Legal Information

This Privacy Policy describes how Journli (“Journli,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website, create an account, build or share travel itineraries, purchase or sell content on our marketplace, or otherwise use our services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy and our Cookie Policy. If you do not agree, please do not use the Service.

We collect information in the following categories:

Account and profile information. When you register, we collect information such as your name, username, email address, and password (stored securely by our authentication provider). You may also provide a profile photo, bio, location, website, and social media links (for example Facebook, Instagram, X/Twitter, Pinterest, TikTok, or YouTube handles).

Itinerary and content you create. This includes trip titles, descriptions, day-by-day schedules, activities, notes, tags, pricing for paid listings, cover images, photo uploads, template choices, and permission settings that control who can view or edit your itineraries.

Usage and interaction data. We collect information about how you use the Service, such as itineraries you view, like, save, or purchase; accounts you follow or block; search activity; and engagement metrics associated with published itineraries (for example view counts).

Marketplace and billing information. If you purchase paid itineraries or subscribe to a paid plan, payment processing is handled by Stripe. We receive transaction-related information such as purchase status, subscription plan, Stripe customer and subscription identifiers, and amounts paid. We do not store full payment card numbers on our servers. If you sell on Journli, we also collect seller onboarding and payout-related information through Stripe Connect, including your connected account status and transaction records needed to operate the marketplace.

Communications and support. If you contact us, subscribe to our newsletter, submit feedback, or receive emails from us (such as purchase confirmations or password reset messages), we process the information you provide, including your email address and message content.

Technical and device information. We automatically collect certain technical data when you use the Service, including IP address, browser type, device information, pages visited, and session data needed to keep you signed in. See our Cookie Policy for more detail.

• Directly from you when you sign up, edit your profile, create itineraries, upload images, adjust account settings, make purchases, connect a seller account, or submit forms (including newsletter signup and feedback).
• Automatically through cookies, authentication sessions, server logs, and analytics tools when you browse or interact with the Service.
• From service providers such as Stripe when you complete a payment or seller onboarding flow.
• From other users when they interact with your public content (for example following your profile, saving your itinerary, or purchasing your listing).

We use the information we collect to:

• Create, authenticate, and maintain your account.
• Provide core features, including itinerary creation, sharing, collaboration permissions, profiles, search, saves, likes, and follows.
• Operate the marketplace, including listing paid itineraries, processing purchases, delivering purchased content, seller payouts, and seller dashboard reporting.
• Manage subscriptions and paid plans.
• Send transactional emails (for example purchase confirmations, password resets, and feedback notifications to our team).
• Send optional marketing or product updates when you subscribe to our newsletter or when you have not opted out of email notifications in your account settings.
• Improve, secure, and troubleshoot the Service, including fraud prevention and abuse detection.
• Enforce our Terms of Service, Seller Agreement, and other policies.
• Comply with legal obligations and respond to lawful requests.

We do not sell your personal information.

We may share information in these circumstances:

• With other users, according to your settings. Public profiles, published itineraries, and content you choose to share may be visible to others on Journli. If you set your profile or itineraries to private or restricted, we limit visibility accordingly.
• With collaborators, when you grant view or edit permissions to specific users.
• With buyers and sellers, as needed to complete marketplace transactions (for example, delivering a purchased itinerary or notifying a seller of a sale).
• With service providers that help us operate the Service, subject to contractual protections. See “Third-Party Service Providers” below.
• For legal and safety reasons, if we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Journli, our users, or others.
• In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality obligations.

We use trusted third parties to help run Journli. Depending on how you use the Service, these providers may process personal information on our behalf:

• Supabase — authentication, database hosting, file storage for profile photos and itinerary images, and related infrastructure.
• Stripe — payment processing, subscriptions, Connect accounts for sellers, fraud prevention, and payout administration.
• Resend — transactional email delivery (for example password resets, purchase confirmations, and internal feedback notifications).
• Vercel — website hosting, application delivery, and privacy-friendly analytics through Vercel Analytics.

These providers may only use your information as needed to perform services for us and are subject to their own privacy policies and security practices. Payment information you submit is handled directly by Stripe according to Stripe’s policies.

We use cookies and similar technologies to keep you signed in, remember preferences, protect the Service, and understand how it is used. Supabase authentication may store session cookies or local storage entries required for login and account security.

For more information, including how to manage cookies in your browser, see our Cookie Policy. Disabling certain cookies may limit your ability to sign in or use some features.

Journli is a platform for creating and sharing travel content. Information you post — including itinerary text, images, comments in feedback forms, and profile details — may be stored in our database and, depending on your settings, displayed to other users.

You can control some visibility through account settings, including making your profile private, restricting who can view or edit specific itineraries, and choosing whether itineraries are public, creator-only, or limited to selected users. Even if you delete your account, certain content you shared publicly may remain visible in cached, backup, or third-party systems for a limited period, or where other users have lawfully saved copies.

If you use social features, we process follow relationships, blocked-user lists, likes, saves, and permission grants you create. Blocking another user limits interaction between accounts according to our product rules. We use this information to enforce your preferences and keep the community safe.

We may send you:

• Transactional emails related to your account or purchases (for example password resets and purchase confirmations).
• Newsletter or promotional emails if you subscribe through our footer form or similar signup flows.
• Product or account notifications when enabled in your settings.

You can manage email notification preferences in Account Settings. You may unsubscribe from marketing emails using the link in those messages, where provided. Transactional messages may still be sent when necessary to provide the Service.

We use Vercel Analytics to understand aggregate usage of the Service (such as page views and performance). This helps us improve reliability and user experience. We do not use analytics data to sell your personal information.

Your information is stored using cloud infrastructure operated by our service providers, primarily in the United States. We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encrypted connections (HTTPS), and authenticated access to production systems.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your password and account credentials.

We retain personal information for as long as your account is active or as needed to provide the Service, resolve disputes, enforce agreements, comply with legal obligations, and maintain appropriate business records (for example tax, payment, and fraud-prevention records). When you delete your account, we delete or anonymize associated profile data where feasible, though some information may persist in backups for a limited time or where retention is required by law or legitimate business need.

You may update much of your profile information at any time in Account Settings. You may delete your account from Account Settings; this removes your user profile from Journli and deletes your authentication record through our systems.

Some information may survive deletion where required for legal compliance, fraud prevention, dispute resolution, or where other users have independently saved or purchased content. Marketplace transaction records may be retained as needed for accounting, tax, and payout purposes.

To request access, correction, or deletion of personal information, or to ask a privacy question, contact us at info@journli.com. We may need to verify your identity before fulfilling certain requests.

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, restrict, or object to certain processing, and the right to data portability. California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and how it is used, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may also have rights under applicable data protection laws, including the right to lodge a complaint with a supervisory authority.

To exercise applicable rights, email info@journli.com. We will respond as required by law.

Journli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at info@journli.com and we will take appropriate steps to delete it.

Users must meet the eligibility requirements in our Terms of Service.

Journli is operated from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate, which may have different data protection laws than your country.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. If changes are material, we may provide additional notice (for example by email or a prominent notice on the Service). Your continued use of Journli after changes become effective means you accept the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Journli
Email: info@journli.com