Privacy Policy

1. Who We Are

SmarTrip ("we," "us," or "our") operates the website smartrip.me. We are based in Israel. For any privacy-related questions, contact us at info@smartrip.me.

2. What Data We Collect

2.1 Account Information

When you sign in with Google OAuth, we receive and store:

• Your name
• Your email address
• Your Google profile photo URL

We do not receive or store your Google password.

2.2 Trip Data

When you use SmarTrip, we collect:

• Trip preferences you provide (destination, dates, budget, travel style, number of travelers)
• Generated itineraries and plan data
• Booking status (whether you marked an item as booked)

2.3 Automatically Collected Data

• Browser type and version
• Device type (mobile, desktop)
• Pages visited and interactions (via Google Analytics)
• Error logs and performance data (via Sentry)
• IP address (processed but not stored long-term)

3. How We Use Your Data

• To generate personalized trip itineraries based on your preferences
• To save your trips so you can access them later
• To improve our AI trip planning algorithms
• To monitor and fix errors in our service (via Sentry)
• To understand how users interact with our product (via Google Analytics)
• To send you transactional emails (trip confirmations, account notifications)
• To respond to your support requests

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

When you click booking links in your itinerary, you are redirected to third-party booking sites (such as Booking.com, Skyscanner, or GetYourGuide). Those sites have their own privacy policies that govern how they handle your data during the booking process.

5. Cookies

We use cookies for the following purposes:

• Essential cookies: Session management, authentication state (required for the service to function)
• Analytics cookies: Google Analytics tracking cookies to understand usage patterns

We do not use advertising or tracking cookies. For more details, see our Cookie Policy.

6. Data Storage & Security

Your data is stored in Supabase (cloud database) and protected with encryption in transit (TLS/HTTPS) and at rest. Access to production databases is restricted to authorized personnel only.

We retain your account data for as long as your account is active. Trip data is retained for up to 12 months after generation, or until you delete your account — whichever comes first.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your account and all associated data
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to processing of your data for analytics purposes
• Restriction: Request restricted processing of your data

To exercise any of these rights, email us at info@smartrip.me. We will respond within 30 days.

8. Children's Privacy

SmarTrip is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including Israel and the United States (where some of our service providers are located). We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at info@smartrip.me.