Privacy notice

Who we are

Tripixo is operated by Ribbitnova Inc. ("Tripixo", "we", "us"). For any privacy question, request, or complaint, contact us at hello@tripixo.ai. Ribbitnova Inc. does not yet have a fixed registered business address published on this site; if you need it for a formal request (including a GDPR or CCPA request), email us and we will provide it.

What we collect

Preview and creator-interest submissions: name, email address, phone or WhatsApp number, creator type, channel and content links, additional social profiles and follower counts, audience range, travel-content views, monetization preferences, affiliate platforms, selected interests, and the challenge you want to solve. We calculate an internal intent score from this information to help us prioritize research and support; the score does not make an automated legal or financial decision about you, and you can ask us to explain or exclude it (see "Your rights" below).

Creator accounts: profile information, password hashes, sessions, trip drafts, published trip pages and publication history, calendar availability, and (where a creator connects Google Calendar) the calendar access token and event data needed to show and manage booking availability.

Traveller accounts and bookings: name, email address, guest or registered account details, booking and payment metadata (see "Payments" below), messages sent through inquiry forms, and — for booked consultation calls — call recordings, transcripts, and AI-assisted notes where the creator has enabled recording and you have consented on the call-consent screen.

Everyone: published trip pages collect privacy-limited page views and outbound-click events tied to a browser session identifier, not to your name. See our Cookie policy for the full list of cookies, including optional analytics cookies that only load with your consent.

Payments

Card payments for creator subscriptions and traveller bookings are processed by Stripe. We do not store full card numbers on our servers — Stripe collects and stores payment card data directly under its own PCI-compliant systems. We store transaction metadata (amount, status, associated booking or subscription, billing email) needed for receipts, payouts, support, and accounting. See Stripe's privacy policy for how Stripe handles your payment data.

Google Calendar

If a creator chooses to connect Google Calendar, we request access to their email, basic profile, and calendar scopes via Google OAuth. We use this only to check free/busy availability, prevent double-booked planning call slots, and create private Tripixo booking blocks for confirmed planning calls on that creator's own calendar. We do not show private event titles, notes, guests, or locations to travellers. A creator can disconnect Google Calendar at any time from their creator settings, which revokes our access.

Tripixo's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI models.

Call recording, transcription, and AI notes

Paid consultation calls may be recorded and transcribed, with an AI-assisted summary generated to help the creator prepare trip notes. This only happens where the traveller has agreed on the pre-call consent screen. Recordings are not made public and are not used for advertising. Retention and deletion of call recordings follow the same request process described under "Your rights" below; email us to request deletion of a specific recording or transcript.

How we use your information

We use this information to: review preview requests and prepare monetization previews; create and operate creator and traveller accounts; process bookings and payments; enable calendar scheduling; provide call recording/transcription features you've opted into; prevent duplicate, fraudulent, or abusive submissions; provide customer support; conduct product research and improve Tripixo; and communicate with you about your account or Tripixo's development.

Our legal bases for these uses (under GDPR Article 6) are: performance of a contract (running your account, processing bookings and payments), your consent (optional analytics cookies, call recording), our legitimate interests (fraud prevention, product research, service improvement), and legal obligation (accounting and tax records).

How it is stored and shared

Preview-request and creator-interest information may be sent to our configured form-processing webhook or stored in Supabase; a webhook may connect to services such as Google Sheets, Make, Zapier, or n8n. Creator and traveller product data, bookings, and messages are stored in our configured PostgreSQL database. Payment data is held by Stripe. Calendar data is held by Google and mirrored only as needed in our database. We do not sell your personal information.

We use vendors located inside and outside your country, including the United States and other countries where our infrastructure and service providers (such as Supabase, Stripe, and Google) operate. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on the safeguards those providers offer (such as Standard Contractual Clauses) as part of their own compliance programs.

Retention

We keep preview-request and creator-interest data while the account or research relationship is active, and delete it within 24 months of the last interaction if no account is created. Creator and traveller account data is kept for as long as the account is open, plus a limited period afterward to comply with legal, accounting, and dispute-resolution obligations (generally up to 7 years for financial records). Call recordings and transcripts are kept only as long as needed for the creator to prepare trip notes unless you request earlier deletion or longer retention is required by law.

Your rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; request erasure; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent at any time (for example, by rejecting analytics cookies or asking us to stop using recording features). To exercise any of these rights, email hello@tripixo.ai. If you are in the EEA, UK, or Switzerland and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

You can manage optional analytics cookies at any time on our Cookie policy page.

Children

Tripixo is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Policy updates

This notice will be updated as our company, infrastructure, and service providers evolve; material changes will update the "Last updated" date above.