Review before launch
Privacy notice placeholder
This page is a launch-ready placeholder for TripOne+’s reviewed privacy notice. It is not legal advice and must be replaced or approved by qualified counsel before accepting production customers.
Information the product handles
TripOne+ stores account details, business and website content, enquiries submitted to customer websites, and privacy-conscious event analytics. Analytics does not intentionally retain full IP addresses or enquiry messages.
Service providers
The intended production stack uses Supabase for authentication and data storage, Vercel for hosting, and Cloudflare for DNS. Their final roles, retention periods and contractual terms must be documented by the operator.
Your choices
Account holders can update profile and website information and request account deletion from the account page. Website visitors can decline optional tracking when a site owner enables the basic consent banner.
Inactive accounts and contact retention
An account that has not signed in for 60 days may have its Auth account, websites, operational records and uploaded files permanently deleted. An email address is retained after deletion only when the person gave explicit marketing consent; that retained contact can be unsubscribed and is not used to restore the deleted account data.