Privacy Policy

Last updated: 2026-05-02

DAIZ helps you plan trips. We do not sell your data, do not run advertising, and keep our data-processor list short. This page explains exactly what we collect, why, and what you can do about it, including the analytics and error-monitoring tools we now use.

1. Who We Are

DAIZ is an AI-assisted trip planner operated from Israel. The website is daiztrip.com.

For privacy questions or to exercise your rights, write to privacy@daiztrip.com.

2. What We Collect

When you browse without an account

  • Google Analytics 4 sets pseudonymous identifiers (cookies named _ga and _ga_*) to measure site usage. See section 8 below for the opt-out.
  • No advertising cookies, no fingerprinting, no cross-site tracking.
  • If you generate a trip without logging in, your travel preferences (destination, dates, traveler type, interests, budget, pace) are stored so we can show you the result.
  • Pages with maps load Google Maps. Google may process your IP address per their privacy policy.
  • Pages that recommend accommodation load Stay22, which sets affiliate-tracking cookies so we get credit if you book through us.

When you create an account (Google sign-in or magic link)

  • Email address
  • Display name
  • Profile photo URL (from Google, if you signed in with Google)
  • Login timestamps and login count

When you generate and save trips

  • Trip preferences (destination, dates, interests, budget, pace)
  • Generated itineraries
  • Activity swaps and modifications you make
  • Affiliate link clicks (which activities you clicked through to book)

3. Why We Collect It (Legal basis)

  • Account data: Contract performance. You asked us to create an account.
  • Trip data: Contract performance. You asked us to generate a trip.
  • Anonymous trip data: Legitimate interest, improving the service.
  • Affiliate clicks: Legitimate interest, revenue to sustain the service.

4. Who We Share It With

We share data with these service providers (data processors):

  • Database and authentication provider (EU/US)
  • Cloud hosting provider (US)
  • AI service provider. Your preferences are sent to generate your trip and are not stored beyond processing (US)
  • Transactional email provider (US)
  • Image hosting provider (US)
  • Google, Maps API on map pages and Google Analytics 4 for site usage measurement. Fonts are self-hosted (no Google Fonts CDN).
  • Sentry (operated by Functional Software, Inc.), error monitoring and performance tracing. Hosted in the EU (Frankfurt). We have configured Sentry to not collect personally identifiable information by default. Only error stack traces, page URLs, and anonymous performance metrics are sent.
  • Stay22, accommodation affiliate platform. When you view our destination pages, Stay22's script is loaded and sets affiliate-tracking cookies. When you click through to book accommodation, Stay22 attributes the booking to DAIZ.

We do not:

  • Sell your data
  • Use your data for advertising
  • Share your data with affiliate partners (Viator, GetYourGuide) unless you click an affiliate link, at which point their privacy policy applies

Internal: new account registrations trigger an internal Slack notification (email + name) visible only to DAIZ staff.

5. How Long We Keep It

  • Account data: until you delete your account
  • Saved trips: until you delete them or your account
  • Anonymous trips (generated without login): 12 months, then deleted automatically
  • Affiliate click data: 24 months for revenue reporting

6. Your Rights

Under GDPR, you have the right to:

  • Access your data. Download everything we have about you
  • Delete your data. Delete your account and all associated data
  • Export your data. Download in machine-readable JSON format
  • Rectify your data. Update your profile information
  • Restrict processing of your data. Write to privacy@daiztrip.com to ask us to limit how we use it
  • Object to processing. Write to privacy@daiztrip.com
  • Withdraw consent where consent is the legal basis
  • Lodge a complaint with your local data protection authority

How to exercise your rights:

7. Cookies

The cookies set on daiztrip.com fall into three buckets:

  • Essential: Supabase authentication cookies (login session) and the daiz_consent cookie that records your cookie-banner choice. Required for the site to function.
  • Analytics: Google Analytics 4 (_ga, _ga_*) to measure site usage. Only set after you accept via our cookie banner. See section 8 for details.
  • Affiliate: Stay22 sets cookies on accommodation-related pages to attribute bookings to DAIZ.

No advertising cookies and no cross-site tracking cookies.

We also use browser storage (localStorage / sessionStorage) to:

  • Preserve your in-progress trip during login (functional)
  • Cache your just-generated trip for instant display (functional)

These are cleared when you close your browser or clear site data.

8. Analytics

We use Google Analytics 4 (GA4) to understand how visitors use DAIZ. GA4 only loads after you give consent via our cookie banner.

By default, GA4 runs in cookieless mode: it records anonymous, aggregate pageviews but does not set the _ga cookies, does not assign user IDs, and does not store any device fingerprint. Your visit is counted but nothing is linked to you.

If you accept analytics cookies, GA4 upgrades to its standard tracking: it sets _ga and _ga_* cookies (1-year and 2-year expiry respectively), assigns a pseudonymous identifier, and processes approximate location derived from your IP address.

You can change your choice anytime via the Cookie Settings link in the footer. You can also use browser-level tracking protection (Brave, Firefox Strict Mode, Safari ITP) or install the Google Analytics Opt-out add-on for a stronger opt-out.

Data is processed by Google in accordance with their Privacy Policy.

9. International Transfers

Some of our service providers are based in the US. We rely on:

  • EU-US Data Privacy Framework (where applicable)
  • Standard Contractual Clauses (where DPF doesn't apply)

10. Children

DAIZ is not directed at children under 16. We do not knowingly collect data from children under 16.

11. Changes

We may update this policy. Material changes will be notified via email to registered users. The “Last updated” date at the top of this page reflects the most recent revision.