Data Controller
TripClip ("we", "us", "our") operates the website tripclip.com and is the data controller responsible for your personal data.
For data protection inquiries, contact us at hello@tripclip.com.
Data We Collect
We collect different types of data depending on how you use TripClip:
Account Data
- Email address (when you sign up or sign in via Google/Apple OAuth)
- Name and profile picture (from your OAuth provider, if available)
- Authentication tokens managed by Supabase Auth
Usage Data
- Pages visited, features used, and interactions with the platform
- Device information (browser type, operating system, screen resolution)
- IP address and approximate location (country/city level)
- Referral source (how you found TripClip)
Trip Planning Data
- Itineraries you create, including selected locations, days, and notes
- Shared trip links and access codes
Newsletter Data
- Email address provided for newsletter subscription
- Consent timestamp and subscription preferences
Legal Basis for Processing
Under GDPR (Article 6) and KVKK (Article 5), we process your data based on:
- Consent — Newsletter subscriptions, cookie preferences, and optional analytics.
- Contract Performance — Providing the trip planning service, saving your itineraries, and managing your account.
- Legitimate Interest — Improving our service, preventing fraud, and ensuring platform security.
- Legal Obligation — Complying with applicable laws and regulatory requirements.
For users in Turkey, data processing also complies with KVKK (Kişisel Verilerin Korunması Kanunu) Articles 5 and 6. Explicit consent is obtained where required by Turkish law.
How We Use Your Data
- To provide and maintain the TripClip platform and its features
- To save and sync your trip itineraries across devices
- To generate AI-powered travel itineraries using the Anthropic API
- To send you newsletter emails (only with your explicit consent)
- To improve our platform based on aggregated, anonymized usage patterns
- To respond to your inquiries, support requests, and legal obligations
Third-Party Data Sharing
We share data with third parties only as necessary to provide our services:
- Authentication (Supabase) — Manages user accounts, sessions, and OAuth flows. Data stored in EU-based PostgreSQL databases.
- Hosting (Vercel) — Serves the website globally via edge network. Processes request logs including IP addresses.
- Video Embeds (YouTube/Google) — When you watch embedded videos, YouTube may set cookies and collect data per Google's Privacy Policy. We use youtube-nocookie.com where possible.
- AI Services (Anthropic, Google Gemini) — Anthropic processes your itinerary generation requests. Google Gemini analyzes public YouTube videos. Neither stores your personal data beyond processing.
- Affiliate Partners & Networks (Booking.com, Skyscanner, GetYourGuide, Airalo, HolaFly, CJ Affiliate) — When you click affiliate links, you are redirected to partner sites that have their own privacy policies. We do not share your personal data with these partners. Some affiliate links are managed through CJ Affiliate (Commission Junction), an affiliate marketing network operated by Epsilon International UK Ltd / Commission Junction LLC (part of Publicis Groupe). CJ Affiliate uses tracking technologies including cookies and URL parameters (such as 'cjevent') to accurately attribute referrals. For more information, see CJ's Services Privacy Policy at https://www.cj.com/legal/privacy.
Cookies & Tracking
We use strictly necessary cookies for authentication and language preferences. Marketing cookies (YouTube embeds, affiliate tracking) require your explicit consent.
For full details, see our Cookie Policy
International Data Transfers
Your data may be transferred to and processed in countries outside the EU/Turkey, including the United States (Vercel, Anthropic). These transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.
Supabase stores primary data in EU-region servers. Vercel edge functions may process requests globally.
Data Retention
We retain your data only as long as necessary for the purposes described:
- Account data: retained until you delete your account or request erasure
- Trip data: retained until you delete the trip or your account
- Newsletter subscriptions: until you unsubscribe
- Cookie consent records: 3 years (for regulatory compliance proof)
Your Rights
Under GDPR and KVKK, you have the following rights:
- Right of Access — Request a copy of all personal data we hold about you.
- Right to Rectification — Correct any inaccurate personal data.
- Right to Erasure — Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability — Receive your data in a structured, machine-readable format.
- Right to Object — Object to processing based on legitimate interest.
- Right to Withdraw Consent — Withdraw consent at any time without affecting the lawfulness of prior processing.
Turkish users can exercise their rights under KVKK Article 11 by contacting us. We respond to all requests within 30 days.
To exercise any of these rights, email hello@tripclip.com or use our Data Subject Access Request form.
Children's Privacy
TripClip is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@tripclip.com and we will promptly delete it.
AI Data Processing
TripClip uses AI services to enhance your experience. Anthropic's Claude API processes your itinerary requests to generate personalized travel plans. Google's Gemini AI analyzes publicly available YouTube video content to extract location data.
AI-generated content (itineraries, location descriptions) is provided as suggestions only and should not be relied upon as professional travel advice. We do not use AI to make automated decisions that significantly affect you.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via email (if you have an account) or a prominent notice on our website. Continued use of TripClip after changes constitutes acceptance.
Contact Us
For any privacy-related questions, data requests, or complaints:
Email: Email →
