XapidTripFund privacy notice

The short version

• Your spending figures never leave your browser. Recommendations are calculated on your device, and we never receive or store what you enter.
• An account is optional. If you create one, we keep your name and email address so you can sign in.
• We don’t sell your data, show ads, or use tracking or analytics cookies.

What we collect, and why

If you use TripFund without an account

Nothing that identifies you. The spending and payment figures you enter are kept in your browser tab so your results survive a page reload, and are cleared when you close the tab. If you open a card’s detail page or copy its link, the figures are carried in the part of the address after “#”, which browsers do not send to our servers. Your light/dark theme choice is stored in your browser.

If you create an account with email

Your name, email address and password. The password is stored only as a secure hash by our sign-in provider; nobody at Xapid AI can read it. We use your email address to confirm it is yours and to let you sign in.

If you sign in with Google

Google shares your name, email address, profile picture and language preference with TripFund, together with an identifier for your Google account. We use your name and email address to create and recognise your TripFund account. We do not ask for, and cannot see, your Gmail, contacts, Drive, calendar or any other Google data. TripFund’s use of information received from Google follows the Google API Services User Data Policy.

Sign-in and security records

When you sign up or sign in, we record when it happened, and our providers log your IP address and browser details for a short period to keep accounts secure and prevent abuse.

Email

We send only emails your account needs, such as confirming your address. TripFund does not send marketing email unless you have separately agreed to receive it.

Who processes your data

These companies process data for us, only to run TripFund:

• Supabase: stores accounts and handles sign-in, in Mumbai, India.
• Vercel: hosts the website and sees the usual request details, such as IP address, which may be processed outside India.
• Resend: delivers account emails, which may be processed outside India.
• Google: only if you choose to sign in with Google.

We share data with authorities only when the law requires it. We never sell it.

Cookies

TripFund uses only the cookies needed to keep you signed in. There are no advertising, analytics or third-party tracking cookies.

How long we keep it

We keep your account data for as long as your account exists. If you ask us to delete your account, we delete it within 30 days. Security logs held by our providers expire on their own, typically within days.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, correct it, delete it or your whole account, withdraw your consent, and nominate someone to exercise these rights for you. Write to privacy@xapidai.com from the email address on your account. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

TripFund is for adults. It helps compare credit cards, which in India require you to be at least 18, and it is not directed at anyone under 18.

Changes to this notice

We will update the date at the top when this notice changes, and email account holders about any change that affects how we use their data.

Contact

Questions or requests: privacy@xapidai.com. XAPID AI LLP, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301, India.