Privacy Policy

1. Introduction

Trippal (operated by Trippal Technologies, New Delhi, India) helps customers create custom travel albums, memory books, gifts, and related printed products. To provide our services, we collect and process the personal information described in this policy.

By placing an order or using our website, you agree to the collection and use of information as described here. If you have questions, contact us at team@trippal.in.

2. Information We Collect

When you place an order or use Trippal services, we may collect:

• Identity and contact: name, email address, phone number.
• Delivery information: shipping/billing address, pincode, city, state.
• Order details: trip title, trip dates, destination, captions, personalisation messages, and other order-specific information you provide.
• Uploaded files: photos, videos, files, and ZIP archives you upload for your album or order.
• Payment references: Razorpay transaction IDs and order references. We do not store card numbers; payments are processed by Razorpay.
• Google Drive files (optional): if you choose to use our Google Drive upload feature, we access only the specific files you explicitly select through the Google Drive Picker. See Section 4 for full details.
• Technical data: browser type, device type, IP address, pages visited, timestamps, and error logs for security, debugging, and analytics purposes.

3. How We Use Your Information

• To create, manage, and fulfil your orders (design, print, and ship your album or gift).
• To upload, process, and preview photos for album design.
• To communicate with you about order status, preview approvals, revisions, and delivery.
• To process payments and confirm advance and balance payments.
• To provide customer support and handle revision requests.
• To prevent fraud, abuse, and security incidents.
• To improve our website, products, and services through analytics.
• To send marketing communications (you may unsubscribe at any time).

4. Google Drive Data

Trippal offers an optional Google Drive upload feature that allows you to select photos from your Google Drive account for use in your album or order.

• Optional: Google Drive upload is entirely optional. You may use device upload or ZIP upload instead at any time.
• Scope: Trippal uses only the https://www.googleapis.com/auth/drive.file scope. This scope grants access only to files that you explicitly select through the Google Drive Picker. Trippal does not access, browse, scan, or read any other files in your Google Drive.
• What we access: Only the specific files you select through the Picker interface. We do not access your full Google Drive or any files you did not select.
• How we use selected files: Selected files are imported into Trippal's secure storage solely for preview, captioning, order creation, album design, customer support, and fulfilment. File names and image content may be processed for these purposes only.
• No advertising use: Trippal does not use Google Drive data for advertising, profiling, or any purpose unrelated to your order.
• No data sale: Trippal does not sell Google user data or Google Drive data to any third party.
• No unrelated sharing: Google Drive data is not shared with unrelated third parties. It may be shared only with our internal design team, print/fulfilment partners, and cloud storage providers strictly as necessary for your order.
• Access tokens: OAuth access tokens are used only to import your selected files and are not stored longer than necessary for that operation.

5. How We Share Your Information

We do not sell your personal data. We share data only when necessary:

• Internal team: our designers and production staff access your photos and order details to create your album.
• Print and fulfilment partners: your name and delivery address are shared with printing and shipping partners to fulfil your order.
• Razorpay: payment details are processed by Razorpay in accordance with their privacy policy.
• Supabase and Vercel: our cloud storage and hosting infrastructure providers store and serve your data. They are bound by their own data processing agreements.
• Resend: our email service provider sends transactional emails on our behalf.
• Meta and Microsoft: analytics and advertising data as described in the Analytics section below.
• Legal compliance: we may disclose data when required by law, court order, or government authority.

6. Analytics and Advertising Tools

We use the following third-party tools:

• Meta Pixel (Facebook Pixel): to measure advertising effectiveness and reach relevant audiences. Meta may set cookies and collect browsing data. You can opt out via your Facebook Ad Preferences.
• Microsoft Clarity: for session analytics, heatmaps, and session recordings to understand how visitors use our website. Data is processed by Microsoft per their Privacy Statement.

7. Data Retention

• Order information, photos, and related data are retained as needed for production, customer support, accounting, and legal or business record-keeping obligations.
• We aim to delete your uploaded photos within 90 days of order completion unless you request earlier deletion.
• Google Drive access tokens are not retained beyond the duration needed to complete the file import.
• You may request deletion of your data at any time by contacting team@trippal.in. We will process requests where legally and operationally possible. Note that backup copies may take additional time to be fully removed.

8. Your Choices and Rights

• You may use device upload or ZIP upload instead of Google Drive at any time.
• You may request access to, correction of, or deletion of your personal data.
• You may opt out of marketing emails at any time via the unsubscribe link or by contacting us.
• You may disable cookies in your browser settings (this may affect site functionality).

To exercise any right, email team@trippal.in.

9. Security

We implement reasonable technical and organisational safeguards to protect your data, including encrypted transport (HTTPS), access controls, and limited staff access. No system is perfectly secure; we cannot guarantee absolute security. In the event of a breach affecting your data, we will notify you as required by applicable law.

10. Children's Privacy

Trippal services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with data, please contact us for deletion.

11. International Data Transfers

Trippal is based in India. Your data may be processed and stored by our service providers (Supabase, Vercel, Resend, Razorpay, Google) in India or other countries. By using our services, you consent to this transfer. We ensure our providers maintain appropriate data protection standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email if you have placed an order with us. The updated policy will be posted on this page with a new "Last updated" date.

13. Contact

Questions about this policy or requests regarding your data:

• Email: team@trippal.in
• Phone: +91 62667 28167
• Trippal Technologies, New Delhi, India