Privacy Policy

1. Who We Are

LetsPlanet ("we", "us", "our") is a travel planning platform that helps you organize trips, split expenses with friends and family, and discover destinations with AI-powered recommendations. This policy explains how we handle your personal information when you use our website at letsplanet.ai and related services.

2. Data We Collect

Account data

Name, email address, username, profile photo, bio, and home city.

Trip data

Destinations, dates, itineraries, travel preferences, and daily plans you create.

Expense data

Expense amounts, categories, participants, and settlement status within shared trips.

AI interaction data

Your travel preferences and trip context that our AI uses to generate recommendations for food, activities, nightlife, and shopping. We do not store the raw prompts after processing.

Technical data

IP address, browser type, device information, and session data collected automatically when you use the service. This is used for security (brute-force protection) and to keep you logged in.

3. Social Login (Google & Apple)

When you sign in with Google or Apple, we receive limited profile information from the provider to create or link your account:

• Google: Email address, name, and profile photo.
• Apple: Email address (or Apple's private relay address) and name. Apple may let you hide your real email — we respect that choice.

We use this data only to create your account and personalize your experience. We do not:

• Access your contacts, calendar, or files from Google or Apple.
• Post anything on your behalf.
• Sell or share your social login data with advertisers.

LetsPlanet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy ↗, including the Limited Use requirements.

You can disconnect a social login at any time from your account settings. You can also review and revoke access from your Google Account ↗ or Apple ID settings ↗.

4. How We Use Your Data

We only process your data when we have a clear reason. Here's a breakdown:

• Account management — account data — contractual necessity
• Trip planning — trip data, preferences — contractual necessity
• Expense splitting — expense data — contractual necessity
• AI recommendations — trip context, preferences — legitimate interest
• Transactional emails — email address — contractual necessity
• Security & fraud prevention — IP, session data — legitimate interest

5. Data Sharing & Third Parties

We do not sell your personal information. We share data only with:

• Trip participants: Other users you invite to a trip can see shared trip details and expenses.
• Infrastructure providers: Hosting (Railway, Vercel), email delivery (Resend), and database services that process data on our behalf.
• AI providers: Your trip context (not your identity) is sent to AI services to generate recommendations.
• Legal obligations: We may disclose data if required by law, court order, or to protect the safety of our users.

6. International Data Transfers

LetsPlanet's servers are located in the United States. If you are accessing the service from outside the US (including the EU/EEA), your data will be transferred to and processed in the US. By using LetsPlanet, you consent to this transfer.

We rely on standard contractual clauses and other appropriate safeguards when transferring data from the EU/EEA to ensure your data receives an adequate level of protection.

7. Data Retention & Deletion

We keep your account data for as long as your account is active. When you delete your account:

• Your profile is anonymized (name, email, bio, avatar are removed).
• Social login connections are wiped.
• All active sessions are terminated.
• Trip and expense data is retained in anonymized form so other participants' records remain intact.

You can delete your account at any time from your account settings. You can also export all your data in JSON format before deletion.

8. Your Rights

For all users

• Access: Download a copy of your data from account settings.
• Correction: Update your profile information at any time.
• Deletion: Delete your account and all associated data.

EU/EEA users (GDPR)

You additionally have the right to:

• Restrict or object to certain processing.
• Data portability (export your data in a structured format).
• Withdraw consent at any time where processing is consent-based.
• Lodge a complaint with your local data protection authority.

California residents (CCPA)

You have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell your data).
• Non-discrimination for exercising your rights.

To exercise any of these rights, contact us at the address below or use the tools in your account settings.

9. Cookies

We use only essential cookies:

• sessionid — keeps you logged in (14 days)
• csrftoken — protects against cross-site request forgery (session)

We do not use advertising or tracking cookies.

10. Children's Privacy

LetsPlanet is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by a notice on the website. The "last updated" date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this privacy policy or how your data is handled, we're happy to help:

privacy@letsplanet.ai