planplanplan

Template for a personal demo — replace the [bracketed] details and have it reviewed before relying on it.

Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [OPERATOR NAME] (“we”, “us”), operator of planplanplan (the “Service”), handles your personal data. Questions: [CONTACT EMAIL].

1. Data we collect

  • Account data from Google sign-in: your name, email address and profile image.
  • Trips you save: stops (place names and coordinates), dates and planning preferences.
  • Technical data: your IP address and basic request logs, used for security and rate-limiting.

2. How we use it & legal bases

  • To provide the Service — performance of a contract (Art. 6(1)(b) GDPR).
  • To keep the Service secure and prevent abuse — our legitimate interests (Art. 6(1)(f)).
  • To sign you in with Google — your consent (Art. 6(1)(a)).

3. Sharing & processors

We do not sell your data. We share only what is needed with the providers that run the Service:

  • Google — authentication (sign-in).
  • Vercel — hosting.
  • Neon — database (your saved trips).
  • Upstash — rate limiting.
  • LiteAPI — hotel search (we send the overnight coordinates and stay dates).
  • OpenRouteService & OpenStreetMap — routing and place names (we send route coordinates).

4. Cookies

We use a single essential session cookie to keep you signed in. We do not use analytics or advertising cookies, so no cookie banner is required.

5. Data retention

Saved trips are kept until you delete them. Deleting your account (in My account) permanently removes your trips, sessions and account data.

6. International transfers

Some providers may process data outside the European Economic Area under appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

7. Your rights

Under the GDPR and the Spanish LOPDGDD you may access, rectify, erase, restrict, port or object to the processing of your data, and withdraw consent at any time. To exercise these rights, contact [CONTACT EMAIL]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Changes

We may update this policy; the “last updated” date above reflects the latest version.