Privacy Policy

Triply (“we”, “us”) is an AI trip planner that turns a budget and a few preferences into 3 destination recommendations. We operate flytriply.eu from the European Union.

Questions about this policy? Email hello@flytriply.eu.

To recommend trips, we collect what you tell us in the trip form:

• Budget (per person, in EUR)
• Origin city or airport
• Travel dates and number of travelers
• Vibe / trip style preferences
• Optional destination preferences (region or specific city)

If you submit feedback, we store the message you wrote and any contact details you choose to include.

Like most websites we also collect standard server logs (IP address, user agent, request timestamp) and anonymous traffic statistics from Vercel Analytics. We do not use third-party advertising trackers.

• To generate your trip. Form inputs are sent to our AI pipeline and are required for the service to work.
• To improve the product. Aggregate analytics help us see which features are useful and which are not.
• To respond to feedback. If you write to us, we read it and may reply.

• Performance of a contract (Art. 6(1)(b)) — when you submit the trip form, processing your inputs is necessary to deliver the recommendations you asked for.
• Legitimate interests (Art. 6(1)(f)) — anonymous analytics, server logs, and abuse-prevention rate limits.
• Consent (Art. 6(1)(a)) — if we ever introduce optional newsletters or marketing, we will ask first.

We work with the following processors. Each handles only the data necessary for its role:

• Vercel — hosting, edge delivery, server logs, anonymous traffic analytics.
• Supabase — database for trip records and a cross-user cache that lets us reuse trip results for identical inputs.
• n8n cloud — workflow automation that orchestrates trip generation between our app and the AI model.
• OpenAI — large language model (GPT-class) that drafts the destination shortlist and itinerary.
• Pexels — destination photography (image lookups only; no personal data sent).
• Booking.com (and its affiliate network Awin) — partner links for hotel reservations. When you click through, Booking.com may set its own cookies under its own policy.

• Trip records are kept for up to 30 days, then deleted. Cached trips (used to speed up identical re-queries) follow the same window.
• Server logs are retained for up to 90 days for security and debugging.
• Feedback messages are kept until the issue is resolved, then deleted unless we need them as a reference.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccuracies;
• request deletion (“right to be forgotten”);
• receive your data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, where consent is the basis.

To exercise any of these, email hello@flytriply.eu. You may also lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (ÚOOÚ).

We use Vercel Analytics for anonymous, privacy-friendly traffic measurement — no cross-site tracking, no advertising identifiers. Outbound links to Booking.com and other partners may set cookies on those destination sites, governed by their own policies.

OpenAI processes data in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses plus additional safeguards offered by OpenAI’s data-processing addendum. Other processors are EU-based or transfer under equivalent safeguards.

We may update this policy from time to time. Material changes will be highlighted on the website. The “Last updated” date at the top reflects the latest revision.

For privacy questions or to exercise your rights, email hello@flytriply.eu.

Looking for the rules of using the service? See our Terms of Service.