Privacy Policy

When you use Travel Manager, we collect and store the following on your behalf:

• •Account information: your email address (required for sign-in) and, optionally, your name and profile photo.
• •Username: a unique @handle, auto-generated from your email and editable at any time. It lets other users find and add you as a friend. See “Friends & Connections” below for how it is shared and how to stay out of search.
• •Home location: if you enter a home city, we geocode it to latitude and longitude so the map view can center on it. This is never pulled from your device’s GPS — you type it in manually.
• •Your business data: the trips, clients, vendors, bookings, meetings, itinerary items, expenses, checklists, and notes that you create in the app. This data is yours. We treat it as confidential and process it only to provide the service you’re paying for (or using free during beta).
• •Attachments: any files you upload (receipts, booking confirmations, etc.).
• •Push notification tokens: if you enable notifications, we store an Apple Push Notification Service (APNs) token so we can send you the alerts you requested.
• •Usage analytics: we log in-app clicks and page visits to understand which features are used and to fix bugs. This is first-party only, linked to your account, and never sold or shared with advertisers. You can turn it off at any time from Settings → Privacy.
• •Audit log: sign-in, sign-out, data export, and account deletion events are logged with IP address and user agent for security.

• •We do not track you across other apps or websites.
• •We do not use the iOS advertising identifier (IDFA).
• •We do not sell or share your data with data brokers or ad networks.
• •We do not read your email. Travel Manager does not connect to Gmail or any other mailbox.
• •We do not send your business data or any other personal data to a third-party AI service.
• •We do not access your device’s contacts, photos, camera, microphone, or location without an explicit in-app request and your permission.

• •Database and authentication: Supabase (PostgreSQL), US region.
• •Web hosting: Vercel, US region.
• •Encryption: data is encrypted in transit (TLS) and at rest.

• •You. Always. You can view, edit, export, and delete everything from inside the app.
• •Chace Claborn (developer/operator), only when required to resolve a support request you have opened or to investigate a security incident.
• •Other Travel Manager users, but only the limited public profile (username, name, and profile photo) described in “Friends & Connections” below — never your trips, clients, bookings, or any other business data.
• •Beyond the infrastructure and utility processors listed under “Third-Party Services” below, no one else. We do not sell your data, and we have no marketing data warehouse or advertising/analytics vendor that touches your business data.

Travel Manager lets you connect with other users as friends. To make this work, a limited public profile is visible to other users:

• •Your public profile is only your username (@handle), your name, and your profile photo. Your trips, clients, vendors, bookings, expenses, notes, home location, and email address are never exposed to other users.
• •Discoverability is on by default: your @handle can appear in other users’ friend-search results so they can add you. You can turn this off at any time from Settings — when off, you no longer appear in search, though someone who already knows your exact @handle can still send you a request.
• •Adding a friend requires both sides: a request must be sent and then accepted before you are connected. Either person can remove the connection at any time.
• •We do not import your phone or email contacts, and we do not suggest friends based on any address book.

The following services may process limited data on our behalf:

• •Supabase — database and authentication provider (processor).
• •Vercel — web hosting (processor).
• •Apple Push Notification Service — push delivery, if you enable it.
• •Open-Meteo — weather forecasts. We send only the latitude and longitude of the trip destination. No user identity is transmitted.
• •Frankfurter — currency exchange rates. We send only currency codes.
• •OpenStreetMap Nominatim — place search / geocoding. We send the place text you type when searching for a destination or address.
• •OSRM (Open Source Routing Machine) — driving distances and routes. We send only trip waypoint coordinates.
• •AeroDataBox (via RapidAPI) — flight lookups, if you use flight search. We send the flight number and date you enter.
• •GitHub and Resend — used only to deliver the in-app feedback/support messages you choose to send. They receive the message text and your account identifier so we can follow up.

You have the right to:

• •Access and export all your data. Use the in-app export feature (available at /api/user/export) to download a complete JSON archive of your account.
• •Correct any information by editing it inside the app.
• •Delete your account and all associated data at any time. Use the in-app delete-account feature (available at /api/user/delete). Deletion is permanent and cannot be undone.
• •Withdraw consent for optional features (push notifications, home location), hide yourself from friend search, and turn off usage analytics from settings at any time.
• •We comply with GDPR and CCPA to the extent they apply.

Travel Manager is a professional tool for travel agents and is not directed at children under 13. We do not knowingly collect data from children.

If this policy changes materially, we will notify active users by email and via an in-app banner at least 14 days before the change takes effect.

Questions? Email chaceclaborn@gmail.com.