Privacy Policy

1. Data controller

Clustrip ("we") is the controller of the personal data collected through this site. For any request about your data you can write to the email address in the Contact section.

2. Data we collect

Account data: email and identifier provided by your sign-in provider (Google) upon registration.

Usage data: the itineraries you choose to save to your profile (destinations, dates, travel preferences) and the preferences entered in the planner.

Payment data: handled entirely by Stripe; we never store card numbers. We only keep your Stripe customer ID and subscription status.

3. Purposes and legal basis

We process data to provide the service (performance of contract, art. 6.1.b GDPR), to manage subscriptions (contractual and legal obligations) and to keep the platform secure (legitimate interest, art. 6.1.f GDPR).

Planner preferences are sent to our processing provider (Anthropic) for the sole purpose of composing the requested itinerary; they are not used for advertising profiling.

4. Retention

Account data remains active while you keep your profile. Upon account deletion, profile and saved trips are permanently removed. Technical error logs are kept for a maximum of 90 days.

5. Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR). You may exercise them by writing to us; you also have the right to lodge a complaint with your supervisory authority.

6. Third parties

We rely on qualified providers processing data on our behalf: Supabase (database and authentication), Stripe (payments), Anthropic (itinerary composition), Vercel (hosting). GDPR-compliant contractual safeguards are in place with each of them.

7. Contact

For any question about this policy or your data: privacy@clustrip.app (placeholder address to be replaced before commercial launch).