TripIt Privacy Policy

Effective: September 1, 2021

本隐私政策(“政策”)描述了如何Concur Technologies, Inc., Concur Holdings (Netherlands) B.V., and their affiliated companies through the TripIt business unit ("TripIt" or "us" or "we") collect, use, and share the information you provide to us or we gather from you while you access or use (the "Site"), the TripIt mobile application (the "App"), and related services that link to this Policy (together, the “TripIt Services”).

We may also supplement this Policy with other privacy notices in the TripIt Services. This Policy applies only to information collected by us through the TripIt Services and does not apply to services that link to other privacy policies, including any third-party websites or services you connect to from our TripIt Services, such as social-networking platforms or connected third-party applications. TripIt is not responsible for the privacy practices or content of such third parties. We encourage you to read the privacy statements of those third parties.


Personal Data Collected

As used in this Policy, “Personal Data” means information relating to you as an identified or identifiable individual. You provide Personal Data directly into the TripIt Services. For example, as part of activating an account with TripIt, we collect your name, email address and password, and home airport or country/region. If you create the account using one of the available social networking or third-party platform connection options (a “social sign-in” like Google, Facebook, or Yahoo), we will collect your associated email address and related profile information from the social sign-in provider. You may also identify your company or employer, as well as provide a photo of yourself. You may also provide us with additional email addresses for purposes of collecting itinerary information and to ensure that you retain access to your account even if you no longer have access to your primary email address.

To take full advantage of features and functionality of the TripIt Services, you may also provide us with additional information for your profile, such as date of birth, or your travel preferences, like seat and meal preference. And you may input emergency contact details and government-issued identification numbers needed for travel, such as your passport or driver license number. This information helps you to keep your itinerary and travel information in one place. If you wish to receive alerts via text messages, you must provide your mobile phone number. If you purchase additional TripIt Services, such as upgrading your account to TripIt Pro, we will collect certain billing and payment information. We process any payments using third parties, and we would retain only the last four digits of your credit card number and expiration date.

We may also collect Personal Data from other sources and combine that with Personal Data we collect from you through the TripIt Services, as described below.

Company SAP Concur Account

If your company has enabled you to connect the SAP Concur account you use through your company (“SAP Concur Account”) with your TripIt Services account, by allowing the TripIt Services to access your SAP Concur Account, the TripIt Services will have access to account profile, itineraries, and traveler preferences contained within your SAP Concur Account. The TripIt Services may use and store this Personal Data and combine it with other Personal Data maintained by the TripIt Services. Travel itineraries available to your SAP Concur Account will also be collected into your TripIt Services account so that you may manage these itineraries with the TripIt Services.

Third-Party Connected Services

TripIt服务也使你连接你r TripIt Services account with third-party applications and service providers. You can find information about many of these applications within the “Supported Apps” portion of the Site, and third-party applications that connect to the TripIt Services will usually indicate that they connect to the TripIt Services. These connected third-party applications may enable Personal Data about you to be transferred into the TripIt Services. For example, if you book airline travel using a connected third-party application from the airline, the corresponding booking information may be transferred into the TripIt Services. In other cases, Personal Data may be transferred to and from a third-party service so you can use the TripIt Services with a third-party application you have chosen. For example, if you interact with the TripIt Services through voice commands, either using the voice-recognition services enabled on your mobile device or through third-party devices that are enabled with voice command “skills,” Personal Data would be processed by these third-party devices and through third-party services. Your use of any third-party applications or third-party services is subject to the terms and conditions you have agreed to with such third parties, including third-party privacy notices, and TripIt is not responsible for the quality or accuracy of third-party data available to the TripIt Services from third parties or how such third parties may use Personal Data.

Connecting Your Email and Reward Accounts

You can choose to enable us to access one or more of your email accounts by connecting such account(s) with your TripIt account. If you connect your email account, the TripIt Services will automatically access and analyze the contents of emails in your email account(s) on an ongoing basis for the purpose of identifying travel and travel-reward related emails that may contain recent travel bookings, boarding passes, or reward-program statements. Once identified, travel itinerary and reward-program information is then extracted from your emails into your TripIt Services account so that you may access this information in the TripIt Services. Notwithstanding anything else in this Policy, TripIt only uses such information to provide or improve user-facing features and will not use or transfer such information (even if aggregated or anonymized) for serving ads, including retargeting, personalized, or interest-based advertising. TripIt’s access to the email account is authorized through the email provider’s access mechanism. If you choose to have the TripIt Services track your travel-reward points, the TripIt Services will store account details for each of your travel-reward accounts, including your sign-in user name and password for tracked accounts. This information will be used to enable the TripIt Services, directly or indirectly through third-party service providers, to automatically access your applicable reward accounts and analyze and extract information from such accounts for use in the TripIt Services. You will be asked in each case whether you want to connect a third-party email or reward account. You may manage your connections to email and reward accounts and disconnect at any time in the settings menu and Point Tracker menu, respectively.

