Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

• • Account Information: Email address, password (encrypted), and optional profile information
• • Trip Planning Data: Budgets, destinations, travel dates, packing lists, itineraries, votes
• • Payment Information: Processed securely by Stripe/PayPal. We don't store credit card numbers.
• • Communications: Messages you send us via email or contact forms

1.2 Information Collected Automatically

• • Usage Data: Pages viewed, features used, time spent on site, browser type
• • Log Data: IP address, browser version, pages visited, referring URLs
• • Cookies and Tracking: We use cookies and similar technologies (details in Section 6)

2. How We Use Your Information

We use your information to:

• • Provide, maintain, and improve our Service
• • Create and manage your account
• • Save and sync your trip planning data
• • Send trip reminders, planning tips, and feature updates
• • Process payments and subscriptions
• • Respond to your inquiries and provide customer support
• • Analyze usage patterns and improve user experience
• • Track affiliate referrals and commissions
• • Send marketing communications (you can opt out anytime)
• • Detect, prevent, and address technical issues or fraud
• • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

3.1 Service Providers

We share data with trusted third-party companies:

• • Hosting: Cloud hosting providers (AWS, Vercel, etc.)
• • Analytics: Google Analytics (anonymized usage data)
• • Email: Email service providers for newsletters
• • Payment Processing: Stripe, PayPal

3.2 Affiliate Partners

When you click affiliate links, we share anonymized referral data. This does not include personally identifiable information.

3.3 Legal Requirements

We may disclose your information if required by law or to:

• • Comply with legal processes or government requests
• • Enforce our Terms of Service
• • Protect our rights, property, or safety

3.4 Business Transfers

If we are acquired or merge with another company, your information may be transferred as part of that transaction.

4. Children's Privacy (COPPA Compliance)

Our Service is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13.

While families use our Service to plan trips with children, accounts must be created by parents/guardians, not children.

If we learn we have collected personal information from a child under 13 without parental consent, we will delete it immediately. Contact us at support@endlesstravelplans.com.

5. Your Privacy Rights

5.1 All Users

• • Access: Request a copy of your personal data
• • Correction: Update inaccurate or incomplete information
• • Deletion: Delete your account and associated data
• • Opt-Out: Unsubscribe from marketing emails

5.2 California Residents (CCPA Rights)

• • Right to know what personal information we collect, use, and share
• • Right to delete your personal information
• • Right to opt-out of tracking
• • Right to non-discrimination

Email support@endlesstravelplans.com with "CCPA Request" in the subject line.

5.3 European Users (GDPR Rights)

• • Right to access, rectify, or erase your data
• • Right to restrict or object to processing
• • Right to data portability
• • Right to withdraw consent
• • Right to lodge a complaint with a supervisory authority

6. Cookies & Tracking Technologies

6.1 What We Use

• • Essential Cookies: Required for login, security, and core functionality
• • Analytics Cookies: Google Analytics (anonymized)
• • Affiliate Tracking: Cookies to track referrals to Amazon and travel partners

6.2 How to Control Cookies

Most browsers allow you to block or delete cookies:

• • Chrome: Settings > Privacy > Cookies
• • Firefox: Preferences > Privacy & Security
• • Safari: Preferences > Privacy

Opt out of Google Analytics: Google Analytics Opt-Out

7. Data Security

We implement industry-standard security measures:

• • Encryption: SSL/TLS encryption for data in transit
• • Secure Storage: Encrypted databases and secure cloud hosting
• • Password Protection: Hashed and salted passwords (bcrypt)
• • Access Controls: Limited employee access to personal data
• • Regular Audits: Security reviews and vulnerability testing

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

• • Active Accounts: We retain your data as long as your account is active
• • Deleted Accounts: Data is permanently deleted within 30 days
• • Legal Holds: Some data may be retained longer if required by law
• • Backup Systems: Deleted data is purged from backups within 90 days

9. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• • Amazon Associates: Amazon Privacy Notice
• • Travelpayouts: Travelpayouts Privacy Policy
• • Google Analytics: Google Privacy Policy
• • Stripe: Stripe Privacy Policy
• • PayPal: PayPal Privacy Statement

We are not responsible for the privacy practices of these third parties.

10. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the US.

By using our Service, you consent to the transfer of your information to the US and other countries where we operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• • Posting the new policy on this page
• • Updating the "Last Updated" date
• • Sending an email notification (for material changes)

Continued use of our Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: