Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Vero Labs LLC ("VeroTrip," "we," "us," or "our") collects, uses, shares, and retains information when you use the VeroTrip web application and related mobile app experiences at verotrip.app (the "Service").

By using the Service, you agree to the practices described here.

1. Who we are

VeroTrip is operated by Vero Labs LLC, based in the Province of Alberta, Canada. For privacy questions, contact us at [email protected].

2. Information we collect

Information you provide:

• Account information: your name, email address, authentication identifiers, and account preferences.
• Trip and outing content: destinations, dates, travelers, itineraries, activities, flights or lodging details you enter, notes, bucket-list items, outing plans, and imported trip content.
• Preferences: dietary restrictions, favorite cuisines, activity types, music taste, preferred artists, budget level, travel pace, mobility notes, default locations, and visual/theme preferences.
• Places and saved items: places you save, log, rate, review, plan to visit, assign to a trip, or mark as visited, including categories, locations, URLs, notes, and AI-generated descriptions attached to those places.
• Assistant and AI inputs: messages, prompts, selected filters, uploaded or pasted content, and other information you submit to in-app assistants or AI-powered features.
• Communications: messages you send us for support, feedback, or other requests.

Information collected automatically:

• Usage and credit data: feature usage, AI/model usage, credit balances, credit purchases, credit reservations, credit spend, provider costs, and activity needed to show your account balance and operate usage limits.
• Search and discovery data: Find searches, result counts, selected city/location labels, generated highlight cards, cached discovery results, truncated research/query previews, and engagement signals such as whether a result was saved, assigned, or clicked. We do not currently provide a standalone user-facing "search history" page, but these records may be stored for analytics, billing, caching, abuse prevention, and service improvement.
• Location data: approximate location from IP/session data and precise location or map coordinates when you grant browser/app permission or choose "use my location." Precise location is used to power location-based features and may be stored with preferences or app records when you save it.
• Device, log, and session data: browser/app type, request metadata, hashed IP/session records, anonymous visitor identifiers, cookies, crash/error information, and similar technical information.

Payment information:

Payments may be processed by Stripe and, for Android app purchases, Google Play Billing. We do not store full card numbers. We store limited purchase records such as checkout session IDs, purchase tokens, product IDs, order IDs, credit amounts, transaction status, and price or amount where available.

3. How we use your information

We use your information to:

• Provide, operate, maintain, and secure the Service;
• Create accounts, authenticate users, and manage sessions;
• Generate itineraries, outing plans, assistant responses, search results, and recommendations using AI and discovery providers;
• Personalize suggestions based on your saved preferences, locations, artists, places, and trip context;
• Process credit purchases, maintain balances, prevent duplicate or abusive credit grants, and show account activity;
• Cache expensive or reusable discovery results so the Service is faster and less costly;
• Send transactional emails, such as trip-sharing links, account notices, receipts, and support messages;
• Respond to your requests and provide support;
• Monitor product health, prevent abuse, understand usage, and improve the Service;
• Comply with legal obligations, resolve disputes, and enforce agreements.

4. AI and discovery processing

VeroTrip uses third-party AI and search/research services to generate trips, suggestions, assistant responses, place details, event leads, and discovery results. Current providers may include DeepSeek, Perplexity, Google Maps Platform, Ticketmaster, Wikimedia, Openverse, and similar services used to produce or enrich results.

When you use AI or discovery features, relevant inputs may be sent to those providers. This can include destinations, dates, selected categories, search text, location context, preferences, saved trip/place context, assistant messages, and imported content. Provider processing is subject to each provider's own terms and privacy practices.

AI-generated or provider-enriched output may be inaccurate, incomplete, or out of date. See our AI Disclaimer for details.

5. Third-party services we share data with

We share information with service providers that help us run the Service, only as needed to perform their functions:

• Authentication provider (Clerk) — to create accounts, authenticate users, and manage sessions;
• AI and research providers — to generate itineraries, assistant responses, search results, and recommendations;
• Mapping, places, location, event, and media providers — to display maps, geocode locations, enrich place/event details, and retrieve open or provider-supplied media;
• Payment processors (Stripe and Google Play Billing) — to process purchases and verify transactions;
• Email provider (Resend) — to send transactional email;
• Hosting, database, infrastructure, security, and analytics providers — to operate, protect, monitor, and improve the Service.

We do not sell your personal information.

6. Sharing trips with others

When you share a trip, the people you invite can view, and if you grant edit access, modify, that trip's content. Only share trips with people you trust. We are not responsible for how invited users handle shared content.

7. Your rights

Depending on where you live, including under Canada's PIPEDA, the EU/UK GDPR, the UK GDPR, California's CCPA/CPRA, or similar laws, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at [email protected]. You may also have the right to lodge a complaint with your local data protection authority.

8. Data retention and account deletion

We keep your information for as long as your account is active or as needed to provide the Service, then for any additional period required to comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

Certain operational records are retained on shorter schedules. For example, analytics events and session location records are designed to age out after a limited retention window, currently about 90 days by default. Other account records, saved content, purchases, credit activity, AI conversations, search/research logs, and cached user-specific Find data may remain while your account is active unless you delete them or delete your account.

You can permanently delete your account and associated VeroTrip data at any time from the Delete account section of your account page. You can also begin this process at verotrip.app/delete-account. Account deletion removes your saved trips, outings, places, preferences, AI conversations, search/research logs, account history, purchase records, analytics events tied to your account, and associated application records.

After account deletion, we may retain only information required for legal compliance, fraud prevention, abuse prevention, or dispute resolution, for the minimum necessary period. In particular, we retain a salted hash of the normalized account email, not the email itself, to prevent the same email address from repeatedly receiving one-time free signup credits after deleting and recreating an account.

9. International data transfers

Your information may be processed and stored in countries other than your own, including Canada and the United States, where we and our service providers operate. These countries may have different data protection laws. Where required, we take steps to ensure appropriate safeguards.

10. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

The Service is not intended for individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Cookies and analytics

We use cookies and similar technologies to operate the Service, manage authentication, remember preferences, maintain anonymous visitor identifiers, prevent abuse, and understand usage. You can control cookies through your browser settings, though disabling them may affect Service functionality.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you.

14. Contact us

Vero Labs LLC
Email: [email protected]