Privacy Policy

Basecamper (basecamper.ai) is an adventure travel planning platform. This policy explains what personal data we collect, why, who we share it with, and the rights you have over it. It is written to be read, not skimmed past.

• Account data — your email, name, and avatar, provided by Google when you sign in with Google OAuth.
• Profile data — anything you add yourself: bio, social links.
• Content — adventures you post, comments, votes, bookmarks, and collections.
• Trip planning conversations — messages you exchange with the AI trip planner and the itineraries it builds are saved to your account so you can resume them. Treat them like any other saved document: they may contain whatever you chose to share (dates, budgets, fitness notes).
• AI answer feedback — if you rate an assistant reply with thumbs up or down, we store your rating and any comment you add. A thumbs-down also stores a verbatim copy of the conversation up to and including the rated reply, so we can reproduce the bad answer and improve the planner; a thumbs-up stores only the rating, never any conversation text. This copy is kept separately from the itinerary, so it remains after you delete the itinerary itself. It is included in your data export and permanently deleted with your account.
• Your OpenAI API key (optional) — if you add your own key it is encrypted at rest with AES-256-GCM and never displayed again (only its last four characters).
• Usage signals — which adventures you view. Anonymous views are counted using a salted, daily-rotating hash of network data — we do not store an identifier on your device for this.
• IP address — processed transiently for rate limiting and abuse prevention, and retained in our hosting provider’s request logs.
• Billing state — if you subscribe to Pro, Stripe tells us your subscription status. Your card details go directly to Stripe and never touch our servers.

• Performing our contract with you — operating your account, your content, the planner, and Pro billing.
• Legitimate interests — keeping the service secure (rate limiting, abuse prevention), understanding what content is popular, and improving the product.
• Consent — marketing email, if you ever opt in. We do not send marketing email without it, and every message would include one-tap unsubscribe.

• OpenAI (US) — your trip-planner messages and, when you use the description-enhancer, adventure text are sent to OpenAI’s API to generate responses. OpenAI’s API terms state API data is not used to train their models.
• Stripe (US/EU) — payments and subscription management.
• Amadeus and Skyscanner — flight searches send only route, dates, passenger count and cabin class. No names or personal details.
• OpenStreetMap — map tiles load directly from OpenStreetMap’s servers, which receive your IP address and the map area you view.
• Google — sign-in (OAuth) and our hosting infrastructure (Google Cloud, London region europe-west2).

Transfers to US providers rely on the EU–US / UK Data Privacy Framework or Standard Contractual Clauses. We never sell personal data.

• Account, content and itineraries — until you delete them or your account.
• Adventure view records — deleted after 90 days.
• Read notifications — deleted after 90 days.
• Auto-created empty itineraries — deleted after 30 days.
• Product analytics events — deleted after 180 days.
• Email send log — deleted after 365 days.
• Search events — deleted after 365 days.
• AI answer feedback — a thumbs-up (the rating only, no conversation text) is deleted after 90 days; a thumbs-down, with its conversation copy, is kept 365 days to improve answer quality. Both are deleted immediately with your account.
• Server logs — 30 days.

Under UK/EU data protection law you can access, correct, export, and erase your data, object to processing, and complain to the ICO (ico.org.uk). Most of it is self-serve:

• Export — download everything we hold about you as JSON from profile settings.
• Delete — permanently delete your account and all your content from the same page. This also deletes your Stripe customer record. It cannot be undone.
• Rectify — edit your profile at any time.

We use strictly necessary cookies only: your sign-in session (expires after 7 days) and a theme preference. No advertising or cross-site tracking cookies, and no third-party analytics scripts.

Questions or requests: privacy@basecamper.ai. We answer subject-access and erasure requests within one month.