Privacy Policy

FortripAI, Inc. (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement, "Site" refers to the Company's website, which can be accessed at fortrip.ai or through our mobile application.

"Service" refers to the Company's services accessed via the Site, in which users can plan travel itineraries, book accommodations, discover attractions, obtain travel recommendations through AI-powered chat assistance, and access other travel-related services.

The terms "we," "us," and "our" refer to the Company.

"You" refers to you, as a user of our Site or our Service.

By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use (found here: https://fortrip.ai/terms), and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

I. INFORMATION WE COLLECT

We collect "Non-Personal Information" and "Personal Information." Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes information that can be used to personally identify you, which you submit to us through the registration process or use of the Service.

Personal Information We Collect:

• Account Information: Email address, username, password (encrypted), user ID
• Profile Information: Name, phone number, date of birth, gender, profile photo
• Travel Information: Travel destinations, trip dates (departure and return), travel budget, travel preferences and interests, itinerary details, accommodation preferences, transportation preferences, dietary restrictions, accessibility requirements
• Booking Information: Guest names (for hotel bookings), contact information for bookings (email, phone), special accommodation requests, room preferences, number of travelers
• Payment Information: Credit/debit card information, billing address, payment history, transaction details (processed through secure third-party payment processors)
• Location Data: Geolocation data (latitude and longitude), city, country, IP address-derived location
• Communication Data: Chat messages and conversation history with our AI assistant, customer support communications, feedback and survey responses
• Travel Documents: Passport information, visa details, travel insurance information, emergency contact information, loyalty program memberships
• Device Information: Browser type and version, device type, operating system, device identifiers

1. Information collected via Technology

To activate the Service you do not need to submit any Personal Information other than your email address. To use the Service thereafter, you may need to submit further Personal Information as listed above. However, in an effort to improve the quality of the Service, we track information provided to us by your browser or by our software application when you view or use the Service, such as the website you came from (known as the "referring URL"), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information that does not personally identify you.

We track this information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user's browser from our servers and are stored on the user's computer hard drive. Sending a cookie to a user's browser enables us to collect Non-Personal information about that user and keep a record of the user's preferences when utilizing our services, both on an individual and aggregate basis.

For example, the Company may use cookies to collect the following information:

• User preferences for AI chat model selection
• Session information and authentication status
• Page views and navigation patterns
• Feature usage statistics
• Search queries and travel destinations viewed
• Time spent on various sections of the Site
• Click-through rates on recommendations

The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser.

2. Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create a personal profile. You can create a profile by registering with the Service and entering your email address, and creating a user name and a password. By registering, you are authorizing us to collect, store and use your email address in accordance with this Privacy Policy.

As you use the Service, you may provide additional information such as travel preferences, destinations of interest, budget information, and booking details. We collect and store this information to provide you with personalized travel recommendations and to improve your experience with our Service.

3. Children's Privacy

The Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at info@fortrip.ai.

II. HOW WE USE AND SHARE INFORMATION

Personal Information:

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as:

• Authentication Services: We use Clerk for user authentication and account management. Your email address and authentication credentials are processed by Clerk in accordance with their privacy policy.
• Cloud Infrastructure Providers: We use cloud hosting services (such as MongoDB Atlas, Vercel) to store and process your data securely.
• Hotel Booking Partners: We share necessary booking information (guest names, contact details, special requests) with our hotel booking partner (Duffel) to facilitate your reservations.
• AI Service Providers: Your chat messages and travel queries are processed by AI service providers (such as OpenAI, Anthropic) to generate personalized travel recommendations and itineraries.
• Payment Processors: Payment information is processed by secure third-party payment processors and is not stored on our servers.
• Analytics Providers: We use Vercel Analytics to understand how users interact with our Service and to improve user experience.
• Email Service Providers: We use email service providers to send you transactional emails, booking confirmations, and service updates.

Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy and applicable data protection laws.

In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to:

• Provide, maintain, and improve our Service
• Process your travel bookings and reservations
• Generate personalized travel itineraries and recommendations
• Respond to your questions and provide customer support
• Send you booking confirmations, travel updates, and service notifications
• Communicate with you about your account and transactions
• Solicit feedback from users about the Service
• Inform users about promotional offers (with your consent)
• Detect, prevent, and address technical issues, fraud, and security concerns
• Comply with legal obligations and enforce our Terms of Service

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information:

In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including:

• Encryption of data in transit using secure socket layer (SSL/TLS) technology
• Encryption of sensitive data at rest
• Secure authentication through industry-standard authentication providers
• Regular security audits and vulnerability assessments
• Firewalls and network security measures
• Access controls and authentication requirements for our systems
• Secure payment processing through PCI-compliant third-party processors

However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. You can also indicate that you do not wish to receive marketing communications from us in the "Account" section of the Site. Please note that notwithstanding the promotional preferences you indicate by either unsubscribe or opting out in the "Account" section of the Site, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy, booking confirmations, travel updates, and account security notifications.

Depending on your jurisdiction, you may have additional rights regarding your Personal Information, including:

• Access: You have the right to request access to the Personal Information we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete Personal Information.
• Deletion: You have the right to request deletion of your Personal Information, subject to certain legal obligations we may have to retain certain information.
• Data Portability: You have the right to request a copy of your Personal Information in a structured, commonly used, and machine-readable format.
• Objection: You have the right to object to certain processing of your Personal Information.
• Restriction: You have the right to request that we restrict the processing of your Personal Information under certain circumstances.

To exercise any of these rights, please contact us at info@fortrip.ai. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

V. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

VI. DATA RETENTION

We retain your Personal Information for as long as necessary to provide you with our Service, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specifically:

• Account Information: Retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations.
• Chat and Conversation Data: Retained to improve our AI services and provide you with conversation history. You can delete individual chats at any time through your account settings.
• Booking Information: Retained for a period required by law for accounting and tax purposes, typically 7 years.
• Travel Itineraries and Preferences: Retained to provide you with personalized recommendations and can be deleted upon request.

When we no longer need to use your Personal Information and there is no need for us to keep it to comply with our legal obligations, we will either remove it from our systems or anonymize it so that it can no longer identify you.

VII. INTERNATIONAL DATA TRANSFERS

Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including Personal Information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

VIII. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

IX. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have specific rights regarding your Personal Information under the California Consumer Privacy Act (CCPA). These rights include:

• The right to know what Personal Information we collect, use, disclose, and sell
• The right to request deletion of your Personal Information
• The right to opt-out of the sale of your Personal Information (Note: We do not sell your Personal Information)
• The right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, please contact us at info@fortrip.ai.

X. EUROPEAN UNION USERS (GDPR)

If you are located in the European Union, you have certain rights under the General Data Protection Regulation (GDPR). We process your Personal Information based on the following legal grounds:

• Consent: You have given us clear consent to process your Personal Information for a specific purpose.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal Obligation: Processing is necessary for us to comply with the law.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests.

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your rights under GDPR.

XI. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to info@fortrip.ai.

You may also contact us at:

Last Updated: This Privacy Policy was last updated on November 6, 2025