01 Introduction
Welcome to Trip500 (“we,” “our,” or “us”). Trip500 is a budget-first travel planning platform available via our website at trip-500.web.app and our mobile application (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using Trip500, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.
02 Information We Collect
2.1 Information You Provide
- Account information: name, email address, and authentication credentials when you create an account
- Trip planning data: departure city, destination, travel dates, trip duration, and total budget
- Budget preferences: how you allocate funds across flights, accommodation, food, transportation, and activities
- Communication data: any messages, feedback, or support requests you send to us
2.2 Information Collected Automatically
- Device information: device type, operating system, unique device identifiers, and mobile network information
- Usage data: pages visited, features used, itineraries generated, clicks on booking redirects, and session duration
- Log data: IP address, browser type, access times, and referring URLs
- Location data: approximate location based on IP address (we do not collect precise GPS location unless you explicitly grant permission)
2.3 Information from Third Parties
When you use our Service, we may receive limited information from third-party booking API providers (such as flight, hotel, and activity aggregators) to display real-time pricing and availability. We do not receive your payment or personal booking details from these providers.
03 How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Trip500 Service
- Generate personalized, budget-optimized trip itineraries
- Retrieve real-time pricing from third-party booking APIs (flights, hotels, activities, transportation)
- Redirect you to official booking sites with prefilled search parameters for seamless booking
- Improve, personalize, and expand our Service
- Communicate with you, including for customer support and service updates
- Monitor and analyze usage trends to enhance user experience
- Detect, prevent, and address technical issues and security threats
04 Third-Party Services & API Integrations
Trip500 integrates with third-party APIs to provide real-time travel pricing and availability. These integrations may include, but are not limited to:
- Flight data providers (e.g., Amadeus, Duffel)
- Hotel and accommodation providers (e.g., Booking.com Demand API, Expedia Rapid API)
- Activity and experience providers (e.g., Viator)
When you click a booking link, you will be redirected to the respective third-party booking site. At that point, the third party’s own privacy policy governs any data you provide to them. We encourage you to review the privacy policies of any third-party sites you visit through our Service.
05 Firebase & Data Storage
Trip500 uses Google Firebase for backend services, including authentication, data storage, and hosting. Firebase may collect certain data as described in Google’s Privacy Policy. Key Firebase services we use include:
- Firebase Authentication: to manage user sign-in and account security
- Firebase Firestore / Realtime Database: to store your trip plans, preferences, and itineraries
- Firebase Hosting: to serve our web application
Data stored in Firebase is hosted on Google Cloud infrastructure and is subject to Google’s security and compliance standards.
06 Data Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: with third-party vendors who perform services on our behalf (e.g., hosting, analytics), subject to confidentiality obligations
- API Partners: limited, non-personally-identifiable query data (such as destination and dates) may be transmitted to booking API providers to retrieve pricing
- Legal Requirements: if required by law, regulation, legal process, or governmental request
- Business Transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
- With Your Consent: we may share information for any other purpose with your explicit consent
07 Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention.
08 Data Security
We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/SSL) and at rest where applicable. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
09 Your Rights & Choices
Depending on your location, you may have certain rights regarding your personal information, including:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your personal data, subject to legal obligations
- Portability: request a portable copy of your data in a structured, machine-readable format
- Opt-out: opt out of marketing communications at any time
To exercise any of these rights, please contact us at the address provided below.
10 Children’s Privacy
Trip500 is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us.
11 International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (such as Google Firebase) operate. These countries may have data protection laws different from your jurisdiction. By using Trip500, you consent to such transfers.
12 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top of this page and, where appropriate, notify you via email or through the Service. We encourage you to review this Privacy Policy periodically.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: