Privacy Policy

1. Data controller

ThaiTripISR ("we"), operated by Haggai Ghelef trading as Thailand Navigator IL — an online software application that generates personalized digital Thailand itineraries — is the controller of personal data collected through the service. Contact: support@thaitripisr.com.

2. Data we collect

• Account details: email address, name, login credentials
• Content you create: travel preferences, saved itineraries, community posts
• Usage and technical data: IP address, browser type, logs, analytics events
• Payment data: collected and processed directly by Paddle — we do not store card details on our servers

3. Why we use the data

• Creating an account and providing the service
• Generating personalized itineraries
• Security and fraud prevention
• Product improvement and aggregate analytics
• Customer support

4. Legal basis

We process data on the basis of performance of a contract, legitimate interests (security, product improvement), consent (e.g. marketing email), and legal obligations.

5. Sharing with third parties

• Service providers: Supabase (database and authentication), Cloudflare (hosting), AI providers
• Payment provider / Merchant of Record: Paddle — for payment processing, subscription management, invoicing and tax compliance
• Professional advisers: legal and accounting, where necessary
• Authorities: where required by law

6. Data retention

We retain data for as long as the account is active and as required for the purposes described above. Afterwards data is deleted or anonymised.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. To exercise these rights email support@thaitripisr.com. We respond within one month.

8. Security

We implement appropriate technical and organisational measures to protect personal data (encryption in transit, access controls, row-level security at the database level).

9. Support communications

When you contact us for support we communicate by email and sometimes via WhatsApp. If you use that channel we process the phone number you provide and the content of the conversation, in order to answer support questions about using the software. The legal basis is performance of the contract and your explicit request. WhatsApp is operated by Meta Platforms and its use is also subject to Meta's privacy policy. Using WhatsApp is optional — the same support is available by email. We retain conversations only for as long as needed for support and transaction records, and we do not sell or share them with advertisers.

10. Payments and payment processing

Payments are processed securely by Paddle.com, which acts as Merchant of Record for transactions processed through Paddle. Paddle collects and processes payment details, billing name and address and tax data, issues the invoice and handles refunds. We receive from Paddle only transaction confirmation and purchase/subscription details — card details are never stored on our servers. See the Paddle Privacy Notice.

11. Cookies and analytics

We use essential cookies (login, saving preferences) and analytics/marketing cookies to measure usage and improve the service, via Google Analytics 4 and Meta Pixel. These tools may collect IP address, device and browser identifiers and site usage events. You can block or delete cookies in your browser settings, and object to processing by contacting us.

12. Contact

Questions about this policy? support@thaitripisr.com · see also Contact.