Privacy Policy

1. Who we are

TripLike Internet S.L. ("TripLike", "we") operates triplike.net. For GDPR purposes, we are the data controller. Contact: privacy@triplike.net.

2. Data we collect

• Account data: name, email address (collected on registration or booking)
• Booking data: travel details, passenger information, payment confirmation tokens
• Usage data: pages visited, searches performed (via analytics)
• Technical data: IP address, browser type, device (via server logs)
• Atlas data: saved conversations, AI responses, search-result snapshots, and images you choose to attach

3. How we use your data

• To process and manage your bookings
• To send booking confirmations and transactional emails (via Resend)
• To authenticate your account (via Supabase)
• To process payments (via Stripe; we do not store full card numbers)
• To improve our platform (aggregated analytics)
• To save and restore Atlas conversations for signed-in users
• To comply with legal obligations

4. Data sharing

We share data only as needed with: Duffel (flight booking), LiteAPI/Nuitée (hotel booking), Stripe (payment processing), Supabase (database, authentication, and private image storage), OpenRouter and its selected model provider (AI responses), and Resend (email delivery). Provider availability is constrained by our configured privacy controls.

5. Retention

• Booking records: 7 years (legal obligation)
• Account data: until account deletion
• Analytics: 26 months
• Unpinned Atlas chats and normalized images: 12 months after last activity; deletion sooner on request

6. Your rights (GDPR)

You have the right to: access your data, correct inaccuracies, delete your account and data, restrict or object to processing, data portability. To exercise these rights, email privacy@triplike.net.

7. Cookies

We use strictly necessary cookies for authentication and a consent-gated analytics cookie. See our Cookie Policy.

8. Changes

We may update this policy. Material changes will be communicated by email.