and group invitations and other account-related communications.
To suggest destination cover photos.
To improve our services based on usage patterns and feedback.
To provide customer support and respond to inquiries.
To comply with legal obligations and enforce our terms.
To protect against unauthorized access and ensure platform security.

4. Cookie policy

Our cookie usage is minimal and privacy-focused:

Essential cookies: Required for authentication and basic platform functionality.
Analytics cookies: Privacy-focused Umami and Vercel Analytics for understanding usage patterns.
Preference cookies: Store your language and theme preferences.

You can control cookie preferences through your browser settings.

5. Data storage and security

We implement robust security measures to protect your data:

Secure file storage using encrypted S3-compatible storage systems for trip attachments.
End-to-end encrypted data transmission using TLS.
Secure payment processing through Stripe's PCI-compliant infrastructure.
Access controls so only trip owners and the people or groups they invite can view or edit private trips.
Regular security audits and vulnerability assessments.
Data backup and disaster recovery procedures.

6. Data retention

We retain your data according to these principles:

Account information: Retained while your account is active.
Trips, itineraries, and group data: Retained until deleted by you or a trip or group owner.
Transaction records: Kept for legal and tax compliance (typically 7 years).
Uploaded files: Stored until explicitly deleted by you.
Analytics data: Retained for 12 months.
Communication records: Kept for 2 years after last interaction.

7. Third-party services

We work with carefully selected third-party services:

Stripe: Payment processing and subscription management.
S3-compatible storage: Secure file hosting for trip attachments.
Resend: Transactional email communications, including invitations.
Unsplash: Destination cover photo suggestions for trips.
IPInfo: Approximate location lookup from your IP address.
Umami and Vercel Analytics: Privacy-focused analytics.

Each third-party service processes data according to their respective privacy policies and our data processing agreements.

8. International data transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place through:

Standard contractual clauses.
Data processing agreements.
Selection of providers compliant with international data protection standards.

9. Your rights

Under applicable data protection laws, you have the following rights:

Access your personal data and request copies.
Correct inaccurate or incomplete data.
Request deletion of your data (right to be forgotten).
Object to certain data processing activities.
Data portability (receive and transfer your data).
Withdraw consent for optional data processing.
Lodge complaints with supervisory authorities.

10. Age restrictions

Our service is not intended for users under 16 years of age. We do not knowingly collect data from users under 16. If we become aware of such data collection, we will take steps to delete the information.

11. Changes to this policy

We may update this privacy policy periodically. We will notify you of any material changes through:

Email notifications to account holders.
Notices on our platform.
Updated "Last updated" date at the top of this policy.

12. Contact information

For questions about this Privacy Policy or to exercise your rights, please contact our Data Protection Officer at: [email protected].