Legal

Legal, privacy, and compliance center

Clear, current documents for the teams that need them — procurement, security review, data protection, and finance. Every policy is versioned and dated.

GDPR & UK GDPR CCPA / CPRA DPA with SCCs WCAG 2.2 AA

Privacy & Data

Privacy Policy

How Tripistic collects, uses, shares, and protects personal data across the platform, the public website, and the customer portal.

Updated July 1, 2026

Cookie Policy

Every cookie category Tripistic uses, the vendors involved, how consent is captured, and how to change your choice at any time.

Updated July 1, 2026

GDPR Compliance

How Tripistic meets EU and UK GDPR obligations — lawful bases, data subject rights, transfer safeguards, subprocessors, and breach notification.

Updated July 1, 2026

CCPA & US State Privacy

Rights and disclosures for California, Virginia, Colorado, Connecticut, Texas, and other US state privacy laws, including opt-out and Global Privacy Control.

Updated July 1, 2026

Terms & Billing

Terms of Service

The agreement governing subscriptions, billing, accounts, acceptable use, refunds, termination, and liability for the Tripistic platform.

Updated July 1, 2026

Data Processing Agreement

The DPA governing Tripistic's processing of personal data on behalf of enterprise and operator customers, including SCCs, subprocessors, and security annexes.

Updated July 1, 2026

Refund Policy

Refund eligibility for Tripistic monthly plans, annual plans, trials, and enterprise agreements — and how traveller refunds differ.

Updated July 1, 2026

Security & Compliance

Acceptable Use Policy

Security, spam, abuse, illegal content, and automation rules that govern every Tripistic workspace, API key, and white-label deployment.

Updated July 1, 2026

Security Policy

Tripistic's encryption, backup, infrastructure, compliance, and coordinated vulnerability disclosure practices.

Updated July 1, 2026

Service Level Agreement

Availability commitments, support response times, service credits, and maintenance windows for Tripistic paid and enterprise plans.

Updated July 1, 2026

Security review or procurement?

Enterprise teams can request our security documentation, control summaries, subprocessor list, and a countersigned Data Processing Agreement. We also complete vendor security questionnaires.

Contact the team →Read the Security Policy →Read the DPA →

Legal, privacy, and compliance center

Privacy & Data

Privacy Policy

Cookie Policy

GDPR Compliance

CCPA & US State Privacy

Terms & Billing

Terms of Service

Data Processing Agreement

Refund Policy

Security & Compliance

Acceptable Use Policy

Security Policy

Service Level Agreement

Product & IP

License Agreement

Accessibility Statement

Copyright Policy

Security review or procurement?