Privacy Policy

This policy explains what we collect, why, who else handles it, how long we keep it, and what you can ask us to do about it.

Who is responsible

The data controller is RAD Labs LLC, doing business as ezTrips. For any privacy question or request, email support@eztrips.ai. Our postal address is at the end of this policy.

What we collect

On this website, today, that is mostly just an email address.

• Waitlist: when you join the waitlist we store your email address, which page or button you joined from, and the time you joined. Your IP address is processed transiently to rate-limit abuse of the form; we store a one-way hash of it for that purpose, not the address itself.
• Contact form: the name, email address, topic, and message you send us, plus the same rate-limiting protection described above.
• Analytics: if — and only if — you accept analytics cookies, Google Analytics collects aggregate usage such as pages viewed, approximate region, device type, and referring site. Decline and no analytics data is collected at all. See the Cookie Policy.

In the ezTrips app, once you have an account, we also collect:

• Account data: your email address, name, and which sign-in provider you used.
• Trip content: the trips you create, edit, or share — destinations, dates, travellers, notes, bookings, and spend you record.
• Payment data: handled by our payment processor. We receive confirmation of a payment and the last four digits of a card; we never see or store a full card number.

We do not track your precise location, we do not buy personal data about you, and we do not build advertising profiles.

Why we use it, and on what legal basis

• To provide what you asked for — telling you when access opens, answering your message, generating and saving your trips. Basis: performance of a contract, or your request before entering one.
• To keep the service working and safe — preventing abuse of our forms, monitoring errors. Basis: our legitimate interest in a service that functions.
• To understand how the site is used — aggregate analytics. Basis: your consent, which you can withdraw at any time.
• To send operational email — confirmations, receipts, security and service notices. Basis: contract and legitimate interest. These are not marketing and cannot be unsubscribed from separately while you hold an account.

We do not sell or share your personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. We do not run ads on your data.

Who else handles your data

We use a small number of service providers, each of which handles data on our instructions and for no purpose of their own:

• Google (Firebase and Google Analytics) — hosting, database, serverless functions, and, with your consent, website analytics.
• Anthropic — the AI models that generate and refine itineraries. Trip content you enter is sent to Anthropic to produce your plan. Under Anthropic’s commercial API terms, that content is not used to train their models.
• Our email provider — sending confirmations and service email.
• Stripe — payment processing, once paid plans are available.

We may also disclose data if the law requires it, or to protect our rights or someone’s safety. If the business is ever sold or merged, data may transfer with it; we will say so here first.

Where your data goes

We operate from the United States and our providers process data there. If you are in the European Economic Area, the United Kingdom, or Switzerland, this means your data is transferred outside your country. Those transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent approved safeguard in our agreements with each provider.

How long we keep it

• Waitlist entries: until we open access to you, and for up to 12 months after — or until you ask us to delete it, whichever comes first.
• Contact messages: up to 24 months, so we have the history of a conversation.
• Account and trip data: for as long as your account is open. Deleting your account deletes it, apart from copies in backups that age out on a rolling basis.
• Analytics: retained by Google Analytics for 14 months.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it, and we will not treat you differently for asking. Email support@eztrips.ai and we will respond within 30 days. We may need to confirm your identity first.

• If you are in the EEA or UK: you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time (without affecting what we did before you withdrew it), and to complain to your national supervisory authority.
• If you are in California: you have the right to know what we collect and why, to delete it, to correct it, and to opt out of sale or sharing — though as stated above, we do not sell or share personal information, so there is nothing to opt out of. You may use an authorised agent.
• Analytics consent: change it at any time from the “Cookie settings” link in the site footer. Withdrawing consent stops collection immediately.
• Waitlist: ask us to remove your address and we will delete the entry.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@eztrips.ai and we will delete it.

Security

Data is encrypted in transit and at rest, access is limited to those who need it, and the systems holding it are operated on managed cloud infrastructure. No system is perfectly secure, but if a breach affects your personal data we will notify you and any regulator we are required to notify, without undue delay.

Changes to this policy

When this policy changes materially we will update the date at the top and, if the change affects you meaningfully and we have your address, tell you by email. The current version always lives at this URL.

Contact

RAD Labs LLC, d/b/a ezTrips.
202 N Cedar Ave, Ste 1
Owatonna, MN 55060
USA
Privacy questions and requests: support@eztrips.ai.

RAD Labs LLC is the controller for the purposes of the UK GDPR and the EU GDPR.