TripsGalaxy

1. Introduction

Galaxims Technologies LLC (“Company,” “we,” “us,” or “our”) operates TripsGalaxy, an AI-powered road trip planning service available at tripsgalaxy.comand through associated applications (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, retain, and safeguard your personal information when you use the Service.

We are committed to protecting your privacy and handling your data transparently. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

For questions or concerns regarding this policy, please contact us at contact@galaxims.com.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your name, email address, and, if applicable, your phone number. If you register through Google or Apple single sign-on, we receive your public profile information (name and email) as authorized by your account settings. Passwords are stored using industry-standard cryptographic hashing with per-user salts; we never store passwords in plaintext.

Trip Data: Information you provide when using the Service, including start and destination locations, route preferences (scenic versus direct), dining and activity preferences, saved itineraries, trip history, and any notes or custom stops you add.

Communication Data: Records of your communications with us, including support requests and feedback.

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical information, including your IP address, browser type, device identifiers, operating system, and usage data (such as the features you use and the time spent on the Service). We use cookies and similar tracking technologies to facilitate authentication and analyze performance. For more details, see Section 11.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide, maintain, and improve the Service.
• To generate and personalize your AI-driven trip itineraries.
• To facilitate authentication and account security.
• To process transactions and manage subscriptions.
• To communicate with you regarding your account, updates, and support.
• To personalize your experience and tailor recommendations based on your stated preferences.
• To detect, prevent, and address fraud, abuse, or security threats.
• To comply with legal obligations and respond to lawful requests from governmental authorities.
• To send marketing communications, but only where you have provided consent or where otherwise permitted by applicable law. You may opt out of marketing at any time.

4. Affiliate Revenue and Disclosure

TripsGalaxy participates in affiliate programs with selected travel partners, including Booking.com, Viator, and TravelPayouts. When you click an affiliate link within the Service and complete a booking or purchase on a partner’s website, we may earn a commission. This commission is paid by the partner and does not increase the price you pay.

We disclose affiliate relationships within the Service interface (for example, through labels such as “Partner link” or “Booking powered by Booking.com”). We record clicks on affiliate links to measure performance, but this data is aggregated and is not linked to your personal identity in any external reports.

5. Data Sharing and Third Parties

We do not sell your personal information in the traditional sense. We may share information with the following categories of recipients:

• Service Providers: We engage third-party companies to perform services on our behalf, including Stripe (payment processing), Mapbox (routing and maps), Amazon Web Services (cloud hosting and data storage), Anthropic (AI model services via the Claude API), Sentry (error monitoring), PostHog (product analytics), and Google Analytics (website analytics). Each provider is contractually obligated to process your data only as necessary to provide its services.
• Affiliate Partners: We share anonymized, aggregated click-through data with our affiliate partners. We do not share personally identifiable information with affiliate partners.
• Legal Obligations: We may disclose your information when required by law or to protect our rights and safety.
• Business Transfers: In the event of a merger or acquisition, your personal information may be transferred to the successor entity.

6. Data Retention

• Active Accounts: We retain your personal information for as long as your account is active.
• Account Deletion: When you delete your account, we will delete or anonymize your trip data within thirty (30) days.
• Cookies: Session cookies are cleared when you end your browser session. Analytics cookies are retained for up to twelve (12) months.
• Server Logs: Retained for ninety (90) days for security monitoring.
• Payment Records: Retained in accordance with legal and PCI-DSS requirements. We never store full payment card numbers.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request that we correct inaccurate or incomplete information.
• Right to Deletion: Request that we delete your account and associated personal data.
• Right to Opt Out: Opt out of marketing and non-essential analytics tracking.
• Right to Data Portability: Request an export of your trip data in JSON or CSV format.

To exercise any of these rights, please contact us at contact@galaxims.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know, delete, and opt out of the “sale” or “sharing” of your personal information. While we do not sell data for money, certain affiliate tracking might be considered “sharing” under CCPA. You may opt out by contacting us at contact@galaxims.com or adjusting your account settings.

9. Children and Minors

The Service is not directed to individuals under eighteen (18). We do not knowingly collect information from minors. If you believe a child under 18 has provided data, please contact us at contact@galaxims.com.

10. Security

We implement HTTPS encryption, cryptographic hashing of passwords, and encryption of data at rest. While we strive to protect your information, no method of electronic transmission is 100% secure.

11. Cookies and Tracking Technologies

We use essential cookies for authentication and non-essential cookies for analytics (PostHog/Google Analytics) and affiliate tracking (Booking.com/Viator). You can manage these via your browser settings.

12. International Data Transfers

The Service is operated from the United States (AWS US-East). By using the Service, you consent to the transfer and storage of your data in the US.

13. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be posted with at least thirty (30) days’ advance notice.

14. Contact Us