AI-drafted starter — review with attorney before launching commercially. This document is generated by the Startup Builder's Legal agent. It is a baseline starter, not legal advice. Replace this banner only after attorney review.
Privacy Policy — japan-vacation-planner
Effective date: 2026-08-29 Operator: japan-vacation-planner (operator name TBD — set before launch) Contact for privacy: privacy@japan-vacation-planner.example.com (set contact email before launch)
1. Information we collect
japan-vacation-planner is a local-first application. The Service is designed to store your data in your browser, not on our servers.
| Data | Where it's stored | Why | Retention | | --- | --- | --- | --- | | Itinerary data (trip name, dates, destinations, notes) | Your browser (LocalStorage, IndexedDB) | Provide itinerary building functionality | Until you clear browser data or export/delete | | Budget/expense data | Your browser (LocalStorage, IndexedDB) | Provide budget tracking functionality | Until you clear browser data or export/delete | | Saved destinations | Your browser (LocalStorage, IndexedDB) | Provide destination discovery and saving | Until you clear browser data or export/delete | | Beta banner dismissal | Your browser (LocalStorage) | Remember your preference across sessions | Session-based |
Reference and route data: The MVP loads versioned curated content and, in local development, queries a locally operated routing service. These sources are reference data; your saved trip and budget records are not transmitted to an application database.
Lawful basis (GDPR): Since personal travel-planning data is stored locally in your browser and not transmitted to our servers in the MVP, processing by us is minimal. Any later hosted analytics, routing, or sync feature requires this policy and its lawful basis to be reviewed before release.
2. How we use your information
- To provide the itinerary building, destination discovery, budget tracking, and map features.
- To load curated reference data and display locally calculated route options.
- To record aggregate affiliate-offer click counts on your device.
3. How we share your information
We do not sell or share your personal data with third parties because your itinerary and budget data never leaves your browser.
External services and sources:
| Processor | Purpose | Country | Privacy policy | | --- | --- | --- | --- | | OpenStreetMap ecosystem source/provider (as configured) | Map and routing-source data | Global | openstreetmap.org/about/privacy/ | | Booking partner selected by you | Complete a booking outside the app | Varies by partner | Shown on the partner site |
The public hosting and map-tile providers are not selected yet. Before public launch, replace this table with the actual providers and data they receive. Opening an affiliate link tells that partner your normal browser/request information and any tracking identifier embedded in the offer URL, but the MVP must not append personal itinerary or budget data.
4. Cookies and tracking
We do not use non-essential cookies or third-party tracking.
The Service uses LocalStorage and IndexedDB to store your itinerary, route selections, budget, preferences, and local affiliate-click totals in your browser. These are not cookies and are not transmitted to our servers by the MVP.
If we add analytics in the future, we will seek your consent first and update this policy.
5. Your rights
Because your data is stored locally in your browser, you have direct control over it:
- Access: Your data is visible in the app. You can export it via PDF or Excel at any time.
- Delete: Clear your browser's LocalStorage and IndexedDB, or use the app's data clearing feature (if implemented) to delete your data.
- Portability: Export your itinerary (PDF) and budget (Excel) at any time.
For any data we do process server-side (e.g., if you contact us), you have the right to access, correct, delete, and port that data. Contact privacy@japan-vacation-planner.example.com. We respond within 30 days.
6. Data security
Since your data is stored locally in your browser:
- You control your data. We cannot access or recover it if you clear your browser.
- Export regularly. Use the PDF and Excel export features to back up your trip plans.
- Browser security. Your data is protected by your browser's security model.
For any future hosted app or routing infrastructure, HTTPS and appropriate provider controls are required before public launch.
7. International data transfers
Since your personal itinerary data is stored locally and not transmitted to our servers, international data transfer concerns are minimal.
If you access the Service from the EU, UK, or Japan, your personal trip data remains in your browser in the MVP. Public hosting and map delivery may involve international network requests once providers are selected; this policy must be updated with those providers and locations before launch.
If you have questions about data residency, contact privacy@japan-vacation-planner.example.com.
8. Children's privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us to delete it.
9. Japan APPI disclosure (Act on the Protection of Personal Information)
Under Japan's APPI:
- Purpose of utilization: We provide a travel planning tool. Your local data is used only for this purpose.
- Third-party transfer: We do not transfer personal itinerary data to an application server in the MVP. Normal network metadata may be processed by the eventual host, map-source provider, or a booking partner you choose; those providers must be disclosed before launch.
- Anonymously processed information: Not applicable — we do not create anonymized datasets from user data.
10. Changes to this policy
We will notify you of material changes via a notice in the Service. Continued use after notice constitutes acceptance.
11. Contact
Privacy questions: privacy@japan-vacation-planner.example.com (update with actual contact email before launch)