At TripF, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your data.
This policy applies to all Platform users and complies with the Saudi Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR) where applicable.
Data you provide directly: Full name, email address, and profile photo (via Google account), travel preferences (budget, interests, dietary requirements), and created trip plans.
Payment data: Processed directly by our approved payment providers. We do not store credit card numbers or sensitive payment data.
Data collected automatically: IP address, browser and device type, pages visited and visit times, performance and error data.
Data from third parties: When signing in via Google, we receive your name, email, and profile photo only.
Creating and managing your personal account.
Generating personalized travel plans using AI based on your preferences.
Processing payments and managing subscriptions.
Sending service notifications such as renewal reminders and payment confirmations.
Improving the service and developing new features.
Detecting abuse and protecting Platform security.
We never use your data for targeted advertising.
With essential service providers: Cloud database provider, AI processing provider (no personally identifiable data sent), payment processing provider, website hosting provider, email delivery provider, Google Analytics (usage analytics).
We never sell your personal data to any third party.
We may share data with government authorities when legally required under Saudi Arabian law.
We use TLS/SSL encryption to protect data in transit.
Passwords are hashed using bcrypt via Supabase.
Row Level Security (RLS) is enforced at the database level to prevent unauthorized access.
Your data may be hosted on cloud servers located outside Saudi Arabia with approved service providers.
We retain your data for the duration of your active account, plus 90 days after account deletion for legal purposes.
Right of Access: You may request a copy of all personal data we hold about you.
Right of Rectification: You can update your personal data from your account page at any time.
Right of Erasure: You may request deletion of your account and all associated data.
Right of Portability: You can export your trip data in PDF format.
Right to Object: You may object to the processing of your data for certain purposes.
Right to Withdraw Consent: You may withdraw your consent to data processing at any time.
Response time for rights requests: Maximum 30 business days.
The Service is not directed at persons under 18 years of age.
We do not knowingly collect personal data from children.
If we discover data has been collected from a minor, it will be deleted immediately.
Your data may be transferred and processed outside Saudi Arabia by approved cloud service providers in various countries.
We ensure all transfers comply with appropriate safeguards in accordance with the Saudi PDPL.
In the event of a security breach affecting your personal data, we will notify you and the relevant authorities within 72 hours of discovering the breach.
The notification will include: the nature of the breach, data affected, actions taken, and recommendations for protecting yourself.
We may update this policy from time to time. You will be notified of material changes via email.
Your continued use of the Platform after an update constitutes acceptance of the updated policy.
For privacy inquiries or to exercise your rights, contact us at:
Email: support@tripf.com
Company: Company Creative AI Models
Address: Riyadh, Kingdom of Saudi Arabia
