Privacy Policy

Last updated 2 August 2026

Trundle Workspace is an experimental prototype run by Tabibito Technologies Private Limited. It is offered for evaluation, not as a finished commercial service. Please do not enter sensitive personal information into it.

Who we are

This service is operated by Tabibito Technologies Private Limited (CIN U62011TN2025PTC178340), registered in Chennai, Tamil Nadu, India. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described below. You can reach us about anything in this policy at care@trundle.me.

What we collect

You can plan an entire trip on Trundle Workspace without an account. If you never sign in, we hold no information that identifies you personally:

An anonymous session identifier, created when you start. It identifies your browser, not you, and lets your trips reappear when you return.
The trip information you enter: destination, travel month, trip length, number of adults and children, departure city, budget, and any activities, notes or preferences you add.
Standard technical logs kept by our hosting and database providers, such as IP address, browser type and timestamps, used for security and diagnosing faults.

If you choose to sign in, Trundle Workspace uses the same Trundle account as the Trundle app and trundle.world. We then also hold:

Your email address, which you give us so we can send you a one-time sign-in code.
Your name, if your Trundle account has one or you enter one when signing in.
Sign-in tokens, stored in cookies that your browser cannot read and that are used only to keep you signed in.

Signing in is optional and reversible. It is the only thing on Trundle Workspace that makes you identifiable to us, and you can sign out at any time.

We do not use advertising trackers, we do not build advertising profiles, and we do not sell or rent your information to anyone.

Why we use it

To save your trip so it is still there when you come back.
To generate travel suggestions and estimates based on what you have told us.
To keep the service working, secure and free from abuse.
To understand, in aggregate, which parts of the prototype people find useful.

Who else sees it

We use a small number of service providers to run Trundle Workspace. Each receives only what it needs to do its job:

Supabase - stores your trips and anonymous session. Data is held in a database region in India.
Vercel - hosts the application and processes requests.
The Trundle platform - if you sign in, your email address and sign-in code are handled by Trundle’s own account system, operated by us. It is the same account you use in the Trundle app, not a separate company.
Google (Gemini API) - when you ask tAi to plan, your trip constraints and our own curated place data are sent to generate a response. Under Google’s paid API terms, this content is not used to train their models. Your session identifier is not sent.

Links to airlines, hotels, insurers, Airalo, Amazon, currency services and government visa pages take you to third-party sites. Once you leave Trundle Workspace, that site's own privacy policy applies, not ours.

How long we keep it

A trip that has not been opened for twelve months is deleted automatically, along with the anonymous session attached to it. You can delete everything sooner at any time, from your settings page. Deletion is immediate and cannot be undone.

Deleting your Trundle Workspace data does not delete your Trundle account itself, because that account is shared with the Trundle app. To close the account entirely, use the delete option in the Trundle app or write to us.

Your rights

Under the DPDP Act you have the right to access the personal data we hold about you, to have it corrected, to have it erased, and to complain to the Data Protection Board of India. If you have never signed in, your session is anonymous and we cannot identify which data is yours, so the practical way to exercise these rights is the delete action in your settings, which removes everything we hold for your session. If you have signed in, we can act on a request made from your registered email address. Either way, email care@trundle.me and we will respond within thirty days.

Children

Trundle Workspace is not intended for anyone under 18. You may enter the number and ages of children travelling with you; this is used only to tailor suggestions and we do not knowingly collect personal data directly from children.

Security, honestly stated

Your data is transmitted over encrypted connections and stored with access controls that restrict each session to its own trips. That said, this is a prototype rather than a hardened production system, which is why we ask you not to enter passport numbers, payment details or anything else sensitive.

Changes

If we change this policy we will update the date at the top of this page. Continuing to use Trundle Workspace after a change means you accept the updated policy.

Tabibito Technologies Private Limited · Chennai, Tamil Nadu, India · Terms of Use