Privacy Policy

Effective Date: 2 September 2025
Last Updated: 2 September 2025

1. Introduction

Vibe and Trip ("we", "our", "us") operates a route planning web service for users in the USA, Europe, and other regions. Protecting your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your data.

2. Operator

Name: Urazaev Rinat
Registration Number: 40314099
Country: Armenia
City: Yerevan
Email: privacy@vibeandtrip.com

3. Categories of Data Collected

• Account information: email, password hash
• User activity: ratings and preferences for places, saved routes
• Technical logs: IP address, user-agent, access timestamps

4. Purposes and Legal Basis

We process your data for the following purposes:

• Account registration and login — based on contract necessity (Art. 6(1)(b) GDPR).
• Personalization of routes — using your ratings and preferences to provide tailored itineraries; legal basis: contract necessity.
• Security and fraud prevention — using technical logs to protect our systems; legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and service improvement — only with your consent (for EU users).
• Future AI model training — if we decide to train AI models on aggregated or de-identified user ratings and behavior, we will request your explicit consent before such use (Art. 6(1)(a) GDPR).

5. Data Sharing and Recipients

Hosting provider: Railway. Email: Gmail, Titan. We may in the future use analytics providers (e.g. Google Analytics, Cloudflare) and will update this policy accordingly.

6. International Transfers

Data may be transferred to Armenia, USA, EU. We rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the European Commission to ensure an adequate level of protection.

7. Data Retention

• Account data: until account deletion + up to 90 days.
• Technical logs: up to 1 year.
• De-identified data: up to 1 year.

8. User Rights

Access, Rectification, Deletion, Restriction, Objection, Portability. Contact: privacy@vibeandtrip.com

9. Cookies

Currently, we use only essential cookies that are strictly necessary for login sessions and service functionality. We do not use third-party advertising or analytics cookies. If in the future we implement additional cookies or SDKs (e.g. for analytics), we will provide EU users with the option to Accept / Reject / Manage preferences, and US users with a “Do Not Sell/Share My Data” option.

10. Children

Service for 16+, no collection from children under 13.

11. Security

bcrypt/argon2id password hashing, TLS, access restriction.

12. Updates and Complaints

We may update this policy. Complaints: privacy@vibeandtrip.com