Privacy Policy

Effective date: April 15, 2026

TripButler.ai — Operated by Q Labs LLC, Texas, United States

1. Introduction

Q Labs LLC (“Q Labs,” “we,” “us,” or “our”), a Texas limited liability company, operates TripButler.ai (the “Service”). This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you use the Service.

By using the Service, you consent to the practices described in this Privacy Policy. This Privacy Policy is incorporated into our Terms of Service.

2. Information We Collect

2.1 Information You Provide

  • Account registration: email address, name, authentication credentials (Google OAuth or direct email)
  • Travel preferences: natural language trip descriptions, budget ranges, dates, destination preferences, trip duration, number of travelers, pace preferences
  • Alert preferences: frequency (daily/weekly/monthly), communication channel, home airport
  • Phone number (SMS opt-in only)
  • Booking confirmations: travel dates, hotel, flight details (voluntarily submitted)
  • Post-trip feedback: ratings, reviews
  • Communications sent to us

2.2 Information Collected Automatically

  • Device/browser info: IP address, device type, OS, browser, screen resolution, device identifiers
  • Usage data: pages visited, features used, click patterns, time spent, referring URLs
  • Email engagement: open rates, click-through rates, link clicks, email client info
  • Approximate location: derived from IP address and home airport
  • Cookies and similar technologies (see Section 8)

2.3 Information from Third Parties

  • Google OAuth: name, email, profile picture
  • Analytics providers: aggregated usage data (GA4, Plausible)
  • Affiliate partners: anonymized booking confirmation data for commission tracking

2.4 Information We Do NOT Collect

We do not intentionally collect sensitive personal data categories, including health or medical information, biometric data, precise geolocation (GPS coordinates), genetic data, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or financial account numbers. If we become aware that such data has been inadvertently collected, we will delete it promptly.

3. How We Use Your Information

PurposeData Used
Provide and operate the ServiceAccount data, travel preferences, alert preferences, location
Generate personalized deal alertsTravel preferences, budget, dates, destinations, departure city
AI-powered recommendations and itinerariesTravel preferences, booking confirmations, conversation inputs
Send email and SMS communicationsEmail, phone (if opted in), frequency preferences
Display targeted advertising in emailsTravel preferences, destination interests (personal data not shared with advertisers)
Process affiliate referralsClick data, referral tracking identifiers
Improve the Service and train AI modelsUsage data, feedback, aggregated analytics, User Content
Prevent fraud and ensure securityIP address, device data, usage patterns
Comply with legal obligationsAs required by applicable law

3.1 AI Model Training

You acknowledge and consent that we may use your travel preferences, conversation inputs, feedback, and other User Content to train, improve, and develop our AI models. This data may be used in aggregated or de-identified form. We do not sell your personal information to third parties for AI training.

3.2 Automated Decision-Making

The Service uses automated processing, including AI algorithms, to match travel deals to your stated preferences, determine which deals to include in your alert emails, personalize destination intelligence content, and select relevant advertising. These automated processes determine the content you receive but do not make decisions with legal or similarly significant effects on you. Contact [email protected] for information about the logic involved.

4. How We Share Your Information

We do not sell your personal information.

4.1 Service Providers

ProviderPurposeData Shared
ResendSending deal alerts and communicationsEmail address, email content
Anthropic (AI)Generating recommendations and contentTravel preferences, conversation inputs
TravelPayoutsFlight and hotel pricing dataSearch parameters (destinations, dates, passengers)
Google (auth)User login and account creationOAuth tokens, email, name
DigitalOceanInfrastructure and data storageAll data stored on servers
GA4 / PlausibleUsage analyticsAnonymized/aggregated usage data

4.2 Affiliate Partners

When you click an affiliate link, you are redirected to a third-party platform governed by their own privacy policies. We receive anonymized transaction data but do not share your personal information with affiliate partners beyond the referral click.

4.3 Advertisers

We use your travel preferences to select relevant advertisements but do not share personal information directly with advertisers. Advertisers receive only aggregated performance data.

4.4 Legal Disclosures

We may disclose information if required by law or in good faith belief that disclosure is necessary to comply with legal obligations, protect our rights, prevent wrongdoing, protect user safety, or defend against legal liability.

4.5 Business Transfers

In connection with a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you via email or prominent notice before your information becomes subject to a different privacy policy.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. Upon account deletion or request, we will delete or de-identify your information within 45 days, except where retention is required by law. De-identified or aggregated data may be retained indefinitely.

6. Data Security

We implement commercially reasonable administrative, technical, and physical security measures including encryption in transit (TLS/SSL), access controls, and regular security assessments. No method of electronic storage is 100% secure; we cannot guarantee absolute security.

6.1 Data Breach Notification

In the event of a data breach involving your personal information that is reasonably likely to result in a risk of harm, we will notify affected users in accordance with applicable federal and state breach notification laws, including the Texas Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521.053). Notification will be provided without unreasonable delay.

7. Your Rights and Choices

  • Account Information — Access, update, or delete your account information through your dashboard or by contacting [email protected].
  • Email and SMS Preferences — Change alert frequency, pause, or unsubscribe via email footer controls or your dashboard. Opt out of SMS by replying STOP.
  • Data Portability — Request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). We will provide your data within 45 days.
  • Cookies — Adjust browser settings to remove or reject cookies. Disabling cookies may affect Service functionality.

8. Cookies and Tracking Technologies

TypePurposeDuration
EssentialAuthentication, security, basic functionalitySession / 1 year
FunctionalPreferences, alert settings, departure city1 year
AnalyticsUsage patterns, performance (GA4, Plausible)Up to 2 years
Affiliate trackingReferral click attribution for commissions30–90 days

We do not use cookies for cross-site behavioral advertising. You can manage your cookie preferences at any time using the “Cookie Preferences” link in our footer.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights:

  • Right to Know — Request disclosure of personal information collected, sources, purposes, and third parties.
  • Right to Delete — Request deletion, subject to legal exceptions.
  • Right to Correct — Request correction of inaccurate information.
  • Right to Opt Out of Sale/Sharing — We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Data Portability — Receive your data in a portable format.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your rights.

To exercise these rights, contact [email protected]. We will respond within 45 days.

We honor Global Privacy Control (GPC) browser signals. If your browser sends a GPC signal, we automatically disable non-essential cookies.

10. Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with consumer privacy laws may have additional rights including access, correction, deletion, data portability, and opt-out of targeted advertising. Contact [email protected] to exercise these rights.

11. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States.

For users in the EEA, UK, or Switzerland: we process personal data on the basis of consent, contractual necessity, legitimate interests, or legal compliance. You have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. Contact [email protected].

12. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect information from children under 18. If we learn we have collected such information, we will delete it promptly.

13. Do Not Track

The Service does not currently respond to Do Not Track signals. We will update this policy if a standard is established.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy and updating the effective date. For material changes, we may also notify you by email. Continued use after changes constitutes acceptance.

15. Contact Us

Q Labs LLC

Email: [email protected]

Website: https://tripbutler.ai

Texas, United States

For California-specific requests: [email protected] with subject “California Privacy Request.”

© 2026 Q Labs LLC. All rights reserved.