Privacy Policy
Privacy Policy — Trivaction
Effective date: 08/August/2026
1. Who we are (Data Controller)
Trivaction ("Trivaction", "we", "us", "our") operates the website trivaction.com (the "Site").
The Site is operated by:
Legal name: Trivaction
Trading as: Trivaction
KVK (Chamber of Commerce) number: 42092477
VAT / BTW‑id: NL005491379B35
Contact for privacy matters: info@trivaction.com
For the purposes of the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG), we are the data controller for the personal data described in this policy.
2. Scope
This policy explains what personal data we collect through the Site, why, how we use and share it, how long we keep it, and the rights you have. It covers all functions of the Site, including: browsing and searching itineraries; creating an account; publishing itineraries and trip plans; collaborative trip planning; comments, likes, follows and reviews; bookings and trip requests; creator payouts; and voluntary donations ("support the creator" / "buy me a coffee").
Content you publish (itineraries, photos, text, map pins, etc.) is user‑generated content. See Section 12 and the separate Terms section at the end regarding responsibility for that content.
3. The personal data we collect
a. Data you give us
Account data: name, email address, password (stored hashed, never in plain text), and — if you choose to add them — username, profile photo/avatar, bio, country, quotes, social links, and countries visited.
Sign‑in with Google: if you log in via Google, we receive basic profile information (name, email, profile picture, Google account identifier) from Google.
Content you create: itineraries, day‑by‑day plans, place/restaurant/activity details, notes, checklists, photos, videos you link, map coordinates, comments, reviews, and messages within collaborative planning.
Bookings and trip requests: the details you submit when requesting or arranging a trip (e.g., contact email, trip details).
Payment and donation data: when you pay or donate, your card details are collected and processed directly by Stripe (see Section 6). We do not receive or store full card numbers. We store limited records such as amount, currency, status, fee, and the associated creator/user, so we can operate the service, provide receipts, handle disputes, and meet tax/accounting obligations.
Support communications: if you contact us or use the in‑page chat, we receive the messages and contact details you provide.
b. Data we collect automatically
Technical and usage data: IP address, device and browser type, operating system, referring pages, pages viewed, actions taken, dates/times, and approximate location derived from IP.
Cookies and similar technologies: see Section 7.
Security data: information used to prevent abuse and bots (e.g., via Cloudflare Turnstile).
c. Data from third parties
Google (profile data on sign‑in), Stripe (payment status, payout eligibility, verification results for creators), and analytics providers.
We do not intentionally collect special categories of data (e.g., health, religion). Please don't submit such data in free‑text fields.
4. Why we use your data, and our legal bases
Purpose
Legal basis (GDPR Art. 6)
Create and manage your account; provide the Site's core features
Performance of a contract
Publish, display and let others copy/adapt your itineraries and content
Performance of a contract
Process payments, bookings and donations; pay out to creators
Performance of a contract; legal obligation (accounting/tax)
Send service messages and notifications you've opted into
Contract; consent (where required)
Keep the Site secure, prevent fraud and abuse
Legitimate interests
Measure and improve the Site (analytics)
Consent (where required by ePrivacy) or legitimate interests
Comply with legal, tax and accounting obligations
Legal obligation
Handle disputes, chargebacks and enforce our terms
Legitimate interests; legal obligation
Where we rely on consent (e.g., non‑essential cookies), you may withdraw it at any time. Where we rely on legitimate interests, you may object (see Section 10).
5. Content you publish is public
Itineraries, plans, profiles and other content you choose to publish are, by design, visible to other users and the public and may be copied, adapted and shared through the Site's features. Do not publish anything you want to keep private. Your public profile may show your name/username, photo, bio and content.
Translations: to show content in multiple languages, text you enter may be sent to an automated translation service (Google Gemini) to generate translations. Avoid putting sensitive personal information in translatable fields.
6. Who we share data with (processors and third parties)
We share personal data only as needed to run the Site, with providers acting on our behalf or as independent controllers for their own services:
Stripe — payment processing, creator payouts (Stripe Connect), fraud checks and identity verification. Stripe processes your payment data as described in its own privacy policy. We never store full card details.
Google — "Sign in with Google" (authentication) and Google Analytics (usage measurement).
Google Gemini — automated translation of content into other languages.
Cloudflare (Turnstile) — bot/abuse protection.
OpenStreetMap, Photon (komoot) and Nominatim — map tiles and geocoding of place names/coordinates. When maps load or places are geocoded, your IP and the queried place may be processed by these providers.
Crisp — in‑page support chat (if enabled).
Our hosting and email providers — to host the Site and send transactional emails.
Authorities, advisors and successors — where required by law, to enforce our terms, protect rights and safety, or in connection with a business transfer.
We do not sell your personal data, and we do not run third‑party advertising that profiles you.
