Privacy Policy

1. Information We Collect

When you use TripTrace, we collect the following categories of information:

Account Information: When you create an account, we collect your email address and authentication credentials. Your password is managed through our authentication provider (Supabase) and is never stored in plain text.

Financial Transaction Data: When you connect your financial accounts through Plaid, we receive transaction data including merchant names, transaction dates, amounts, and merchant location information. We use this data to identify travel-related transactions and reconstruct your travel history. We do not receive or store your bank login credentials — those are handled exclusively by Plaid.

Usage Data: We collect anonymized analytics data through Google Analytics, including pages visited, session duration, and general geographic region. This data is used to improve the service and cannot be used to identify you personally.

2. How We Use Your Information

We use your information solely for the purpose of providing and improving the TripTrace service. Specifically, we use your transaction data to analyze spending patterns, identify international travel, determine trip dates and destinations, and generate your travel history timeline. We use your email address to communicate with you about your account and the service.

We do not sell your personal information. We do not use your data for advertising. We do not share your information with any government agency, including USCIS and CBP.

3. Data Sharing

We share your information only with the service providers necessary to operate TripTrace: Plaid Technologies, Inc. for secure financial account connectivity; Supabase for authentication and data storage; Google Analytics for anonymized usage analytics; and our hosting provider for securely serving the application.

We may also disclose your information if required by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights, prevent fraud, or protect the safety of users or the public.

4. Data Security

We implement commercially reasonable security measures to protect your information. All data transmitted between your browser and our servers is encrypted using TLS. Your financial credentials are never stored on our servers and are handled exclusively by Plaid's secure infrastructure. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

TripTrace retains your transaction data for a maximum of thirty (30) days from the date of collection. After this period, your transaction data is automatically and permanently deleted. Account information (email, authentication) is retained for as long as you maintain an active account. Anonymized analytics data that cannot identify you is retained indefinitely for service improvement.

6. Your Rights

You have the right to access, correct, or delete your personal information at any time. You may request deletion of your account and all associated data by contacting us at [email protected]. Upon receiving a verified deletion request, we will permanently delete your information within fourteen (14) business days.

You may disconnect your financial accounts at any time through your account settings. If you are a resident of California, the EEA, or another jurisdiction with additional privacy rights, please contact us to exercise those rights.

7. Children's Privacy

TripTrace is not intended for use by individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Your continued use of the service after changes indicates acceptance of the updated policy.

9. Contact Us

Questions about this Privacy Policy? Contact us at [email protected].