Privacy Policy

1. Overview

LockTheTrip (“we,” “our,” or “us”) helps groups coordinate and lock in trip dates without the endless back-and-forth. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using LockTheTrip, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Trip organizer (Champion): Name, email address, and trip details you enter when creating a trip.
• Trip members: Name, phone number, and email address provided by the trip organizer when adding members to a trip.
• Availability responses: The date preferences (Yes / Maybe / No) submitted by trip members.
• Usage data: When a response link is first opened, the device type, and submission timestamps.

We do not collect payment information, government IDs, or any sensitive personal data.

3. How We Use Your Information

We use the information we collect to:

• Send SMS messages to trip members containing a unique link to submit their availability.
• Send reminder SMS messages to members who have not yet responded.
• Notify the trip organizer when all members have responded.
• Send a trip confirmation SMS to all members when a date is locked.
• Display trip and response data on the organizer’s dashboard.

We do not sell your personal information to third parties or use it for advertising purposes.

4. SMS Messaging

LockTheTrip sends transactional SMS messages to trip members via Twilio. These messages are sent only to phone numbers provided by a trip organizer who has a pre-existing relationship with the recipient.

Messages sent include:

• An initial invitation with a unique availability response link.
• Up to one reminder if no response has been received.
• A confirmation message when the trip date is locked.

To opt out of SMS messages at any time, reply STOP to any message you receive from us. You will receive no further messages after opting out. To opt back in, reply START. For help, reply HELP.

Message and data rates may apply. Message frequency varies per trip.

5. How We Share Your Information

We share your information only with the following service providers, solely to operate LockTheTrip:

• Twilio — SMS delivery
• Resend — Transactional email delivery
• Supabase — Hosted database storage
• Vercel — Application hosting
• Anthropic — AI-assisted message generation (no personal data is included in AI prompts)

We do not sell, rent, or trade your personal information to any other third parties.

6. Data Retention

Trip data and member information are retained for as long as the trip is active, and for up to 12 months after the trip date has passed. You may contact us to request deletion of your data at any time.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS), secure database hosting, and unique per-member access tokens. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of SMS communications at any time by replying STOP.

To exercise any of these rights, contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of LockTheTrip after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us at:

LockTheTrip
hello@lockthetrip.com