Privacy Policy

Welcome to Trivon.

Trivon's goal is to help users find their next trip easily, safely, and in a way that builds trust. The same approach guides how we process personal data.

Your privacy is important to us. We only collect the information necessary to provide our services, improve your experience, and operate the platform securely.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have regarding your personal data.

1. Data Controller

Korpi Labs Oy Business ID: 3625148-5 Registered office: Loviisa, Finland

Website: https://gettrivon.com

Email (general): support@gettrivon.com Email (privacy): privacy@gettrivon.com

2. Scope

This Privacy Policy applies to all users of the Trivon service available through gettrivon.com and any related applications or services operated by Korpi Labs Oy.

3. Information We Collect

Depending on how you use Trivon, we may collect the following categories of information.

Account Information • Email address • Authentication information (email and password) • User account identifier • Display name (if you provide it)

Travel Preferences Information you voluntarily provide, including for example: • Budget and travel dates • Departure airport or city • Preferred destinations, interests, and travel style • Free-text notes about your trip • Saved trips and favorites • Search history (for logged-in subscribers)

Subscription Information If you purchase a subscription: • Subscription status and trial status • Billing history (via Stripe) • Stripe customer identifier

We never receive or store your payment card details. All payment processing is handled securely by Stripe.

Technical Information We automatically collect certain technical information, including: • IP address • Browser type and device information • Operating system • Language settings • Log files and security events • Anonymous guest identifier (cookie) for rate limiting

Cookies and Similar Technologies Trivon uses cookies and similar technologies as described in our Cookie Policy. Analytics cookies are used only with your consent, managed through Cookiebot.

4. Why We Process Your Data

We process personal data for the following purposes: • Creating and maintaining your account • Providing personalized travel recommendations (including AI-generated content) • Managing subscriptions and billing • Customer support • Improving Trivon and its features • Preventing abuse, fraud, and misuse • Maintaining service security • Complying with legal obligations

We do not sell your personal information.

5. Legal Basis for Processing

Depending on the situation, processing is based on one or more of the following legal grounds under the GDPR: • Performance of a contract (account, subscriptions, core service) • Legitimate interests (security, fraud prevention, service improvement) • Legal obligations (accounting, lawful requests) • Your consent (analytics cookies and similar optional technologies)

We do not use solely automated decision-making that produces legal or similarly significant effects concerning you (GDPR Article 22).

6. Third-Party Service Providers

To operate Trivon, we work with trusted service providers who process data on our behalf:

• Stripe — subscription payments • OpenAI — AI-powered travel recommendations • Hetzner — cloud infrastructure and hosting (EU, Helsinki) • PostHog — product analytics (EU cloud, consent-based) • Cookiebot — cookie consent management • Duffel — flight offer data and route availability • Geoapify — places, geocoding, and points of interest • OpenTripMap — activities and sights data

These providers process data only as necessary to provide their services and under applicable data protection commitments. Some providers publish their own privacy policies.

7. International Data Transfers

Some service providers may process information outside the European Economic Area (EEA), including OpenAI (United States).

Where applicable, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, Data Processing Agreements, or equivalent legal mechanisms.

PostHog is configured for EU hosting (eu.i.posthog.com) where analytics is enabled.

8. Data Retention

We retain personal information only as long as necessary to: • provide the service • comply with legal obligations • resolve disputes and enforce agreements • improve the service

Indicative retention periods: • Active account data — for the life of the account • Account after deletion request — removed within 30 days unless law requires longer retention • Server logs — up to 90 days • AI interaction logs — up to 90 days (if stored) • Billing records — as required by applicable accounting law

You may request deletion of your account at any time through account settings or by contacting us, unless we are legally required to retain certain information.

9. Your Rights

Under GDPR you have the right to: • Access your personal information • Correct inaccurate information • Request deletion of your information • Restrict processing • Object to processing based on legitimate interests • Receive your information in a portable format • Withdraw consent where processing is based on consent • Lodge a complaint with a supervisory authority

In Finland: Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) — tietosuoja.fi

Requests can be submitted via privacy@gettrivon.com. We respond within 30 days.

10. Security

We use appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction.

While no online service can guarantee absolute security, protecting user data is one of our highest priorities.

11. Children's Privacy

Trivon is intended for users aged 18 years or older, or minors using the service with the permission and supervision of a parent or legal guardian.

We do not knowingly collect personal information from children without appropriate authorization.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If significant changes are made, users will be informed through the service or by other appropriate means.

The "Last updated" date at the top of this document indicates the latest version.

13. Contact

If you have questions regarding this Privacy Policy or the processing of your personal information:

Korpi Labs Oy Business ID: 3625148-5 Website: https://gettrivon.com Email: privacy@gettrivon.com