Privacy Policy
Placeholder, pending legal review
This policy has not yet been reviewed by a lawyer. It must be reviewed and, where needed, revised before InviteTrip opens to the public.
This is a first working draft, not a finished legal document, produced so InviteTrip has a real Privacy Policy in place rather than the dangling reference the current Terms and Conditions page makes to a policy that does not yet exist. Treat this the same way the Terms page itself was treated: a placeholder, clearly labeled as such if it goes live, until a lawyer reviews it.
1. Scope
This policy explains what personal information InviteTrip collects when someone creates an account, completes a profile, or uses the platform, and how that information is used, shared, and protected. InviteTrip is a dating and travel-companion platform for adults 18 and older. It does not knowingly collect information from anyone under 18, and any account found to belong to a minor will be removed.
2. Information we collect
Account information: email address, password (stored as a salted hash, never in plain text), and the timestamp of Terms acceptance.
Profile information: name, date of birth, gender, role (Inviter or Invitee), nationality, country and city of residence, profession, languages, interests, zodiac sign, a written bio, and profile photos.
Travel and matching information: destinations and date ranges entered as travel plans, and preference fields used to power matching.
Communications: messages sent between members through the platform, and reports or incident details submitted through the reporting system.
Identity verification information: when a member chooses to verify their identity, a government-issued ID document and a live photo or video are collected and processed by our verification provider. InviteTrip does not store the document image or biometric data itself, only the resulting decision (approved, declined, or under review) and a reference ID.
Technical and usage information: device and browser type, IP address, log data, and general usage patterns collected automatically to keep the platform secure and working correctly.
3. How we use this information
To operate the core service: creating and displaying profiles, powering the matching and discovery experience, and enabling messaging between matched members.
To keep the platform safe: reviewing reports, investigating incidents, detecting fraud or abuse, verifying identity, and enforcing the Terms and Conditions, including account suspension or removal when necessary.
To communicate with members: account confirmation, security notices, and service updates. InviteTrip does not sell member information to third parties for their own marketing use.
To improve the product: understanding how the platform is used in aggregate, in a form that does not single out any individual member, to guide future development.
4. Who we share information with
InviteTrip does not sell personal information. Information is shared only with the service providers that make the platform work, each acting under their own data protection commitments, and only to the extent needed for their function:
Supabase, for account authentication and the underlying database.
Vercel, for application hosting.
Resend, for transactional email, including account confirmation and safety alerts.
Didit, for identity verification, when a member chooses to verify their identity. Didit processes the government ID document and live photo or video directly and returns only a decision to InviteTrip; InviteTrip does not receive or store the document image or biometric data itself.
This list reflects the technical providers in use as of August 2026 and should be kept current as the underlying infrastructure changes.
Information may also be disclosed where required by law, such as in response to a valid legal request, or to protect the safety of a member or the public in a genuine emergency.
5. Data retention
Profile and account information is retained for as long as an account remains active. If an account is deleted, associated personal information is removed within a reasonable period afterward, except where retention is required for legal, safety, or fraud-prevention purposes, such as records tied to an active incident report or a completed identity verification decision.
6. Your rights
Depending on where a member is located, applicable law may provide rights to access, correct, delete, or export personal information, and to object to or restrict certain uses of it. Any member can request this by contacting info@invitetrip.com. This section will need jurisdiction-specific detail from counsel.
7. Cookies and similar technology
InviteTrip uses only the cookies and local storage necessary to keep a member signed in and the platform functioning correctly. It does not currently use third-party advertising or tracking cookies.
8. Security
InviteTrip uses industry-standard safeguards, including encrypted connections and access controls limiting who can view member data, to protect information from unauthorized access. No online service can guarantee perfect security, and members should use a strong, unique password.
9. International data transfers
Depending on where InviteTrip's infrastructure providers operate, personal information may be processed in a country other than the one a member resides in. Appropriate safeguards will be used for any such transfer as required by applicable law, with jurisdiction-specific detail to follow counsel's Phase 4 review.
10. Changes to this policy
This policy may be updated as the platform evolves. Material changes will be communicated to members before they take effect.
11. Contact
Questions about this policy or a member's personal information can be sent to info@invitetrip.com.
Status: placeholder, pending legal review, not yet published as final.