Privacy Policy
Effective November 6, 2026
Terms of Service · Privacy Policy · Acceptable Use
- We collect what we need to run fare alerts: your email, home airport, destination and travel dates (travelers), and your brand and account details (partners).
- Travelers' data is used to send the alerts they asked for, under the partner's name. We don't sell personal data or use it for unrelated marketing.
- The partner whose page you signed up on can see and export your sign-up details.
- You can unsubscribe in one click and ask us to access or delete your data anytime.
1. Who we are
Trip Watch (tripwatchhq.com and partner pages it hosts, including partner custom domains) is operated by Conclusive Digital ("we", "us"). This policy explains what personal data we collect, why, and your choices. Contact: our contact form.
For travelers, the partner whose page you signed up on and Trip Watch both handle your data: the partner decides to offer you alerts and can export your details; we run the service and send the emails. For partners' own account data, we're responsible.
2. What we collect
Travelers
- What you give us: email address, home airport, destination, travel month or dates, trip type and length, party size, and anything else you enter (for example the fare you paid, if you use "already booked?").
- Activity: whether you confirmed, opened or clicked alerts, which booking or offer links you clicked, and where you signed up from (for example the partner's Instagram link).
Partners
- Name, email, brand name, website, social handles, logo, colours, cover photo, destinations, affiliate IDs, and messages you send us.
- Billing details are collected and stored by Stripe. We receive your Stripe customer and subscription IDs, plan, billing status and the email on your Stripe account, but not your full card number.
- For demo pages, we may collect publicly available business information about you (for example from your website or public social profile) to build the demo and contact you about it.
Everyone
- Usage and device data: pages viewed, time on page, scrolls and clicks, referrer and campaign tags (utm), browser type, and approximate location derived from your IP address. We keep IP addresses only in hashed or short-lived form for rate limiting and abuse prevention.
- Cookies and local storage: a first-party visitor ID (
vh_vid, up to one year) for our own traffic analytics, a sign-in session cookie for the partner dashboard, and small local-storage items so pages remember your trip or form on your device. Cloudflare Turnstile (a privacy-focused alternative to CAPTCHA) checks that sign-ups come from people. We don't use third-party advertising cookies on traveler pages.
3. How we use it
| Purpose | Legal basis (where GDPR/UK GDPR applies) |
|---|---|
| Send the fare alerts, price-drop notices and trip reminders you asked for | Performing our service for you; consent where required for email |
| Run partner accounts, dashboards, billing and support | Contract |
| Show partners their sign-ups and let them export or sync them | Legitimate interests of the partner and us in running the service you signed up for |
| Measure and improve Trip Watch, attribute sign-ups and clicks to sources | Legitimate interests |
| Prevent spam, fraud and abuse; keep the service secure | Legitimate interests; legal obligations |
| Contact businesses about a demo page we built for them | Legitimate interests (you can opt out anytime) |
| Comply with law and enforce our terms | Legal obligations; legitimate interests |
We don't sell personal data, and we don't share it for cross-context behavioural advertising. We never send travelers marketing for unrelated products.
4. Who we share it with
- The partner whose page you used (travelers' sign-up details and activity on their page).
- Service providers who process data for us: Cloudflare (hosting, database, security), Resend (email delivery), Stripe (payments), Google Fonts (font delivery), and, if a partner connects it, Anthropic (Claude connector, limited to that partner's own page data). Slack may be used for internal notifications about partner activity.
- Travel and affiliate partners such as Travelpayouts and Aviasales: when you click a booking link, you go to their site and they receive the click and a tracking tag (not your email). Their privacy policies apply on their sites.
- Authorities or others when required by law, to protect rights and safety, or as part of a business transfer (for example a merger), with this policy continuing to apply.
5. How long we keep it
- Traveler sign-ups: while your trip is being watched and for a reasonable period afterwards so you can see past trips; deleted or anonymised when you ask, or when the partner's page is deleted.
- Unsubscribes: we keep a record of your unsubscribe so you aren't emailed again.
- Partner accounts: while active; paused pages are archived after 60 days and archives may be kept so they can be restored, then deleted.
- Unclaimed demo pages: about 30 days.
- Analytics and logs: generally up to 13 months.
- Billing records: as long as tax and accounting law requires.
6. Your choices and rights
- Unsubscribe with the link in any email, or stop a single trip from its trip page.
- Depending on where you live (for example the EU, UK, California and other US states), you may have the right to access, correct, delete or export your data, to object to or restrict certain uses, and to withdraw consent. Email our contact form. We'll respond within the time the law requires and won't treat you differently for using your rights.
- If you signed up on a partner's page, you can also contact the partner. Data a partner has already exported is under their control.
- You can complain to your local data protection authority.
7. International transfers
We're based in the United States and our providers may process data in the US and other countries. Where required, we rely on appropriate safeguards such as the providers' standard contractual clauses.
8. Security
We use encryption in transit, access controls, hashed identifiers for rate limiting, sign-in by one-time links instead of passwords, and reputable infrastructure providers. No system is perfectly secure; if a breach affects you, we'll notify you as the law requires.
9. Children
Trip Watch is not directed to children under 16 and we don't knowingly collect their data. If you believe a child has signed up, contact us and we'll delete it.
10. Changes
We'll post any changes here with a new effective date, and tell partners by email about significant changes.