Privacy Policy

The short version: we collect what we need to watch your trips and warn you when something goes wrong - your account details, your trip details, and how you want to be alerted. We don't sell your personal information, and we don't run third-party advertising trackers. The services that help us run TripHero (hosting, database, flight data, SMS, email) only get what they need to do their job.

1. Scope

This policy explains what TripHero ("we," "us") collects through trip-hero.com and related services (the "Service"), how we use it, who we share it with, and the choices you have. Booking anything through a travel partner is governed by that partner's own privacy policy - we link to partners, but their handling of your data is theirs.

2. What we collect

Information you give us

• Account: email address, name, password (stored only as a secure hash by our authentication provider - we never see or store your plain password), and optionally your phone number and home airport.
• Preferences: how you want to be alerted (push, email, SMS), quiet hours, and rebooking preferences such as how far you'd drive or whether you'd accept another airline or airport.
• Trips: flight details, booking references (record locators), traveler names on the trip, and where relevant a destination address.
• Loyalty programs: if you add them - carrier, program number, and status tier.
• Messages: what you type to our travel assistant, so it can respond and so we can improve guidance quality.
• Waitlist: your email address, if you join a waitlist.

Information collected automatically

• Location (only if you allow it): if you grant your browser's location permission, we use your position to find nearby airports and options. You can decline or revoke this at any time; the Service works without it.
• Device and log data: standard web server logs (IP address, browser type, pages requested) generated by our hosting provider for security and reliability.
• Push subscription tokens: technical identifiers your browser generates so we can deliver push notifications you asked for.
• Affiliate click events: when you click a partner link, we record that a click happened so we can be paid our commission. See our disclosure.
• Local storage: we keep your session token and preferences in your own browser's storage so you stay signed in. We do not use third-party advertising cookies or cross-site trackers.

3. How we use it

We use your information to operate the Service: monitoring your flights, generating backup plans, sending the alerts you enabled, personalizing guidance to your preferences, keeping the Service secure, fixing problems, and meeting legal obligations. We do not sell your personal information, and we do not share it with third parties for their own advertising.

4. Who we share it with

We share data only with service providers that help us run TripHero, and only what each needs:

Provider	What they do	What they receive
Supabase	Authentication and database	Account, preferences, trips, alerts (stored encrypted in transit, with per-user access rules)
Netlify	Hosting and serverless functions	Standard web logs; data passing through our backend
FlightAware	Live flight status and published schedules	Flight numbers and airport pairs being searched (no personal details)
Twilio	SMS alerts	Your phone number and the alert text, if SMS is enabled
Resend	Email alerts	Your email address and the alert text, if email is enabled
Anthropic	AI travel assistant	Your chat messages and relevant trip context, to generate responses
Affiliate partners	Bookings you choose to make	The fact that you clicked through from TripHero; anything you then enter on their site is governed by their policy

Public data sources we read from (FAA airport status, weather radar, aircraft position feeds, destination photography) receive no personal information about you. We may also disclose information if required by law, or as part of a business transaction such as a merger - in which case this policy would continue to apply to it.

5. How long we keep it

Account data is kept while your account is active. Trips and alerts are kept so you have your history; you can delete trips at any time. If you delete your account, we delete or de-identify your personal information within 30 days, except records we must keep for legal, security, or accounting reasons. Waitlist emails are deleted once the waitlist purpose has ended or on request.

6. Security

All traffic to the Service is encrypted in transit (HTTPS). Passwords are hashed by our authentication provider using industry-standard algorithms - we never store them in readable form. Database access is restricted with row-level security so each account can only read its own records. No system is perfectly secure, and we cannot guarantee absolute security - but if we learn of a breach affecting your personal information, we will notify you as required by law.

7. Your rights and choices

• Access, correction, deletion, portability: email support@trip-hero.com and we will honor your request as required by the laws that apply to you (including the CCPA for California residents and the GDPR for users in the EU/UK).
• Alerts: turn any channel off in Preferences; reply STOP to SMS.
• Location: deny or revoke the browser permission at any time.
• Do Not Track / Global Privacy Control: we don't run cross-site tracking, which is the behavior these signals exist to limit.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. We will not discriminate against you for exercising your rights.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. International users

TripHero is operated from the United States and data is stored on U.S.-based infrastructure. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S.

10. Changes to this policy

When we change this policy, we will update the effective date above and, for material changes, give you notice by email or in the product before they take effect.

11. Contact

Privacy questions or requests: support@trip-hero.com