Summary
TRIPSORA CAPITALS LTD (Company Number 16549250), 124 City Road, London EC1V 2NX, United Kingdom, is the controller for personal data processed through tripsora.com, routeplanner.ai, trip-planner.ai and tripbuilder.ai. Contact: [email protected].
Payments are processed by Stripe. We receive confirmation of the payment (amount, currency, date, Stripe session reference) and the email address used; we never receive or store full card numbers. See Stripe's privacy policy.
| What | Why | Where it goes |
|---|---|---|
| Email address and first name, verified with a 6-digit code | To identify you, count your free and paid questions, and address you by name | Our servers; verification codes are sent by email |
| Your messages and the last messages of the conversation | To understand your request and keep the conversation coherent | Our servers; sent to our AI providers (Groq, Google) with your first name and saved preferences – never your email address |
| Saved travel preferences | So you don't have to repeat them in later conversations | Our servers; included in requests to our AI providers |
| Trip details needed for searches (cities, airports, dates, number of travellers, hotel and activity names) | To find recent flight fares, create booking links, check the weather and place your stops on a map | Travelpayouts (fares and links), Open-Meteo (weather), Mapbox (map locations). These requests contain no name or email address. |
| Booking links you click | To take you to the Partner with your trip details filled in | The Partner receives the destination, dates and number of travellers in the link, plus whatever you enter on their site |
| Shared plans | So you can open, email or share a plan | Our servers; anyone with the share link can view the plan |
| Question balance and payments | To provide free and paid questions and handle refunds | Our servers; Stripe for payments |
| Plan emails you request | To send the plan to your own verified address | Our email server; the email includes a map image loaded from Mapbox |
The agent also detects the language you write in, to answer in that language. This uses only the text of your messages.
| What | Why | Where it goes |
|---|---|---|
| Email address and first name, verified with a 6-digit code | To identify you and count your free and paid route questions | Our servers; verification codes are sent by email |
| Your message, up to the last 12 messages of the conversation and your current route (stop names, coordinates, route wishes) | To plan or change your route | Our servers; sent to our AI provider Groq – never your name or email address |
| Place names of the stops | To find their coordinates | Photon (Komoot) and, if needed, Nominatim (OpenStreetMap Foundation). These requests come from our server and contain no name, email or IP address of yours. |
| Coordinates of the stops and route wishes (avoid tolls, motorways, ferries) | To calculate roads, distances and driving times | The OSRM routing service run by FOSSGIS e.V. Requests come from our server and contain no personal details. |
| The route shown on the map | To draw the map and the road line in your browser | Mapbox, which receives the stop coordinates and your IP address |
| Hotel and Google Maps links you click | To show hotels at an overnight stop or open the route in Google Maps | Stay22 and its hotel partners, or Google, receive the place or route in the link, plus whatever you enter on their site |
| Question balance and payments | To provide free and paid route questions and handle refunds | Our servers (email address, free and paid questions, number of questions, Stripe payment reference, amount); Stripe for payments, invoices and receipts |
The route assistant does not save travel preferences and does not keep a record of your conversations on our servers. Our server logs keep a short excerpt of each request and the stop names for troubleshooting (see section 7).
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing the AI travel agent, the route assistant, itineraries and other services you request; email verification; counting questions | Contract (Art. 6(1)(b)) |
| Payments, refunds, accounting and tax records | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Saving travel preferences for later conversations | Legitimate interests in a convenient service (Art. 6(1)(f)) – you can delete them at any time |
| Security, preventing abuse (rate limits, one allowance per person), troubleshooting | Legitimate interests (Art. 6(1)(f)) |
| Keeping chat records for support, quality and improving our service | Legitimate interests (Art. 6(1)(f)) |
| Analytics, advertising and non-essential cookies | Consent (Art. 6(1)(a)) |
| Marketing emails | Consent, or soft opt-in for customers (PECR) |
Please do not include special category data (for example health information) in your messages. If you do, we process it only to answer your request, on the basis of your explicit choice to share it.
