Privacy Policy

1. Who we are

TripSensei is a WhatsApp-based travel concierge service operated under the trade name TripSensei. Contact us at hola@tripsensei.com.

This policy applies to all users who interact with the TripSensei WhatsApp agent or visit this website.

2. Data we collect

When you use TripSensei, we collect only:

• WhatsApp phone number — required to send you messages and identify you.
• Trip information — destination, departure and return dates, as you provide them in the chat.
• Messages sent to the agent — questions and conversations, to generate relevant responses.
• Tip ratings — if you send 👍 or 👎 to rate the tips you receive.
• Payment reference — if you purchase a plan, the payment provider processes your card data. TripSensei does not store card data.

We do not collect geolocation, contact lists, or any other data beyond what is described above.

3. How we use your data

We use the collected information exclusively to:

• Send you personalized travel tips before and during your trip.
• Answer your questions about your destination in real time.
• Send you urgent alerts about weather conditions or security advisories.
• Manage your access plan (free or paid).
• Improve the quality of tips based on your ratings.

We do not use your data for advertising. We do not share it with third parties for commercial purposes. We do not sell it.

4. Consent (opt-in)

TripSensei operates on a user-initiated opt-in model: the service only starts when you send us the first message on WhatsApp. By doing so, you agree to receive messages related to your trip.

This model complies with WhatsApp Business API requirements and Meta's commercial communications policy.

At any time, you can send STOP or UNSUBSCRIBE to stop receiving messages. We process unsubscriptions within 24 hours.

5. Third-party providers with data access

To operate the service, we share minimal technical data with the following providers:

• Twilio — WhatsApp Business API infrastructure.
• Meta (WhatsApp) — messaging platform. Their own terms apply.
• Anthropic (Claude) — AI-powered response generation. Does not retain conversations after generating a response.
• Supabase — secure database (U.S.-based servers).
• Mercado Pago / PayPal — payment processors for access plans.

None of these providers are authorized to use your data for their own commercial purposes.

6. Data retention

We retain your data while the service is active. If you have not interacted with TripSensei for 12 months, we automatically delete your information.

You can request immediate deletion by sending DELETE MY DATA in the chat or emailing hola@tripsensei.com.

7. Your rights (ARCO)

In accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties, you have the right to:

• Access — know what data we hold about you.
• Rectification — correct inaccurate data.
• Cancellation — request deletion of your data.
• Opposition — object to specific uses of your data.

To exercise your rights, email hola@tripsensei.com with the subject "ARCO Rights". We respond within 15 business days.

8. Security

• All data transmission is encrypted via HTTPS/TLS.
• Database secured with Row Level Security — each record is only accessible by authorized systems.
• Data access is limited to strictly necessary technical staff.
• Credentials are stored in environment variables, never in code.

9. Children

TripSensei is not intended for children under 13. If you are a parent or guardian and believe a minor has provided personal information, contact us at hola@tripsensei.com and we will delete it immediately.

10. Changes to this policy

We may update this policy from time to time. We will update the date at the top. If the changes are significant, we will notify you via WhatsApp.