Privacy policy

Who is responsible

The controller of your personal data is:

For anything about privacy, email support@tripcinema.com.

What we collect

• Account details: your name, email address and password (stored only as a secure hash). If you sign in with Google or Microsoft, we receive your name and email address from them.
• Your uploads: the photos and videos you upload, with the information inside the files, such as when and where they were taken (GPS location) and the camera used.
• What we make from them: descriptions of what is in your photos and videos, the films and edits, and the instructions you give for a film, such as its length, style and chapters.
• Sign-in and security records: when you sign in, failed sign-ins and blocked requests, with your IP address and browser.
• Visit statistics: which pages are visited, where visitors come from, and the browser, device type and country, without cookies and without storing IP addresses.
• Payments, once they launch: Paddle handles your payment details. We receive what you bought, the amount and a reference, not your card details.
• Messages: emails you send us, and the status emails we send you.

Why we use it

• To provide the service (performing our contract with you): storing your uploads, analysing them, making and delivering your films, sending sign-in and status emails.
• To keep TripCinema secure (our legitimate interest): detecting password guessing and other abuse, and limiting repeated sign-in attempts.
• To improve the website (our legitimate interest): counting visits and which steps people complete, using anonymous statistics.
• To meet legal obligations, such as keeping records of payments.

We don't use your data for advertising, we don't sell it, and we don't make decisions about you that have legal or similar effects based only on automated processing. We don't use face recognition to identify people in your photos and videos.

Your photos and videos stay private

We process your photos and videos privately, only to make your films. They are never shown to other users, never sold, and never used to train AI models.

Who helps us

We use a few service providers to run TripCinema. Each gets only what it needs for its task, under an agreement that protects your data and doesn't allow it to use your data for its own purposes.

• Hosting and storage providers: run the website and database, and store your uploads, previews and films.
• AI planning service: helps plan the order and timing of your film. It receives text descriptions of your photos and videos, when and where they were taken, and your instructions for the film, never the photos or videos themselves.
• A mapping service: turns the location of your photos into place names. It receives coordinates only.
• An email provider: sends our emails. It receives your email address and the message.
• Google and Microsoft: only if you choose to sign in with them.
• Paddle: handles payments as our reseller and merchant of record, once payments launch. Paddle is responsible for the payment data it collects under its own privacy policy.

Our visit statistics run on our own server, so no analytics company receives your data. Ask us at support@tripcinema.com if you'd like the names of our providers.

Data outside the EU

Some of our providers are based outside the EU, for example in the United States. Where data leaves the EU, it is protected by an adequacy decision (such as the EU–US Data Privacy Framework or the UK adequacy decision) or by the European Commission's standard contractual clauses.

How long we keep it

• Your account, trips and films: until you delete them or your account. Deleting your account deletes all your trips, uploads, films and descriptions.
• Uploads of trips you don't buy: once payments launch, about 7 days after you finish uploading.
• Sign-in and security records: 90 days.
• Visit statistics: kept as anonymous totals.
• Payment records: as long as tax law requires.

Copies in our database backups disappear as old backups are replaced.

Cookies and storage on your device

We use one cookie that keeps you signed in. It is needed for the service to work, so we don't ask for consent. Your browser also stores some of your settings and unsaved drafts on your device. We don't use advertising or tracking cookies, and our visit statistics work without cookies. We respect your browser's Do Not Track setting.

Your rights

You can ask us for a copy of your personal data, to correct or delete it, to limit how we use it, or to receive it in a portable format. You can also object to how we use data based on our legitimate interests. Email support@tripcinema.com; we answer within a month. You can delete your trips and account yourself at any time.

If you think we handle your data wrongly, please tell us first. You also have the right to complain to a data protection authority, such as the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) or the authority in the country where you live.

Security

Your files are stored privately and only shown to you through short-lived signed links. Connections are encrypted, passwords are stored only as secure hashes, and we monitor for and limit attempts to break into accounts.

Children

TripCinema is for people aged 16 and over. If you upload photos and videos of children, such as your own family, you are responsible for doing so.

Changes

We may update this policy as TripCinema changes, for example when payments launch. If a change matters for you, we email you before it applies. See also our terms of service.