Privacy Policy

1. Data We Collect

We collect information you provide directly, including your email address, name, adventure preferences, and itinerary history. We also collect usage data such as pages visited, features used, device type, browser, and IP address. This data helps us improve the Service and personalize your experience.

2. Authentication (Neon Auth)

Plotline uses Neon Auth for user authentication. When you create an account or sign in, Neon Auth processes your email address and password securely. Passwords are hashed and never stored in plain text. Authentication tokens are used to maintain your session. Please refer to Neon's Privacy Policy for details on their data handling practices.

3. Payment Processing (Stripe)

Payment information is processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe handles all payment data in compliance with PCI DSS standards. We receive only a token, card brand, last four digits, and expiration date for display purposes. See Stripe's Privacy Policy for details.

4. Third-Party APIs

Plotline uses the following third-party services to provide and enhance itineraries:

• Mapbox— Used for mapping and location display. Mapbox may collect anonymized usage data. See Mapbox Privacy Policy.
• Google Places API— Used for venue validation and details. Venue queries are sent to Google. See Google Privacy Policy.
• Anthropic (Claude API)— Used to generate itineraries. Your adventure preferences (city, scenario, vibe) are sent to Anthropic for processing. No personally identifiable information beyond preferences is shared. See Anthropic Privacy Policy.

5. Cookies

Plotline uses essential cookies to maintain your authentication session and remember your preferences. We do not use advertising or tracking cookies. Session cookies are deleted when you close your browser; persistent cookies (such as authentication tokens) expire after a set period or when you sign out.

6. Data Retention

We retain your account data and itinerary history for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data may be retained indefinitely for analytics and service improvement.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. You may request a copy of the data we hold about you or ask us to delete your account entirely. To exercise these rights, contact us at the email address below. We will respond to requests within 30 days. If you are located in the EU/EEA, you also have the right to data portability and the right to lodge a complaint with your local data protection authority.

8. Contact

If you have questions about this Privacy Policy or your data, please contact us at hello@plotlinestory.com.