TripdashHome

Privacy Policy

For travellers using the Tripdash platform

1. General

1.1 This Privacy Policy explains how Tripdash (“Platform”) collects, uses, and shares personal information about travellers (“Traveller”) who use our websites and applications (the “Platform”) in the United States, including the AI itinerary assistant and any engagement with an independent travel agent (“Agent”) through the Platform.

1.2 This Privacy Policy applies to Travellers located in the United States.

1.3 Capitalised terms not defined in this Privacy Policy have the meaning given in the Terms and Conditions.

1.4 Personal information means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual or household, as defined under applicable US state privacy law.

1.5 Platform is the party responsible for the personal information described in this Privacy Policy, except personal information that you and your Agent provide directly to each other outside the Platform, as described in Section 4.

1.6 Contact: support@tripdash.net

2. Data processing principles

2.1 We aim to: collect only the personal information reasonably necessary for the purposes described in this Privacy Policy; use it only for those purposes; keep it accurate and current; retain it no longer than necessary; and protect it with appropriate security measures.

3. Personal information we collect, why we use it, and how long we keep it

3.1 Account and registration. Your name, email address, phone number, and authentication data — to create and manage your Account, communicate with you, and provide the Service. Retained while your Account is active and for 2 years afterward.

3.2 The AI Itinerary Assistant. Your trip-planning inputs (such as destinations, dates, and preferences) and the content of your conversations with the AI Itinerary Assistant — to generate itinerary suggestions and improve the Service. Retained for 1 years, or as needed to resolve a support request. See also Section 6.

3.3 Connecting you with an Agent. Your name, surname, email address, phone number, and trip requirements — to match you with a suitable Agent and enable the Agent to contact you. See Section 4 for what we share with your Agent. Retained while your Account is active and for 2 years afterward.

3.4 Bookings and payment records. Transaction records related to a Booking, such as the Agent engaged, service dates, and amount charged — to operate the Platform, display your booking history, and calculate any Commission owed to us by the Agent. We do not collect or store your full payment card number or bank account details; these are collected and held only by our Payment Service Provider (PSP), a separate responsible party. Retained for 3 years for accounting and dispute-resolution purposes.

3.5 Customer support. Your communications with our support team — to respond to your query. Retained for 3 years after your query is resolved.

3.6 Platform security and analytics. Device and usage data, which may include IP address, browser type, and pages visited, obtained using cookies and similar technologies (see Section 8) — to operate, secure, and improve the Platform. Retained for 1 year, unless a longer period is needed for a security investigation.

3.8 Legal claims and compliance. Personal information reasonably necessary to establish, exercise, or defend legal claims, or to comply with a legal obligation. Retained for as long as necessary for that purpose.

3.9 We do not collect, and do not need, your government-issued identity documents (such as your passport number) or your full payment card or bank account details. If your Agent asks you for this information to complete a Travel Service booking, you provide it directly to your Agent, through the secure channel the Agent or Platform designates, and not to Platform, as described in Section 7.3 of the Terms and Conditions. Your Agent, not Platform, is responsible for that information.

4. What we share with your Agent

4.1 If you choose to engage an Agent through the Platform, we share your name, surname, email address, and phone number with that Agent, so the Agent can identify you, communicate with you, and arrange the Travel Services you request. This is the only personal information we share with an Agent.

4.2 We also share your ratings and reviews of an Agent, and limited booking-related information (such as destination and dates), with that Agent so they can respond to you and manage the booking.

4.3 We do not share your payment card or bank account details, passport or other identity-document information, or health or accessibility information with an Agent, because we do not collect or hold this information in the first place. If you provide any of this information directly to your Agent — for example, to complete a booking — it does not pass through our systems and is not “shared” by us; your Agent receives it directly from you and is responsible for it in its own right.

5. Other sharing of your personal information

5.1 Payment Service Provider. We share the transaction information necessary for our PSP to process a payment (such as the amount and the parties involved). The PSP collects and holds your full payment details directly, as its own responsible party.

5.2 Service providers. We share personal information with providers who help us operate the Platform, including hosting, IT, customer support, and analytics providers, under contracts that require them to protect your information and use it only to provide services to us.

5.3 AI service providers. We may share limited data with third-party providers that power the AI Itinerary Assistant, insofar as reasonably necessary to provide that feature (see Section 6).

5.4 Legal and safety. We may disclose personal information to comply with the law or legal process, to enforce our Terms and Conditions, or to protect the rights, safety, or property of Platform, our users, or the public, including to investigate fraud.

5.5 Business transfers. We may disclose personal information in connection with a merger, acquisition, financing, or sale of assets.

5.6 We do not sell your personal information, and do not share it for cross-context behavioural advertising, for money or other valuable consideration, as those terms are defined under the CCPA/CPRA.

