Privacy Policy | Trailblazer

1. Introduction

Trailblazer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trip planning service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service:

Account Information: Name, email address, password
Profile Information: Optional profile photo, preferences
Trip Data: Destinations, dates, activities, notes, and other travel information
Payment Information: Billing details (processed securely by third-party payment processors)

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

Usage Data: Pages visited, features used, time spent, clicks
Device Information: Browser type, operating system, device type
Log Data: IP address, timestamps, error logs
Cookies: Session cookies, preference cookies, analytics cookies

2.3 AI Feature Data

When you use AI-powered features:

We send your travel preferences and destination to OpenAI's API
OpenAI processes this data to generate suggestions
OpenAI's data usage is governed by their privacy policy
We do not train AI models on your personal data

3. How We Use Your Information

We use your information to:

Provide the Service: Create and manage your trips, sync across devices
Improve the Service: Analyze usage patterns, fix bugs, develop new features
Communicate: Send account notifications, updates, and support responses
Security: Detect and prevent fraud, abuse, and security threats
Legal Compliance: Comply with legal obligations and enforce our Terms

4. How We Share Your Information

4.1 We DO NOT Sell Your Data

We will never sell your personal information to third parties.

4.2 Service Providers

We share data with trusted service providers who help us operate the Service:

Supabase: Database hosting and authentication
Vercel: Hosting and deployment
OpenAI: AI-powered suggestions
Stripe: Payment processing (if applicable)
Email Service: Transactional emails and notifications

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal process (subpoena, court order)
Requests from law enforcement or government authorities
Protection of our rights, property, or safety
Prevention of fraud or illegal activity

4.4 Business Transfers

If Trailblazer is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as:

Your account is active
Needed to provide you the Service
Required for legal obligations
Necessary for legitimate business purposes

When you delete your account, we will delete your personal data within 30 days, except for data we are legally required to retain (e.g., financial records, security logs).

6. Data Security

We implement security measures to protect your information:

Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
Access Controls: Limited access to personal data on a need-to-know basis
Authentication: Secure password hashing, optional two-factor authentication
Monitoring: Regular security audits and vulnerability assessments

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to:

Access your personal data
Export your data in a portable format (JSON)

7.2 Correction and Deletion

You can:

Update your account information in your profile settings
Delete your account and all associated data

7.3 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights:

Right to be forgotten: Request deletion of your data
Right to restrict processing: Limit how we use your data
Right to object: Object to certain processing activities
Right to lodge a complaint: Contact your local data protection authority

7.4 CCPA Rights (California Users)

If you are a California resident, you have the right to:

Know what personal information we collect
Know if we sell or disclose your personal information (we don't sell)
Opt-out of the sale of personal information
Request deletion of your personal information
Non-discrimination for exercising your rights

8. Cookies and Tracking

We use cookies and similar technologies for:

Essential Cookies: Authentication, security, basic functionality
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Understand how users interact with the Service

You can control cookies through your browser settings, but this may affect functionality.

9. Children's Privacy

Trailblazer is not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If we learn that we have collected personal information from a child, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new policy on this page
Updating the "Last updated" date
Sending you an email notification (for material changes)

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@trailblazer.app

For GDPR-related inquiries, contact our Data Protection Officer at: dpo@trailblazer.app

13. Third-Party Services

Our use of third-party services is governed by their respective privacy policies: