Data we may collect

• Contact details such as name, email, phone number, company name, and role.
• Trip and traveler information entered into Triplin by operators or guests, including preferences, itinerary details, documents, messages, and payment status.
• Optional sensitive trip-operation details, such as dietary, allergy, medical, accessibility, emergency-contact, identity-document, or payment-proof information, when a guest or operator provides it.
• Usage and security data such as device/browser details, referral or affiliate attribution, hashed IP address, logs, and cookies needed for login, analytics, fraud prevention, and support.

Why we use it

• To provide the Triplin platform to tour operators and their guests.
• To process inquiries, applications, bookings, payments, invoices, supplier coordination, guest portals, documents, and communications.
• To respond to demos, support requests, early-access requests, and product updates you ask for.
• To keep the service secure, detect abuse, maintain records required by law, and improve product reliability.

Sharing and processors

When you submit an Explore enquiry, we share your name, email, optional phone number, group size, and message with the operator responsible for that trip, with your consent, so they can respond. Saved trips are stored in your browser on your device. We share personal data only where needed to provide the service, comply with law, or protect the platform. This may include cloud hosting, storage, email, WhatsApp/SMS, payment gateways, AI providers, analytics, security tools, and travel suppliers selected by an operator. Operators are responsible for ensuring that data they upload or request from travelers is lawful and necessary for their trip operations.

Retention and security

We keep personal data only for as long as needed for the purpose collected, legal/accounting records, fraud prevention, security logs, dispute resolution, and service operation. We use access controls, encryption where appropriate, audit logs, private storage for uploaded files, and operational safeguards designed to reduce unauthorized access or disclosure.