7. Cookies and similar technologies
We use cookies and similar technologies to:
keep you signed in and remember session state (strictly necessary);
protect the Site and forms (security);
measure usage via Google Analytics (analytics — set only where permitted/consented);
support the chat widget, if enabled.
You can control cookies through your browser and, where a cookie banner/consent tool is provided, through your consent choices. Blocking strictly necessary cookies may break parts of the Site.
8. International transfers
Some providers (e.g., Google, Stripe, Cloudflare) may process data outside the European Economic Area, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or an adequacy mechanism (e.g., the EU–US Data Privacy Framework). You may request more information using the contact in Section 1.
9. How long we keep data
Account and content: for as long as your account is active, and for a reasonable period afterwards, unless you ask us to delete it earlier.
Payment, donation and booking records: for as long as required by tax and accounting law (in the Netherlands, generally 7 years).
Technical/security logs: for a limited period appropriate to their purpose.
When we no longer need data, we delete or anonymise it.
10. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing). You also have the right not to be subject to solely automated decisions with legal or similarly significant effects.
To exercise any right, contact us at [info@trivaction.com]. We may need to verify your identity. We aim to respond within one month.
You have the right to lodge a complaint with your local supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
11. Security
We take reasonable technical and organisational measures to protect your data (for example, hashed passwords, HTTPS/TLS, access controls, and payment handling delegated to Stripe). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children
The Site is not intended for children under 16 (or the minimum age required in your country to consent to data processing). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
13. Third‑party links
The Site links to third‑party sites (e.g., Google Maps, booking sites, creators' social links). We are not responsible for their content or privacy practices. Review their policies before providing data.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Significant changes may be notified through the Site.
15. Contact
Questions or requests about this policy or your data: [privacy@trivaction.com], or by post at the address in Section 1.
⚖️ Starter Terms — User Content, Disclaimers & Payments
These clauses belong in a separate Terms of Service, not the Privacy Policy. They are included here as a starting point so you're covered. Move them into a dedicated Terms document and have a lawyer adapt them — EU consumer law limits how far liability and refund rights can be excluded, so overly broad disclaimers may be unenforceable.
1. Our role — a platform for user‑generated content.
Trivaction is a platform that lets travelers publish itineraries and trip content and lets others discover, copy and adapt them. We are not the author of user‑published content and we are not a travel agency, tour operator, or booking agent. Itineraries, recommendations, prices, opening hours, photos and other content are provided by users and are not verified, endorsed or guaranteed by us for accuracy, completeness, legality, safety or fitness for any purpose.
2. No liability for user content or your travel decisions.
To the fullest extent permitted by law, we are not liable for any loss or damage arising from your reliance on user‑generated content, from the acts or omissions of creators or other users, or from your travel plans, bookings or activities. You travel and make decisions at your own risk. Verify critical details (visas, safety, prices, availability, opening times, insurance) with official and primary sources before you travel.
3. Creator responsibilities and intellectual property.
Creators are solely responsible for the content they publish and warrant that they have the rights to publish it and that it does not infringe any third party's rights or any law. Creators grant Trivaction and its users a licence to display, copy and adapt their published itineraries as enabled by the Site's features. We may remove content or suspend accounts that violate our terms or the law.
4. Payments and bookings.
Payments are processed by Stripe. By paying, you also agree to Stripe's terms. We do not store your full card details. Where you pay Trivaction for a service, the price and any taxes shown at checkout apply. Booking and cancellation terms for any third‑party travel service are governed by that provider, not by us.
5. Voluntary donations ("support the creator" / "buy me a coffee").
Donations are voluntary payments to support a creator or the platform. They are not a purchase of goods or services and do not entitle you to any product, refund or specific outcome. Trivaction facilitates the payment via Stripe (Stripe Connect), transfers the supported amount to the creator, and may retain a platform fee, all as disclosed at the time of payment. Donations are generally non‑refundable, except where a refund is required by law or agreed by us at our discretion (for example, obvious errors or unauthorised transactions). You are responsible for any taxes that may apply to donations you receive as a creator.
6. Chargebacks and abuse.
We may reverse, withhold or recover amounts in cases of fraud, chargebacks, unauthorised payments, or breach of these terms.
7. Limitation of liability and indemnity.
To the extent permitted by law, our total liability arising from your use of the Site is limited [to the amount you paid us in the 12 months before the claim / to €[amount]]. Nothing excludes liability that cannot be excluded by law (e.g., for death or personal injury caused by our negligence, or for intent/gross negligence). You agree to indemnify us against claims arising from content you publish or your breach of these terms.
8. Governing law.
These terms are governed by the laws of the Netherlands, and disputes are subject to the competent Dutch courts, without prejudice to any mandatory consumer‑protection rights you have where you live.
