1. Introduction
SnapTrip ("we," "us," or "our") operates the website snaptripai.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Data: Name, email address, and password when you create an account.
- Trip Preferences: Budget, travel dates, interests, traveler type, pace, and destination choices you submit to generate trip plans.
- Uploaded Images: Photos you upload via Snap Trip for AI-based destination recognition.
- Chat Messages: Conversations with Maya, our AI travel assistant.
- Payment Information: Processed securely through Stripe. We never store your full card number.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, trip generation events, and interaction patterns.
- Device Data: Browser type, operating system, IP address, and general location (country/region level).
- Cookies: We use essential cookies for authentication (JWT session token). We do not use third-party advertising cookies.
2.3 Third-Party Sign-In
If you sign in with Google, we receive your name, email, and profile picture from Google. We do not access your Google contacts, calendar, or other data.
3. How We Use Your Information
- Generate personalized AI trip plans and recommendations.
- Process and analyze uploaded images for destination identification.
- Send transactional emails (verification, password reset, trip reminders).
- Process payments and manage subscriptions via Stripe.
- Improve our AI models, Service quality, and user experience.
- Prevent fraud, abuse, and enforce rate limits.
- Respond to support inquiries.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. AI & Data Processing
SnapTrip uses Anthropic's Claude AI to generate trip plans and power the Maya assistant. When you use these features:
- Your trip preferences and chat messages are sent to Anthropic's API for processing.
- Uploaded images are sent to the AI for visual analysis and are not stored permanently on our servers after processing.
- We may cache AI-generated results (trip plans) for up to 24 hours to improve performance. Cached data is anonymized and does not include personal identifiers.
- Anthropic's data handling is governed by their own privacy policy at anthropic.com/privacy.
5. Data Sharing & Third Parties
We share data only with the following service providers:
- Anthropic: AI trip generation and chat processing.
- Stripe: Payment processing and subscription management.
- Resend: Transactional email delivery.
- Neon (PostgreSQL): Database hosting.
- Vercel: Application hosting and deployment.
We may also disclose information if required by law, court order, or to protect the safety and rights of our users.
6. Data Retention
- Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
- Trip plans: Stored indefinitely for your access. Deleted when you delete a trip or your account.
- Uploaded images: Processed in-memory and not stored after AI analysis is complete.
- AI cache: Automatically expires after 24 hours.
- Analytics events: Retained for up to 12 months for product improvement.
7. Data Security
We implement industry-standard security measures including:
- Passwords hashed with bcrypt (never stored in plain text).
- JWT-based authentication with httpOnly secure cookies.
- HTTPS encryption for all data in transit.
- Rate limiting to prevent brute-force and abuse.
- Database hosted on Neon with encryption at rest.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data.
- Export your trip data.
- Withdraw consent for data processing.
- Object to certain processing activities.
To exercise any of these rights, contact us at hello@snaptripai.com. We will respond within 30 days.
9. Cookies
We use only essential cookies required for the Service to function:
- Session cookie (token): Stores your encrypted authentication token. httpOnly, secure, expires on logout or after 7 days.
We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
10. Children's Privacy
SnapTrip is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
11. International Users
Our Service is hosted in the United States. If you access the Service from the European Union, United Kingdom, or other regions with data protection laws, please note that your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at: