Privacy Policy

• Your workspace lives in your browser and on our servers. While you are signed in it syncs automatically, a second or so after each change.
• Your screenshots are sent to OpenAI to be read. That is how the extraction works.
• A proposal you publish is readable by anyone holding its link.
• We do not sell your data and we do not use your screenshots to train AI models.
• You can delete your account, and everything in it, yourself from the account menu.

Your account. Your email address, a password stored only as a salted scrypt hash, and a session cookie that keeps you signed in. If you sign in with Google we receive your email address and basic profile from Google; we never see your Google password.

Your workspace. The screenshots you add, the trips and folders you put them in, everything extracted from them, your edits, your saved hotels and their images, your agency logo, and the proposals you build. Screenshots are held as image files.

Page context from the extension. When you capture with the Chrome extension, the address, title and a little metadata of the page you captured are stored alongside the screenshot. TripFunnel uses the address as an independent check on what it read from the image, because a link cannot be misread the way pixels can.

Billing. Your plan and subscription status. Payments run through Paddle; card details go to them, not to us, and we never hold them.

TripFunnel keeps a copy of your workspace in your browser, in IndexedDB, so it is fast and keeps working if you go offline.

While you are signed in, that workspace is also uploaded to our servers automatically, shortly after each change you make, so your trips are on every device you sign in from. The upload includes the screenshot images themselves, not only the text extracted from them.

Clearing your browser data removes the local copy. It does not remove the copy held in your account.

When you analyse a screenshot, the image is compressed and sent to OpenAI, which reads the text and returns what it found. This happens for every screenshot you analyse, and it is the only way the product works.

We send the image and an instruction to transcribe it. We do not send your name, your email, your client's details or your other trips. We use OpenAI under terms that do not permit your content to be used to train their models. Their handling of data in transit is governed by their own policies, and their processing may take place outside your country.

Because these models are probabilistic, what comes back is sometimes wrong. Nearly every field is editable for that reason, and the Terms of Service set out where responsibility for checking sits.

Publishing a proposal stores a copy on our servers and creates a link. That link is not protected by a password and not restricted to the client you sent it to. Anyone who has it can open the proposal, including the prices, dates and any images you added. Only publish what you are content for a stranger to read, and only include client details you actually need.

We share what we must, with whom we must, and no further:

• OpenAI, to read your screenshots;
• Paddle, to take payment and manage your subscription;
• Google and Firebase, if you use Google sign-in;
• our hosting provider, which stores the data on our behalf;
• anyone you hand a published proposal link to;
• authorities, where we are legally required to.

We do not sell your data, and we do not share it for advertising.

The extension can read the page you are on when you ask it to capture. It needs broad site access because travel research happens across many sites and we cannot know in advance which ones you will use.

It acts when you click: it does not read pages in the background, does not follow your browsing, and does not send anything anywhere until you capture. Captures wait in the browser's own storage until the workspace picks them up.

We use one essential cookie, to keep you signed in. There is no advertising or tracking cookie and no third-party analytics profile of you.

Your workspace is kept while your account is open, because it is the product.

You can delete your account yourself, from the account menu. Deleting it erases your trips, your screenshots, your saved hotels and every proposal you published, from our servers and from this browser, immediately and irreversibly. Proposal links you have already sent stop working.

We keep billing records after deletion where tax and accounting law requires it. Nothing else is retained.

Depending on where you live, including under the Israeli Privacy Protection Law and the GDPR, you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to some processing. Write to hello@tripfunnel.example and we will respond within 30 days.

You do not have to wait for us for the two common ones: you can export your workspace from the account menu at any time, and you can delete your account and its contents yourself.

Passwords are stored only as salted scrypt hashes and are never recoverable in plain text. Sessions are signed. Traffic is encrypted in transit.

No service is perfectly secure. If we discover a breach affecting your data we will tell you and the relevant regulator as the law requires.

TripFunnel is a professional tool and is not intended for anyone under 18. We do not knowingly collect data from children.

We will update this policy as the product changes. If a change is significant, especially one that affects where your data goes, we will tell you before it takes effect rather than quietly changing the date at the top.

TripFunnel, hello@tripfunnel.example.