6. The AI Itinerary Assistant and automated processing

6.1 When you use the AI Itinerary Assistant, you are interacting with an automated, artificial intelligence system, not a human travel agent. We disclose this plainly in accordance with California’s bot-disclosure law and SB 243.

6.2 We process your trip-planning inputs and conversation content to generate itinerary suggestions, and may use aggregated or de-identified conversation data to improve our AI models and the Service generally.

6.3 The AI Itinerary Assistant does not make any decision about you that produces a legal or similarly significant effect. If our systems ever use automated means to make such a decision — for example, restricting your Account — you may request human review by contacting us using the details in Section 15.

6.4 Our AI service providers process data as described in Section 5.3, subject to confidentiality and security obligations.

7. Marketing communications

7.1 We may use marketing tools of social media platform operators (e.g. Google LLC, Meta Platforms Inc.) or other third party and, therefore, share your Personal data relevant for marketing operations to such social media platform operators or other third party for marketing purposes.

7.2 We may contact you via email or phone to inform on what we are up to (we may send newsletters, the latest information about our products and services, special offers, marketing campaigns). Also, we may inform you about our similar products and services that might interest you via email. You have a right to object to such your Personal data processing at any time. We may share your contact information with our group companies for direct marketing purposes.

7.3 You may opt-out of receiving marketing communications at any time. You may do so by choosing the relevant link in our marketing messages or contacting us via means provided on our website, or you can contact us via email. If you are receiving both email and phone marketing communications and you wish to opt-out of receiving them, you will need to opt out separately by following the relevant link in any of our marketing messages or contacting us via means provided in our Website or this Policy.

7.4 Upon you having fulfilled any of the provided actions we will update your profile to ensure that you will not receive our marketing communication in the future.

7.5 In case you opt-out of receiving marketing communications, we will immediately stop sending marketing communications to you. Nevertheless, please be informed that as our business activities consists of a network of closely related services, in certain cases, it may take a few days until all the systems are updated, thus you may continue to receive marketing communication while we are still processing your request.

7.6 In any case, the opt-out of the marketing communications will not stop you from receiving communication directly related to the provision of services.

8. Cookies and tracking technologies

8.1 We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how the Platform is used. Please refer to our Cookie Policy.

9. Security of your personal information

9.1 We use appropriate technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction, including encryption in transit and at rest where appropriate, access controls, and confidentiality obligations for our staff.

9.2 No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.3 If we experience a security incident affecting your personal information, we will notify you and, where required, regulators, in accordance with applicable law.

10. Your privacy rights

10.1 If you are a California resident, you have the following rights under the CCPA/CPRA:

  • (a) Right to know / access — what personal information we have collected, used, and disclosed about you;
  • (b) Right to delete — request deletion of your personal information, subject to exceptions such as completing a transaction, legal compliance, or security;
  • (c) Right to correct — request correction of inaccurate personal information;
  • (d) Right to opt out of sale or sharing — we do not sell or share your personal information as described in Section 5.6, so there is nothing to opt out of at this time; if this changes, we will provide the required opt-out mechanism;
  • (e) Right to limit use of sensitive personal information — where applicable to information we hold about you;
  • (f) Right of no retaliation — we will not discriminate against you for exercising a privacy right.

10.2 If you are a resident of Virginia, Colorado, Connecticut, Texas, or another US state with a comprehensive privacy law, you may have similar rights, including rights to access, delete, correct, and obtain a copy of your personal information, to opt out of certain processing, and, in several states, to appeal a decision we make on your request. Contact us using the details in Section 15 to exercise any right described in this Section, and we will respond within the time required by the law that applies to you.

10.3 To exercise a right, contact us. We may need to verify your identity before acting on your request. You may designate an authorised agent to make a request on your behalf, subject to verification.

11. Children’s privacy

11.1 The Platform is not directed at children, and we do not knowingly collect personal information from children under 13, or the applicable age under COPPA and other US children’s privacy law, without the consent that law requires. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it. See also Section 3.1 of the Terms and Conditions regarding age eligibility.

12. Third-party websites

12.1 The Platform may link to third-party websites. Their privacy practices are governed by their own privacy policies, not this one. We recommend reviewing the privacy policy of any third-party website before providing it with personal information.

13. Data scraping

13.1 Automated collection of data from the Platform (“data scraping”), including by software, bots, or scripts, is strictly prohibited without our explicit written consent.

14. Changes to this Privacy Policy

14.1 We may update this Privacy Policy from time to time. We will notify you of a material change by email or a notice on the Platform before it takes effect.

15. Contact us

15.1 For any question about this Privacy Policy or to exercise a privacy right, contact us at matas@tripdash.net