Privacy Policy

Effective Date: 2 September 2025
Last Updated: 2 September 2025

1. Introduction

Vibe and Trip ("we", "our", "us") operates a route planning web service for users in the USA, Europe, and other regions. Protecting your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your data.

2. Operator

Name: Urazaev Rinat
Registration Number: 40314099
Country: Armenia
City: Yerevan
Email: privacy@vibeandtrip.com

3. Categories of Data Collected

• Account information: email, password hash
• User activity: ratings and preferences for places, saved routes
• Technical logs: IP address, user-agent, access timestamps

4. Purposes and Legal Basis

We process your data for the following purposes:

• Account registration and login — based on contract necessity (Art. 6(1)(b) GDPR).
• Personalization of routes — using your ratings and preferences to provide tailored itineraries; legal basis: contract necessity.
• Security and fraud prevention — using technical logs to protect our systems; legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and service improvement — only with your consent (for EU users).
• Future AI model training — if we decide to train AI models on aggregated or de-identified user ratings and behavior, we will request your explicit consent before such use (Art. 6(1)(a) GDPR).

5. Data Sharing and Recipients

Hosting provider: Railway. Email: Gmail, Titan. We may in the future use analytics providers (e.g. Google Analytics, Cloudflare) and will update this policy accordingly.

6. International Transfers

Data may be transferred to Armenia, USA, EU. We rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the European Commission to ensure an adequate level of protection.

7. Data Retention

• Account data: until account deletion + up to 90 days.
• Technical logs: up to 1 year.
• De-identified data: up to 1 year.

8. User Rights

Access, Rectification, Deletion, Restriction, Objection, Portability. Contact: privacy@vibeandtrip.com

9. Cookies

We use only essential cookies for sessions. We also use Plausible Analytics, a privacy-friendly, cookieless analytics service, to measure aggregated traffic and usage. No personal data is collected and no cookies are set for analytics. If in the future we add analytics that requires consent (e.g., Google Analytics), EU users will see an Accept / Reject banner and US users will have a “Do Not Sell/Share” option.

10. Children

Service for 16+, no collection from children under 13.

11. Security

bcrypt/argon2id password hashing, TLS, access restriction.

12. Updates and Complaints

We may update this policy. Complaints: privacy@vibeandtrip.com