Effective date: 08/August/2026
1. Who we are (Data Controller)
Trivaction ("Trivaction", "we", "us", "our") operates the website trivaction.com (the "Site").
The Site is operated by:
Legal name: Trivaction
Trading as: Trivaction
KVK (Chamber of Commerce) number: 42092477
VAT / BTW‑id: NL005491379B35
Contact for privacy matters: info@trivaction.com
For the purposes of the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG), we are the data controller for the personal data described in this policy.
2. Scope
This policy explains what personal data we collect through the Site, why, how we use and share it, how long we keep it, and the rights you have. It covers all functions of the Site, including: browsing and searching itineraries; creating an account; publishing itineraries and trip plans; collaborative trip planning; comments, likes, follows and reviews; bookings and trip requests; creator payouts; and voluntary donations ("support the creator" / "buy me a coffee").
Content you publish (itineraries, photos, text, map pins, etc.) is user‑generated content. See Section 12 and the separate Terms section at the end regarding responsibility for that content.
3. The personal data we collect
a. Data you give us
Account data: name, email address, password (stored hashed, never in plain text), and — if you choose to add them — username, profile photo/avatar, bio, country, quotes, social links, and countries visited.
Sign‑in with Google: if you log in via Google, we receive basic profile information (name, email, profile picture, Google account identifier) from Google.
Content you create: itineraries, day‑by‑day plans, place/restaurant/activity details, notes, checklists, photos, videos you link, map coordinates, comments, reviews, and messages within collaborative planning.
Bookings and trip requests: the details you submit when requesting or arranging a trip (e.g., contact email, trip details).
Payment and donation data: when you pay or donate, your card details are collected and processed directly by Stripe (see Section 6). We do not receive or store full card numbers. We store limited records such as amount, currency, status, fee, and the associated creator/user, so we can operate the service, provide receipts, handle disputes, and meet tax/accounting obligations.
Support communications: if you contact us or use the in‑page chat, we receive the messages and contact details you provide.
b. Data we collect automatically
Technical and usage data: IP address, device and browser type, operating system, referring pages, pages viewed, actions taken, dates/times, and approximate location derived from IP.
Cookies and similar technologies: see Section 7.
Security data: information used to prevent abuse and bots (e.g., via Cloudflare Turnstile).
c. Data from third parties
Google (profile data on sign‑in), Stripe (payment status, payout eligibility, verification results for creators), and analytics providers.
We do not intentionally collect special categories of data (e.g., health, religion). Please don't submit such data in free‑text fields.
4. Why we use your data, and our legal bases
Purpose
Legal basis (GDPR Art. 6)
Create and manage your account; provide the Site's core features
Performance of a contract
Publish, display and let others copy/adapt your itineraries and content
Performance of a contract
Process payments, bookings and donations; pay out to creators
Performance of a contract; legal obligation (accounting/tax)
Send service messages and notifications you've opted into
Contract; consent (where required)
Keep the Site secure, prevent fraud and abuse
Legitimate interests
Measure and improve the Site (analytics)
Consent (where required by ePrivacy) or legitimate interests
Comply with legal, tax and accounting obligations
Legal obligation
Handle disputes, chargebacks and enforce our terms
Legitimate interests; legal obligation
Where we rely on consent (e.g., non‑essential cookies), you may withdraw it at any time. Where we rely on legitimate interests, you may object (see Section 10).
5. Content you publish is public
Itineraries, plans, profiles and other content you choose to publish are, by design, visible to other users and the public and may be copied, adapted and shared through the Site's features. Do not publish anything you want to keep private. Your public profile may show your name/username, photo, bio and content.
Translations: to show content in multiple languages, text you enter may be sent to an automated translation service (Google Gemini) to generate translations. Avoid putting sensitive personal information in translatable fields.
6. Who we share data with (processors and third parties)
We share personal data only as needed to run the Site, with providers acting on our behalf or as independent controllers for their own services:
Stripe — payment processing, creator payouts (Stripe Connect), fraud checks and identity verification. Stripe processes your payment data as described in its own privacy policy. We never store full card details.
Google — "Sign in with Google" (authentication) and Google Analytics (usage measurement).
Google Gemini — automated translation of content into other languages.
Cloudflare (Turnstile) — bot/abuse protection.
OpenStreetMap, Photon (komoot) and Nominatim — map tiles and geocoding of place names/coordinates. When maps load or places are geocoded, your IP and the queried place may be processed by these providers.
Crisp — in‑page support chat (if enabled).
Our hosting and email providers — to host the Site and send transactional emails.
Authorities, advisors and successors — where required by law, to enforce our terms, protect rights and safety, or in connection with a business transfer.
We do not sell your personal data, and we do not run third‑party advertising that profiles you.
