Privacy Policy

1. Who We Are

TripSlate ("we," "us," or "our") operates the website tripslate.net and the TripSlate trip organization service. We are based in the United States. Questions about this policy can be sent via the feedback form

2. What Data We Collect

We collect only what is necessary to provide the Service:

Account data

• Email address
• Name (optional, if provided)
• Hashed password (we never store your plain-text password)

Trip data

• Trips, stops, day plans, activities, and notes you create
• Budget and expense entries
• Accommodation options and links you save

Usage data

• Basic server logs (IP address, browser type, pages visited) for security and debugging
• We do not use third-party analytics or tracking pixels

Payment data

• Payments are processed by Stripe. We receive only a transaction confirmation and your billing plan status — we never see or store your card number

3. How We Use Your Data

We use your data to:

• Provide and operate the Service
• Authenticate your account and keep it secure
• Process payments and manage your subscription
• Send transactional emails (account confirmation, password reset)
• Respond to support requests
• Diagnose technical issues and improve the Service

We do not sell your data. We do not use your trip content for advertising or share it with third parties for marketing purposes.

4. How We Store and Protect Your Data

• Data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-1 region)
• Data is encrypted at rest (AES-256) and in transit (TLS/HTTPS)
• Passwords are hashed using a secure one-way algorithm — we cannot recover your password
• Access to production data is restricted to authorized personnel only
• Automated daily backups are retained for 7 days

5. Data Sharing

We share your data only with the following service providers, strictly to operate the Service:

• Amazon Web Services — cloud hosting and database storage
• Stripe — payment processing (governed by Stripe's Privacy Policy)

We do not share your data with advertisers, data brokers, or any other third parties.

6. Cookies

TripSlate uses only essential cookies required for authentication (session tokens). We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

7. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update your account information at any time in settings
• Deletion — delete your account and all associated data from account settings. Deletion is permanent and processed within 30 days
• Portability — request an export of your trip data by contacting us
• Opt-out — unsubscribe from non-transactional emails at any time

To exercise any of these rights, contact us via the feedback form

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us via the feedback form

9. Children's Privacy

TripSlate is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. Data Retention

We retain your account and trip data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. Backup copies may persist for up to 7 additional days before being overwritten.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions or concerns about this Privacy Policy? Contact us via the feedback form