| Recipient | Role and data |
|---|---|
| Groq, Inc. (GroqCloud, USA) | Processor – generates AI answers from your messages, conversation context, first name and saved preferences (Tripsora AI); and from your messages, conversation context and current route, without name or email (RoutePlanner.ai) |
| Google (Gemini API) | Processor – generates AI answers (same data as Groq) when used; under the Gemini API terms that apply to our use, Google does not use prompts or responses to improve its products and logs them only for a limited time for abuse prevention |
| Stripe | Payment processing (independent controller for its own regulatory purposes) |
| Travelpayouts | Recent flight fares and creation of tracked booking links (routes, dates, number of travellers – no name or email) |
| Mapbox (USA) | Map display in your browser (receives your IP address), drawing routes on roads on routeplanner.ai (stop coordinates) and finding the locations of places in plans (place names only) |
| Komoot (Photon, Germany) and OpenStreetMap Foundation (Nominatim, UK) | Finding the coordinates of route stops (place names only, sent from our server) |
| FOSSGIS e.V. (OSRM routing service, Germany) | Calculating roads, distances and driving times (stop coordinates and route wishes only, sent from our server) |
| Cloudflare (cdnjs) | Delivers the map software used on routeplanner.ai to your browser (receives your IP address) |
| Open-Meteo | Weather data (destination and dates only) |
| Hosting and email providers | Store our databases and send verification codes and plan emails |
| Booking Partners (e.g. Trip.com, hotel sites via Stay22, GetYourGuide, Kiwitaxi, Ubigi) | Only when you click a link: trip details in the link; their own cookies and terms apply |
| Google Analytics and advertising partners | Only with your consent – see the Cookie Policy |
| Authorities | Where required by law |
We do not sell your personal data.
Some recipients are outside the UK (for example in the USA). We rely on UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.
| Data | Retention |
|---|---|
| AI agent conversation context (last messages of a conversation) | 7 days after your last message |
| RoutePlanner.ai route conversations | Not stored on our servers; kept only in your open browser page |
| AI agent chat records (questions, answers, email, first name, language, tools used) | 30 days |
| Saved travel preferences | Until you delete them ("Forget my preferences") or ask us to |
| Shared plans | 180 days, or earlier on request |
| Question balances (Tripsora AI and RoutePlanner.ai) | While the assistant is offered, or until you ask us to delete it (unused paid questions are then refunded where applicable) |
| Payment records | 7 years (tax and accounting) |
| Earlier chatbot history and Message Boost session data | 90 days |
| AI-generated itineraries | Until the trip date, then deleted within 30 days |
| Account information | For the life of the account plus 2 years |
| Map location cache (place names and coordinates only) | No personal data; kept to speed up maps |
| Server and security logs (including short request excerpts and route stop names) | For a limited period needed for security and troubleshooting |
| Support communications | 3 years from last contact |
| Analytics data | 26 months |
| Marketing preferences | Until you withdraw consent |
The AI travel agent stores in your browser's local storage: your verified email address, first name and verification time; a copy of your recent conversation (up to 30 messages, including plan and map data); your conversation reference; the time until you can send the next question; and whether you accepted the notice. This data stays on your device; "Sign out" and "New trip" remove parts of it, and clearing your browser data removes all of it. Details are in our Cookie Policy.
On routeplanner.ai, the route assistant stores in your browser's local storage your verified email address, first name, a signed sign-in token and the verification time, for up to 30 days. Your route conversation is not stored on your device; it is lost when you close or reload the page. A strictly necessary session cookie connects your browser to our service and limits the number of messages per hour. "Sign out" removes your details from your device.
We use encryption in transit (TLS), access controls, signed tokens for verified email addresses, separation of secrets from website files, and monitoring. If a personal data breach is likely to result in a risk to you, we will notify the ICO within 72 hours and inform you without undue delay where required.
Under the UK GDPR you can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interests (including saved preferences and chat records), and withdraw consent at any time. Some rights you can use directly: "Forget my preferences" deletes saved preferences; "Sign out" removes your details from your device. For everything else email [email protected] or write to our address. We reply within one month (extendable by two months for complex requests) and may ask you to verify your identity.
Our services are only for people aged 18 or over, and we ask users to confirm this before using our AI assistants. We do not knowingly collect data from children. Travellers may tell the agent their children's ages to plan a family trip; we use this only for that purpose. If you believe a child has used our services, contact us and we will delete the data.
We send marketing emails only with your consent or, for customers, about similar services (soft opt-in). You can unsubscribe in any email or by contacting us. Service emails (verification codes, plans you request, payment confirmations) are not marketing.
Please contact us first. You can also complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF – ico.org.uk, 0303 123 1113.
We will post updates here and change the date above. For material changes we will notify you by email (if we have your address) or on the website, and ask for consent again where the law requires it.
Related documents: Terms of Service · Privacy Policy · Cookie Policy · Disclaimer & Affiliate Disclosure · Digital Product Purchase Agreement
Contact: [email protected] (privacy and general) · [email protected] (technical) · [email protected] (payments and cancellations)