Privacy Policy
Last updated: 29 October 2026
This Privacy Policy explains what personal data AI Trip Planner collects when you use ai-trip-planner.com (the "Service"), how we use it, and the rights you have. The Service is operated from North Macedonia, and AI Trip Planner ("we", "us") is the data controller for this data. If you have any questions, contact us at contact@ai-trip-planner.com.
1. Data we collect
- Account data: your email address, first name, and last name, provided when you register.
- Trip inputs: the planning details you enter — destination, dates, interests, starting point, and similar preferences.
- Generated content: the itineraries and place suggestions we create for you, stored so you can revisit them.
- Technical data: basic information necessary to operate the Service, such as request logs and your authentication token.
We do not collect payment card details, and we do not sell your personal data.
2. How we use your data
- to create your account and sign you in with a one-time email link or code;
- to generate travel itineraries based on your inputs;
- to send you service emails (for example, your sign-in link or code and your generated plans);
- to operate, secure, maintain, and improve the Service.
3. Legal bases (GDPR)
Where the GDPR applies, we process your data on the basis of: performance of a contract (to provide the Service you request), our legitimate interests (to secure and improve the Service), and your consent where required. You can withdraw consent at any time.
4. Service providers we share data with
To run the Service, we use trusted providers who process data on our behalf:
- Amazon Web Services (AWS) — hosting and our database, located in the EU (Frankfurt, Germany).
- OpenAI — generates place suggestions and itineraries from your trip inputs. This may involve transferring those inputs to servers in the United States.
- Paddle — our payment processor and Merchant of Record. When you buy credits, Paddle handles checkout, billing, tax, and payment-card data under its own privacy policy, acting as an independent controller. We never receive your full card details.
- Geoapify — converts the place names in your itinerary into map coordinates so we can show them on a map.
- Resend — delivers our transactional emails (EU region).
- Cloudflare — DNS, content delivery, and email routing for our contact@ address.
- Google AdSense and, in our Android app, Google AdMob — show advertising on our example itinerary and travel story pages. Google acts as an independent controller for the data it collects to serve and measure ads; see how Google uses information from sites that use its services.
- Google Analytics — tells us how the website (not our Android app) is used: which pages are visited, from where, on what kind of device, and how many visitors go on to generate a plan or buy credits. It never receives your name, email address, or the contents of your plans, and Google does not store IP addresses. See how Google uses information from sites that use its services.
- Meta (Facebook and Instagram) — measures our ads on Facebook and Instagram and helps them reach people likely to be interested. On the website (not in our Android app), with your consent where the law requires it, the Meta Pixel tells Meta which of our pages you visit. When you then create an account or buy credits, we tell Meta so too, with your email address and account ID in hashed (scrambled) form, your browser's Meta Pixel identifiers, its user agent and, for an account, its IP address — so Meta can tell which ad, if any, brought you. Meta never receives the contents of your plans. Meta acts as a joint controller with us for collecting this data and as an independent controller for what it does with it afterwards; see Meta's Privacy Policy.
- Travelpayouts — our affiliate network. On the website (not in our Android app), a Travelpayouts script loads in your browser, which receives your IP address and may set its own cookies to attribute bookings made through our partner links.
These providers are only permitted to use the data to provide their services to us (Paddle, as Merchant of Record, also acts under its own terms). When a map is shown, map tiles and any "Directions" links load directly in your browser from their providers (such as OpenFreeMap and Google Maps), which necessarily receive your IP address as part of that request.
Itineraries and stories include affiliate links to our booking partner GetYourGuide. We send it nothing until you open one of these links. When you do, the link itself carries a search for tours and tickets: the name of the place or experience and its destination, or a story's destination, together with our partner ID. It never carries your name, email address or account. GetYourGuide may set its own cookies to credit the booking to us, and handles any booking under its own privacy policy.
Itineraries also link to travel services through our affiliate network Travelpayouts: flights (Kiwi.com), eSIMs (Yesim), travel insurance (EKTA), airport transfers (Kiwitaxi), attraction tickets (Tiqets), car and bike rental (Localrent, BikesBooking), luggage storage (Radical Storage) and flight-delay compensation (AirHelp). These links carry our Travelpayouts account and project IDs and, for Tiqets, the trip's destination; never your name, email address or account. Opening one passes through Travelpayouts to the partner, and both may set their own cookies to credit a booking to us. The partner handles any booking under its own privacy policy.
5. International transfers
Our hosting and database are in the EU. Some providers (such as OpenAI) may process data outside the EU, including in the United States. Where that happens, such transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
6. Data retention
We keep your account data and generated plans for as long as your account is active. You can delete your account at any time, on the website or in the app; your account and plans are then deleted immediately. We keep records of credit purchases (the payment reference and number of credits, without your name or email address) for as long as accounting and tax law requires, and a one-way, keyed fingerprint of your email address (never the address itself), so that an account created again with the same email doesn't receive the free plan credit a second time.
7. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request deletion of your data ("right to be forgotten");
- object to or restrict certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent.
You can delete your account yourself at any time (see Delete your account). To exercise any of the other rights, email contact@ai-trip-planner.com. You also have the right to lodge a complaint with your local data-protection supervisory authority.
8. Cookies & local storage
To keep you signed in, we store an authentication token in your browser's local storage. Clearing your browser storage or signing out removes it.
We use Google AdSense to show ads on our example itinerary and travel story pages. Google and its partners may use cookies and similar technologies to serve ads, limit how often you see them, and measure their performance, and — with your consent — to personalise ads based on your visits to this and other websites. If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any such cookies are used, and you can change your choice at any time through the consent message. You can also manage ad personalisation in Google's Ad Settings.
We use Google Analytics to understand how the website is used. It sets cookies that tell returning visits from new ones. In the European Economic Area, the United Kingdom and Switzerland those cookies are only set with your consent, given through the same consent message; without it, Google receives only anonymous, cookieless counts. You can also opt out everywhere with the Google Analytics opt-out browser add-on.
We use the Meta Pixel to measure our ads on Facebook and Instagram and to show them to people who visited the website. It sets cookies that recognise your browser and the ad you came from. In the European Economic Area, the United Kingdom and Switzerland it only runs with your consent, given through the same consent message; without it, Meta hears nothing about your visit, your account or your purchases. You can also manage the ads Meta shows you in your Meta ad preferences.
In our Android app the same pages show ads through Google AdMob, which may use your device's advertising ID for the same purposes. The app asks for consent where the law requires it, and you can reset or delete the advertising ID in your device settings (Settings → Google → Ads).
9. Data security
We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls. No system is completely secure, but we work to keep your data safe.
10. Children
The Service is not directed at children under the age of digital consent in their country, and we do not knowingly collect their personal data.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will update the date above and, where appropriate, notify you of material changes.
12. Contact
For any privacy questions or requests, email contact@ai-trip-planner.com.
See also our Terms of Service and Refund Policy.