Terms of use
1. The service
TripInbox (tripinbox.app) is operated by DL4EO, a company registered in Toulouse, France. The service helps you turn travel booking confirmations into structured itineraries you can view, edit, and share. By creating an account or using TripInbox, you agree to these terms.
2. Your account
You may sign in with Google or email. You are responsible for keeping access to your account secure and for activity under it. You must provide accurate information and notify us if you suspect unauthorised access.
3. Using TripInbox
You may add bookings by forwarding confirmation emails, pasting text, uploading PDFs, or entering details manually. We use automated processing to extract booking fields. You can review and edit extracted data at any time. TripInbox is provided as-is for personal travel organisation; it is not a travel agency and does not rebook or cancel reservations on your behalf.
4. Your content
You retain ownership of the booking confirmations and other content you submit. You grant DL4EO a limited licence to store, process, and display that content solely to provide TripInbox to you (including extraction, trip organisation, and optional sharing features you initiate).
5. Sharing
When you share a trip or booking, you choose the recipient and acknowledge that structured travel details (names, times, locations, references) may be disclosed. You are responsible for sharing only with people you trust. DL4EO is not responsible for how recipients use shared information.
6. Acceptable use
Do not use TripInbox for unlawful purposes, to infringe others' rights, to upload malware, or to attempt to access other users' data. We may suspend or terminate accounts that violate these terms or that pose a security risk.
7. Disclaimer and liability
TripInbox is provided without warranty. Extraction may be incomplete or inaccurate — always verify critical travel details with your provider. To the extent permitted by law, DL4EO is not liable for indirect or consequential damages, or for travel disruptions arising from reliance on extracted data.
8. Changes, governing law and contact
We may update these terms; the date at the top of this page will change when we do. Continued use after changes means you accept the updated terms. These terms are governed by French law. Unless mandatory consumer protection rules require otherwise, disputes shall be submitted to the competent courts of Toulouse, France. Questions: privacy@tripinbox.app.
Privacy policy (GDPR)
1. Data controller
DL4EO, a company registered in Toulouse, France, is the data controller for personal data processed through TripInbox (tripinbox.app). Contact: privacy@tripinbox.app.
2. Personal data we process
Account data: sign-in email, optional password hash, Google account identifier when you use Google sign-in, UI language preference, and optional forwarding email addresses you add. Booking data: content you submit (emails, PDFs, pasted text) and structured fields we extract (passenger names, dates, locations, references, providers, etc.). Usage data: basic technical logs needed to operate and secure the service.
3. Purposes and legal bases
We process data to provide TripInbox (performance of a contract / steps prior to contract), to secure accounts and prevent abuse (legitimate interest), and to comply with legal obligations. Marketing emails are not sent based on your booking content.
4. Automated processing
Booking confirmations are parsed automatically to populate itinerary fields. This is part of the core service, not profiling with legal or similarly significant effects under the GDPR. You can correct any field manually.
5. Recipients and processors
We use trusted providers to run TripInbox, including hosting and database (Supabase), email delivery (Mailgun), sign-in with Google (Google), cloud processing for inbound email (Google Cloud), and location cover photos (Unsplash). They process data only on our instructions and under appropriate safeguards.
6. Retention
We keep your account and booking data while your account is active. When you delete bookings or your account, we remove or anonymise associated data within a reasonable period, except where we must retain information for legal or security reasons.
7. Your rights (GDPR)
If you are in the European Economic Area or UK, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interest. You may withdraw consent where processing is consent-based. You also have the right to lodge a complaint with your local supervisory authority (in France: CNIL, www.cnil.fr). To exercise your rights, email privacy@tripinbox.app.
8. International transfers
Some processors may store or process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
9. Cookies
We use a locale cookie (tripinbox_locale) to remember your language preference. Authentication uses session cookies required to keep you signed in.
10. Updates
We may update this privacy policy; the date at the top of this page will change when we do. Material changes will be communicated where appropriate.
