Privacy policy

Who controls your information

Build a Trip is operated by Shai Chikorel. Contact the data controller at chikosan@gmail.com.

Information we collect

• Account details, including your name, email address, profile image, and preferences
• Trip content, travelers, destinations, bookings, activities, notes, and shared access
• Documents and emails you choose to send to a trip
• Technical events, errors, feature usage, device class, and privacy-safe identifiers
• Messages and support information you send to us

Do not upload passport numbers, payment-card details, or information you do not have the right to share. We minimize sensitive values during document processing and diagnostics.

How we use information

• Provide your itinerary, timeline, maps, weather, flight status, sharing, and documents
• Extract travel details and generate suggestions with artificial intelligence
• Secure accounts, prevent abuse, diagnose failures, and operate the service
• Measure product performance when you have accepted analytics collection
• Comply with law and enforce our terms

We rely on contract performance to provide requested features, consent for optional analytics, legitimate interests for security and reliability, and legal obligations where they apply. You can withdraw optional consent in your profile.

Google account and Places data

Google sign-in gives us your basic profile, email address, and profile image. We use these values only to create and secure your account. Google Places and Weather receive the place query or coordinates needed to return the result you requested. Build a Trip's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Service providers and international transfers

We use infrastructure, storage, email, mapping, weather, flight-information, security, and artificial-intelligence providers to operate requested features. Current categories include Hetzner and Coolify-hosted infrastructure, Cloudflare R2 storage, Google services, OpenRouter model access, AeroDataBox flight data, Resend or SMTP email delivery, and malware scanning. Providers receive only the data needed for their task.

Providers may process information outside your country. We use applicable contractual and technical safeguards for transfers, access controls, encryption in transit, and restricted service credentials.

Retention and deletion

Active trip and account information remains available while your account is active. You can delete a trip or request account deletion. Related trip records and stored files are removed through the deletion workflow, subject to short operational backups, security records, legal obligations, and dispute preservation. Privacy-safe diagnostic and agent telemetry has a limited retention period. We keep provider cost records without document or message content.

Your choices and rights

Depending on your location, you may request access, correction, export, deletion, restriction, or objection. You may withdraw consent and complain to your local data protection authority. Email us from your account address to make a request. We may verify your identity before acting.

Children and changes

Build a Trip is not directed to children under 16. An adult may include limited traveler information needed for a family trip. We will post material policy changes here and request renewed consent when required.