Privacy Policy

Last updated: March 12, 2026

1. Introduction

Invsion OG ("we," "our," or "us") operates the Tripzy mobile application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

By using Tripzy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use Tripzy:

  • Name: To personalize your experience
  • Email address: For account management, communication, and service updates
  • Travel preferences: Destinations, activities, dates, and other trip-related information you provide
  • Trip data: Itineraries, bookings, and travel plans you create within the app

2.2 Automatically Collected Information

  • Device information: Device type, operating system, unique device identifiers
  • Usage data: Features used, actions taken within the app, time spent
  • Log data: IP address, browser type, pages visited, time and date of visits

2.3 Information We Do NOT Collect

  • Location data or GPS coordinates
  • Payment information (handled by RevenueCat and Apple/Google)
  • Telephone numbers

3. How We Use Your Information

We use the collected information for the following purposes:

  • Trip Planning: Generate AI-powered itineraries based on your preferences
  • Service Improvement: Analyze usage patterns to enhance features and user experience
  • Communication: Send service updates, newsletters, and marketing communications (with your consent)
  • Analytics: Understand how users interact with our app to improve functionality
  • Customer Support: Respond to your inquiries and provide technical assistance
  • Legal Compliance: Comply with applicable laws and regulations

4. Third-Party Services

We use the following third-party services that may collect and process your data:

Supabase: Database and authentication services. Data is stored in Austria (EU).
OpenAI API: Powers AI-generated travel itineraries and recommendations.
Claude API (Anthropic): Additional AI capabilities for trip planning.
Google Maps API: Map display and location services for destinations.
Weather API: Provides weather information for your destinations.
Flight API: Retrieves flight information and scheduling data.
RevenueCat: Manages subscription payments and in-app purchases.

These third-party services have their own privacy policies. We encourage you to review them to understand how they handle your data.

5. Data Storage and Security

5.1 Data Storage Location

Your data is primarily stored in Austria (EU) through our database provider Supabase, ensuring GDPR compliance.

5.2 Data Retention

We retain your personal data for as long as your account is active. When you delete your account, all associated personal data is permanently deleted from our systems.

5.3 Security Measures

We implement industry-standard security measures including encryption, secure authentication, and regular security audits to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at office@invsion.at

7. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

8. International Data Transfers

While our primary data storage is in Austria (EU), some third-party services we use may transfer data internationally. We ensure that appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

9. Marketing Communications

With your consent, we may send you marketing emails about new features, special offers, and travel tips. You can opt out of marketing communications at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Adjusting your notification preferences in the app settings
  • Contacting us at office@invsion.at

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Invsion OG

Lobaustraße 64/10

2301 Groß-Enzersdorf

Österreich

Email: office@invsion.at

Phone: +43 677 63 15 9993

12. Data Protection Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Österreichische Datenschutzbehörde

Barichgasse 40-42

1030 Wien

Austria

Website: www.dsb.gv.at