Privacy Policy

At VacayPlot, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have when you use our web application at vacayplot.app (the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and, if you sign in with Google, your name and profile picture as provided by Google. Authentication is handled by Google Firebase Authentication. If you sign up with an email and password, your password is stored and secured by Firebase — we never see or store your password ourselves. We also record whether your email address has been verified.
• Travel preferences and trip data. When you request an itinerary, we collect the details you enter: destination, travel dates, number of travelers, budget, interests, pace preferences, and any free-text notes. Itineraries you save, along with any revisions you request, are stored in our database and linked to your account.
• Usage and device information. Through our analytics provider (PostHog) we collect information about how you use the Service — pages viewed, features used (such as signing up or generating an itinerary), approximate location derived from your IP address, browser type, and device type. If you accept cookies via our consent banner, we also use Meta Pixel and Google Analytics, which collect similar usage data (such as page views, sign-up events, and information about the device and browser you use) to measure our advertising and understand where our traffic comes from. These tools load only after you accept the cookie banner.

2. How We Use Your Information

• To create and manage your account and keep you signed in securely.
• To generate personalized travel itineraries based on the preferences you provide.
• To save your trips and itinerary revisions so you can return to them later.
• To send you transactional emails, such as email verification and password reset messages.
• To understand how the Service is used and to improve its features, reliability, and design.
• To protect the Service against abuse and to comply with legal obligations.

We do not sell your personal information.

3. Third-Party Service Providers

To operate VacayPlot we rely on a small number of trusted third-party providers. By using the Service, you acknowledge their respective processing of your data:

• Google Firebase (Authentication). Handles account creation, sign-in (including "Sign in with Google"), email verification, and password resets. Firebase processes your email address, sign-in credentials, and related security metadata. See Google's privacy policy for details.
• OpenAI (Itinerary generation). The travel preferences you submit (destination, dates, interests, notes, and similar trip details) are sent to OpenAI's API to generate your itinerary. We do not send your email address or account credentials to OpenAI, and data submitted through the API is not used to train OpenAI's models.
• PostHog (Analytics). Collects product analytics events (for example, sign-ups and itinerary generation) and session information so we can understand usage and improve the Service. PostHog sets cookies and uses browser storage as described in our Cookie Policy.
• Meta (Meta Pixel — advertising analytics). If you accept cookies via our consent banner, the Meta (Facebook) Pixel collects page views and events such as sign-ups to measure the effectiveness of our advertising. Meta may associate this data with your Facebook or Instagram account under Meta's own privacy policy. The Meta Pixel loads only after cookie-banner acceptance, and withdrawing consent stops further tracking.
• Google (Google Analytics — traffic analytics). If you accept cookies via our consent banner, Google Analytics collects page views, session information, and traffic-source data to help us understand how visitors find and use the Service, as described in Google's privacy policy. Google Analytics loads only after cookie-banner acceptance, and withdrawing consent disables further measurement.

4. Data Retention and Deletion

We retain your account information and saved trips for as long as your account is active. You may request deletion of your account and associated data at any time by emailing support@vacayplot.com from the email address on your account. We will delete your data within 30 days of a verified request, except where we are required to retain it by law.

5. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@vacayplot.com. We will respond within a reasonable timeframe as required by applicable law.

6. Security

We use industry-standard safeguards to protect your data, including encrypted connections (HTTPS), Firebase-managed credential security, and access controls on our database. No method of transmission or storage is 100% secure, but we work to protect your information against unauthorized access, alteration, or destruction.

7. Children's Privacy

VacayPlot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@vacayplot.com. VacayPlot operates under the jurisdiction of the United States.