Legal

Privacy Policy

Version 1.4 · Effective Date: September 28, 2026

Trailstack LLC ("Trailstack," "we," "us," "our") operates the Trailstack platform at gotrailstack.com. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you provide directly:

  • Account information: name, email address, password (stored securely and hashed — Trailstack never sees your plaintext password)
  • Google Sign-In information: If you create or sign in to your account using Google Sign-In, Google provides us with a unique identifier for your Google account and, if available, your Google profile photo. We use the identifier to recognize your account on future sign-ins and the profile photo as your default Trailstack avatar (you can replace it at any time in your profile). We do not receive your Google password or any other Google account data.
  • Booking information: activity selections, trip dates, group size, special requests
  • Profile information: region/location preferences, saved itineraries
  • Trip planner inputs: preferences, dates, and activity interests you enter to generate a trip itinerary, including any free-text notes you choose to add
  • Communications: messages you send to us or that we relay to Suppliers on your behalf
  • Payment information: processed entirely by Stripe, our payment processor. Trailstack does not receive, transmit, or store your full credit card number, CVV, or expiration date. We retain only limited transaction metadata (amount, date, status) needed for booking records.

Information collected automatically:

  • Usage data: pages visited, features used, time spent, referring pages
  • Device and browser information: browser type, operating system, IP address
  • Cookies and similar technologies: used for authentication, session management, and basic analytics
  • Terms and subscription acceptance records: each time you accept these Terms, we record the version accepted and the exact date and time. If you subscribe to Trailblazer, we separately record the plan you selected, the date and time you acknowledged the auto-renewal disclosure, and the exact disclosure text shown to you at that moment. We keep these records to confirm what you agreed to and when.

Information from Suppliers:

  • If a Supplier relays information about your booking (e.g., special accommodation notes), we may store this in connection with your account.

Information about minor participants: If a listing has a stated minimum age and you include a minor in your booking, we collect only that minor's first name and age, provided to us by you as the booking adult — never collected directly from the minor. We do not collect this information for bookings involving minors on listings that have no minimum age requirement. We do not collect account information, marketing profiles, or any information directly from anyone under the age of 18. If we learn we have collected information directly from a minor, we will delete it.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Process bookings and payments
  • Send booking confirmations, updates, and receipts
  • Communicate with you about your account or bookings
  • Relay necessary logistics information between you and Suppliers for a booking you've made
  • Generate trip itinerary suggestions through our trip planner
  • Send you the Trailstack newsletter and marketing communications, if you have opted in (you may unsubscribe at any time)
  • Improve the Platform, including the trip planner and listing recommendations
  • Maintain a record of your acceptance of these Terms and any subscription disclosures, for our records and yours
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

3. How We Share Your Information

We share your information only as follows:

With Suppliers. When you book an activity, we share the information necessary for the Supplier to fulfill your booking: your first name, contact information, trip date, group size, and any special requests you've provided. Where a listing has a stated minimum age and your booking includes a minor, we may share that minor's first name and age with the Supplier when relevant to fulfilling your booking. We do not share your full account information or payment details with Suppliers.

With service providers. We use the following third-party services to operate the Platform, each of which processes data on our behalf under their own privacy and security practices:

  • Stripe (payment processing)
  • Firebase / Google Cloud (data storage, authentication, hosting infrastructure)
  • Resend (transactional and marketing email delivery)
  • Vercel (application hosting)
  • Google Maps Platform (location and mapping features)
  • Anthropic (processes trip planner inputs to generate itinerary suggestions through Trailstack's AI-powered trip planning feature). What we send is limited to trip parameters (your preferences, dates, activity types, and location) and candidate listing data (public listing details Trailstack is choosing among) — never your account name, email address, or user ID. If you enter free-text notes in the trip planner (up to 300 characters), that text is also sent to Anthropic as part of generating your itinerary. Because this is a free-text field, it can contain anything you choose to type, including your own name or other personal details — we do not filter or screen it before sending. Avoid including anything in this field you would not want processed as part of generating your trip. Under our current account settings with Anthropic, this data is not used to train Anthropic's models, and is retained by Anthropic for 30 days before deletion, consistent with Anthropic's standard data handling terms for this service.

We require our service providers to handle your information consistently with this Privacy Policy and only for the purpose of providing their service to us.

For legal reasons. We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Trailstack, our users, or the public.

In a business transfer. If Trailstack is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your information.

We do not sell your personal information to third parties, and we never will.

4. Your Choices and Rights

Access and correction. You can review and update your account information at any time by logging into your account.

Marketing communications. You may opt out of marketing emails at any time using the unsubscribe link in any email. You cannot opt out of essential transactional communications related to your bookings (e.g., booking confirmations) while you have an active account.

Account deletion. You may request deletion of your account and associated personal information by emailing hello@gotrailstack.com. We will process deletion requests within 30 days, except where we are required to retain certain records (e.g., transaction records, and the Terms/subscription acceptance records described in Section 1) for legal, tax, or accounting purposes.

Data requests generally. For any question or request about your personal information — access, correction, deletion, or a question about how it's used — contact hello@gotrailstack.com. We will respond within 30 days.

California residents (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect, request deletion of your information, correct inaccurate information, and opt out of the sale or sharing of personal information (which, as noted above, we do not engage in). To exercise these rights, contact hello@gotrailstack.com. We will not discriminate against you for exercising any of these rights.

Other state privacy laws. Residents of states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, and Utah) may have similar rights. Contact us to exercise applicable rights under your state's law.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. Following account deletion, we retain limited transaction and financial records, and the Terms/subscription acceptance records described in Section 1, as required for legal, tax, accounting, and evidentiary purposes, typically for a period of up to 7 years, consistent with standard business recordkeeping requirements. Data processed by our service providers, including Anthropic, is retained according to their own stated terms, as described in Section 3.

6. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including secure authentication through Firebase, encrypted data transmission (HTTPS/TLS), and access controls limiting who at Trailstack can view user data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies and similar technologies for:

  • Keeping you logged in between visits
  • Remembering your preferences (e.g., saved region or trip planning progress)
  • Basic analytics to understand how the Platform is used

You can control cookies through your browser settings. Disabling cookies may affect certain Platform functionality, such as staying logged in.

8. Third-Party Links

The Platform may contain links to Supplier websites, social media, or other third-party sites. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their privacy practices independently.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect once posted, consistent with how changes to the Terms of Service are handled (see the Terms of Service, Section 17). The "Effective Date" at the top of this policy reflects the most recent revision. We encourage you to review this policy periodically.

10. Contact Us

Questions about this Privacy Policy, your personal information, or any data request can be directed to:

hello@gotrailstack.com
Trailstack LLC
Indiana, United States

← HomeTerms of Service