Privacy Policy

Overview

TripCollect ("we", "our", "the extension") is a Chrome browser extension that helps you save, compare, and collaborate on travel research. This privacy policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Account Information (via Google Sign-In):

• Name (from your Google profile)
• Email address
• Profile photo URL

This data is provided by Google OAuth and is used to identify you within the app and to your travel companions on shared boards.

Travel Data You Save:

• Hotel/accommodation details you choose to save (name, price, rating, photos, address, amenities)
• The source URL from which you saved an item (e.g., a Booking.com or Airbnb listing page)
• Board names and destinations you create
• Comments, notes, and votes you add to items

What We Do NOT Collect:

• We do not track your general browsing history
• We do not collect data from pages you do not explicitly save
• We do not use cookies for advertising or tracking
• We do not collect payment information

2. How We Use Your Data

• Core functionality: Storing and displaying your saved travel items, boards, votes, and comments
• Collaboration: Showing your name and avatar to other members on shared boards
• Notifications: Alerting you when new items are added to your boards (browser notifications, if permitted)

We do not use your data for advertising, profiling, or any purpose unrelated to the core TripCollect functionality.

3. Data Storage and Third Parties

Your data is stored securely using Supabase, a hosted PostgreSQL database service. Supabase provides:

• Row-level security (RLS) ensuring users can only access data they are authorized to see
• Encrypted connections (TLS/SSL) for all data in transit
• Data hosted in the EU or US depending on project configuration

Authentication is handled via Google OAuth. We do not store your Google password. Google's privacy policy applies to the authentication process itself.

We do not share, sell, or transfer your data to any other third parties.

4. Permissions Explained

TripCollect requests the following Chrome permissions:

• storage: To store your authentication session and preferences locally in the browser
• activeTab: To read travel listing data from the currently active tab when you click the save button
• notifications: To notify you when collaborators add items to shared boards
• identity: To facilitate Google Sign-In for authentication
• scripting: To inject the save button on travel websites
• Host permissions (all URLs): TripCollect works on major travel sites (Booking.com, Airbnb, TripAdvisor, Expedia, VRBO, Google Maps) and can also detect travel listings on any other website using content-based analysis. The extension only reads page data when you explicitly click the save button — it never collects or transmits data from pages you don't interact with.

5. Data Retention and Deletion

Your data is retained as long as your account is active. You can delete your data at any time:

• Delete individual items: Remove saved items from your boards
• Delete boards: Remove entire boards and all their contents
• Delete account: Contact us to request complete account deletion, which removes all your data including profile, boards, items, votes, and comments

6. Children's Privacy

TripCollect is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the extension after changes constitutes acceptance of the revised policy.

8. Contact

If you have questions about this privacy policy or want to request data deletion, please contact us at:

Email: privacy@tripcollect.app