Privacy Policy

1. Introduction

Pick My Trip ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered travel planning service (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide to us, including:

• Account Information: Name, email address, and password when you create an account
• Profile Information: Travel preferences, visited countries, and trip history
• Travel Queries: Destination preferences, travel dates, and itinerary requests you submit
• Payment Information: Billing details processed securely through Stripe (we do not store full payment card details)
• Communications: Information you provide when contacting us for support

2.2 Information from Third-Party Authentication

When you sign in using Google Authentication, we receive:

• Your Google account email address
• Your name as registered with Google
• Your unique Google account identifier

We do not receive or store your Google password. Google Authentication is used solely to verify your identity and create or access your Pick My Trip account.

2.3 Automatically Collected Information

When you use the Service, we may automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on the Service
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Generate personalized travel recommendations and itineraries
• Process transactions and manage your subscription
• Authenticate your identity and manage your account
• Send you service-related communications and updates
• Respond to your inquiries and provide customer support
• Analyze usage patterns to enhance user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Google: Authentication services and maps functionality
• Stripe: Payment processing
• MongoDB: Database hosting and storage
• Vercel: Website hosting and analytics
• AI Service Providers: Processing travel queries to generate recommendations

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

4.3 Business Transfers

If Pick My Trip is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure password hashing using industry-standard algorithms
• HTTP-only, secure cookies for authentication tokens
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes. If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

13. Additional Information for EEA/UK Users

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to lodge a complaint with your local data protection authority
• The right to restrict processing of your personal data
• The right not to be subject to automated decision-making

Our legal basis for processing your personal data includes: performance of our contract with you, your consent, our legitimate interests (such as improving our services), and compliance with legal obligations.