Privacy Policy
Last updated: February 2026
1. Information We Collect
When you use Travel Wish, we collect information you provide directly, including your email address, name, travel preferences, trip details, and any content you create within the platform. We also automatically collect usage data such as pages visited, features used, and device information.
2. How We Use Your Information
- To provide and improve our travel planning services
- To personalize your experience and recommendations
- To generate AI-powered itineraries based on your preferences
- To send transactional emails (trip confirmations, sharing notifications)
- To analyze usage patterns and improve our platform
3. Data Sharing
We do not sell your personal data. We may share anonymized, aggregated data for analytics purposes. When you use affiliate booking links, your interaction is governed by the third-party provider's privacy policy. We share data with service providers (Supabase for hosting, AI providers for itinerary generation) under strict data processing agreements.
4. Data Storage & Security
Your data is stored securely using Supabase infrastructure with encryption at rest and in transit. We implement row-level security policies to ensure users can only access their own data. Sessions are managed via secure JWT tokens with automatic expiration and refresh.
5. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access - Request a copy of all data we hold about you
- Rectification - Correct inaccurate personal data
- Erasure - Request deletion of your account and all associated data
- Portability - Export your data in a machine-readable format (JSON)
- Restriction - Request we limit processing of your data
- Objection - Opt out of marketing communications
You can exercise these rights from your Account Settings page, where you can download your data or delete your account.
6. Cookies
We use essential cookies for authentication and session management. We may use analytics cookies (with your consent) to understand how the platform is used. You can manage your cookie preferences at any time through the cookie consent banner.
7. Third-Party Services
We integrate with third-party services including Google Maps (for location data), Open-Meteo (for weather forecasts), and various booking affiliates. Each service has its own privacy policy governing data they collect through their platforms.
8. Data Retention
We retain your account data for as long as your account is active. Cache data (geocoding, weather, images) is automatically purged based on expiration policies. When you delete your account, all personal data is permanently removed within 30 days.
9. Contact
For privacy-related inquiries, please contact us at privacy@travelwish.app.