CoTrip
Privacy Policy
Last updated: August 19, 2026
This Privacy Policy explains how CoTrip collects, uses, stores, and shares personal data when you use cotrip.co, create an account, purchase Premium or Connect, search the hotel catalog, or send outreach.
1. Information we collect
We collect account details such as your name, email address, avatar, role, and authentication identifiers; profile and social-media information you provide; trip, hotel, and campaign selections; email drafts, recipients, delivery and reply status; subscription, payment-status, and Connect-ledger records; support messages; and device, log, and usage data. Optional profile fields may include contact details and collaboration history.
2. Google Sign-In data
When you choose Google Sign-In, we receive the basic identity data you authorize: your Google account identifier, name, email address, profile picture, and email-verification status. We use it only to authenticate you, create or connect your CoTrip account, protect the service, and display your profile. CoTrip does not request or read Gmail messages, Google contacts, or Google Drive files, and does not sell Google user data.
3. How we use information
We use information to operate and secure accounts; provide hotel discovery, campaign, messaging, Premium, and Connect features; process orders; deliver and measure user-authorized outreach; provide support and notifications; prevent fraud and misuse; troubleshoot the service; and understand and improve product performance.
4. How we share information
We share data only as needed with service providers such as Supabase for authentication and data services, Render for hosting, Firebase for analytics, Saleshandy for outreach delivery and reply synchronization, and PayTR or Stripe for payments. Selected hotel recipients receive the profile and message content you choose to send. We may also disclose data when required by law, to protect rights and safety, or during a business transaction. We do not sell personal data.
5. Payments and billing records
Checkout is processed by PayTR and, if enabled, an alternative provider such as Stripe. CoTrip does not store your full card number or card security code. We retain information required to operate billing, including order identifiers, amount, currency, payment result, subscription status, Connect transactions, and any provider-issued token needed for an enabled renewal flow.
7. Retention and deletion
We keep personal data while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, prevent fraud, and meet legal, tax, and accounting duties. You may request account deletion from account settings or by contacting us. Some records may remain for mandatory retention periods, in backups, or under a service provider's own lawful retention schedule.
8. Security and international processing
We use reasonable technical and organizational safeguards, including access controls and encrypted connections, but no online service can guarantee absolute security. Our providers may process data in countries other than yours. Where required, we rely on appropriate contractual or legal safeguards for international processing.
9. Your rights and choices
Depending on applicable law, you may ask to access, correct, export, delete, restrict, or object to processing of your personal data, and may withdraw consent where consent is the legal basis. You can update many details in account settings and opt out of non-essential communications. We may verify your identity before completing a request.
10. Children's privacy
CoTrip is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can investigate and take appropriate action.
11. Changes to this policy
We may update this Policy when our services, providers, or legal obligations change. We will publish the current version on this page, update the date above, and provide additional notice when a change is material.