Coordinating a group means holding sensitive data. We treat it that way.
Travel dates, budgets and payment status are personal. Here is how that data is handled, stated plainly and without overclaiming.
What is stored
Trip details, RSVP responses, budget bands and payment status needed to run the coordination. Payment share amounts are tracked; sensitive card data is handled by the payment provider, not held by us.
Retention
Trip data is retained while a trip is active and for a limited period afterward so the group can reference it. Data tied to a closed trip is removed once it is no longer needed for that trip.
Access scope
Access to a trip's data is limited to its travelers and organizer. Internal access is restricted to what is needed to operate and support the service.
Encryption in transit and at rest
Data is encrypted in transit using standard transport encryption, and stored data is encrypted at rest.
Privacy within a group
Coordinating many people doesn't mean everyone sees everything about each other.
What the group can see
The shared plan, each traveler's confirmation and paid-or-pending status, and their participation in shared activities - the things the group genuinely needs to coordinate.
What stays private
A traveler's exact budget band is used to shape the plan but is not broadcast to the group. Individual expenses stay on that person's own tab rather than being exposed to everyone.
Compliance posture
We describe our security practices honestly and only claim what is currently in place. Where a formal certification is not yet held, we say so rather than implying one. If you have a specific compliance requirement for a corporate or event booking, talk to us and we'll tell you exactly where we stand.