7. Cookies and similar technologies
We use cookies and similar technologies to:
keep you signed in and remember session state (strictly necessary);
protect the Site and forms (security);
measure usage via Google Analytics (analytics — set only where permitted/consented);
support the chat widget, if enabled.
You can control cookies through your browser and, where a cookie banner/consent tool is provided, through your consent choices. Blocking strictly necessary cookies may break parts of the Site.
8. International transfers
Some providers (e.g., Google, Stripe, Cloudflare) may process data outside the European Economic Area, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or an adequacy mechanism (e.g., the EU–US Data Privacy Framework). You may request more information using the contact in Section 1.
9. How long we keep data
Account and content: for as long as your account is active, and for a reasonable period afterwards, unless you ask us to delete it earlier.
Payment, donation and booking records: for as long as required by tax and accounting law (in the Netherlands, generally 7 years).
Technical/security logs: for a limited period appropriate to their purpose.
When we no longer need data, we delete or anonymise it.
10. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing). You also have the right not to be subject to solely automated decisions with legal or similarly significant effects.
To exercise any right, contact us at [info@trivaction.com]. We may need to verify your identity. We aim to respond within one month.
You have the right to lodge a complaint with your local supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
11. Security
We take reasonable technical and organisational measures to protect your data (for example, hashed passwords, HTTPS/TLS, access controls, and payment handling delegated to Stripe). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children
The Site is not intended for children under 16 (or the minimum age required in your country to consent to data processing). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
13. Third‑party links
The Site links to third‑party sites (e.g., Google Maps, booking sites, creators' social links). We are not responsible for their content or privacy practices. Review their policies before providing data.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Significant changes may be notified through the Site.
15. Contact
Questions or requests about this policy or your data: [privacy@trivaction.com], or by post at the address in Section 1.
⚖️ Starter Terms — User Content, Disclaimers & Payments
These clauses belong in a separate Terms of Service, not the Privacy Policy. They are included here as a starting point so you're covered. Move them into a dedicated Terms document and have a lawyer adapt them — EU consumer law limits how far liability and refund rights can be excluded, so overly broad disclaimers may be unenforceable.
1. Our role — a platform for user‑generated content.
Trivaction is a platform that lets travelers publish itineraries and trip content and lets others discover, copy and adapt them. We are not the author of user‑published content and we are not a travel agency, tour operator, or booking agent. Itineraries, recommendations, prices, opening hours, photos and other content are provided by users and are not verified, endorsed or guaranteed by us for accuracy, completeness, legality, safety or fitness for any purpose.
2. No liability for user content or your travel decisions.
To the fullest extent permitted by law, we are not liable for any loss or damage arising from your reliance on user‑generated content, from the acts or omissions of creators or other users, or from your travel plans, bookings or activities. You travel and make decisions at your own risk. Verify critical details (visas, safety, prices, availability, opening times, insurance) with official and primary sources before you travel.
3. Creator responsibilities and intellectual property.
Creators are solely responsible for the content they publish and warrant that they have the rights to publish it and that it does not infringe any third party's rights or any law. Creators grant Trivaction and its users a licence to display, copy and adapt their published itineraries as enabled by the Site's features. We may remove content or suspend accounts that violate our terms or the law.
4. Payments and bookings.
Payments are processed by Stripe. By paying, you also agree to Stripe's terms. We do not store your full card details. Where you pay Trivaction for a service, the price and any taxes shown at checkout apply. Booking and cancellation terms for any third‑party travel service are governed by that provider, not by us.
5. Voluntary donations ("support the creator" / "buy me a coffee").
Donations are voluntary payments to support a creator or the platform. They are not a purchase of goods or services and do not entitle you to any product, refund or specific outcome. Trivaction facilitates the payment via Stripe (Stripe Connect), transfers the supported amount to the creator, and may retain a platform fee, all as disclosed at the time of payment. Donations are generally non‑refundable, except where a refund is required by law or agreed by us at our discretion (for example, obvious errors or unauthorised transactions). You are responsible for any taxes that may apply to donations you receive as a creator.
6. Chargebacks and abuse.
We may reverse, withhold or recover amounts in cases of fraud, chargebacks, unauthorised payments, or breach of these terms.
7. Limitation of liability and indemnity.
To the extent permitted by law, our total liability arising from your use of the Site is limited [to the amount you paid us in the 12 months before the claim / to €[amount]]. Nothing excludes liability that cannot be excluded by law (e.g., for death or personal injury caused by our negligence, or for intent/gross negligence). You agree to indemnify us against claims arising from content you publish or your breach of these terms.
8. Governing law.
These terms are governed by the laws of the Netherlands, and disputes are subject to the competent Dutch courts, without prejudice to any mandatory consumer‑protection rights you have where you live.
You can change your cookie choice at any time.