Third-Party Social Sign-Ins


Cookies, Analytics, and Tracking

When you use the TripIt Services through the Site, some information such as Internet protocol (IP) address, device or browser information, logs, or clickstream information is automatically collected about your usage and activity to address technical support issues and understand how you use the Site. TripIt may use certain tracking technologies such as cookies, web beacons, or third-party analytics tools to obtain such information. Our App utilizes tracking technologies from third-party service providers we have engaged to provide services on our behalf. In some cases, these are analytics providers that provide services such as application analytics and crash reporting. In other cases, these are advertising or campaign measurement providers. These providers may also automatically collect some of the information described above, including, for example, usage information, IP address, access times, browser type and language, device type, device identifiers, and Wi-Fi information. These providers may also automatically collect the above information about you through the App and on other sites and services, including personally identifiable information about your online activities over time and across different websites, devices, online services, and applications when you use our App. Some third parties help us and others associate your activities across the browsers and devices you use, or that your household uses, for retargeting, cross-device advertising, analytics, and measurement purposes. The third-party analytics and advertising providers we use include:Google Analytics,,,,Crashlytics,,,,andApsalar。Some third-party providers allow you choices about their collection or use of your information. Some of these providers may also be members of theNetwork Advertising Initiative (NAI)or数字广告联盟(DAA),,,,which each provide a simple way to opt out of ad targeting from participating companies.

您可能会找到有关网站上使用的各种跟踪工具的更多信息,并调整您对TrustArc Cookie同意管理器中网站的偏好,您可以随时单击该网站。链接网站的页脚。


From the Site, you can access and import contacts from your other online address books, like Google, Yahoo, and Outlook. If you would like us to invite another individual to join the TripIt Services, you may provide us their email address so that we may send them an invitation on your behalf to visit the TripIt Services. When using the App, the App may also access your device contacts if you enable those permissions.

Location Data

Tripit服务的某些功能可能会收集精确的地理位置数据,包括通过GPS(全球定位系统),IP地址和其他基于位置的技术。提供了有关这些功能的其他信息below,,,,along with the settings screens for the features in the App.

How Personal Data Is Used

TripIt将使用个人数据中描述Policy and as disclosed to you in the TripIt Services, which include for the following purposes:

Choices You Have Regarding Personal Data

Profile and Transaction Information


If you otherwise wish to ask for access, correction, or deletion of any of your information held by us, or a change in the way we use your information, please contact us。We reserve the right to charge you a fee, as permitted by applicable law, and may decline requests that are unreasonable, prohibited by law, or are not required to be honored by applicable law.

Location Data

The TripIt Services provide features that require your precise location and the use of location services on your mobile device through the App. Some of these features may be available only to users of the premium “Pro” version of the TripIt Services. You may enable or disable these TripIt Services within the App and the privacy settings in your mobile device. Features such as Go Now (alerts you about important events, such as when you should leave for your drive to the airport based on your current location, flight status, and real-time traffic conditions) and Terminal and Gate Reminders (alerts you to your terminal and gate number when you’re close to the airport) require that location services on your mobile device be set to always provide location information, but these features only begin to detect your location a few hours prior to your scheduled departure and do not continuously collect your location. The TripIt Services may also provide you with navigation services within certain airports or between destinations based on your itinerary or destinations that you have specified. These services require that location services on your mobile device be enabled only when you are using the App.

SAP Concur Account

If your company subscribes to certain business travel and expense solutions from Concur Technologies, Inc. or Concur Holdings (Netherlands) B.V. (“SAP Concur”), you may connect or disconnect your SAP Concur Account from your TripIt account within the TripIt Services or from your SAP Concur Account. Once connected, any itineraries or travel information within the TripIt Services may be available to your company. This may include your personal itineraries within the TripIt Services unless you exclude them using the “Link to Concur” setting or delete them from your SAP Concur Account. If you choose to disconnect your TripIt Services account from your SAP Concur account, or you no longer have access to your SAP Concur Account, any Personal Data shared with your company prior to such time is governed by the terms between your company and SAP Concur or one of its corporate affiliates, and you will need to contact your company regarding use and retention of that data. If you intend to continue to use your TripIt Services account after you no longer have access to your SAP Concur Account, you will need to update your TripIt Services account email to a personal email account.


你选择了康涅狄格州其他第三方服务ect with the TripIt Services may be enabled or disabled through selections in the Site or the App. You usually can also enable or disable connections through the third-party services themselves. Certain third-party services we may feature through our TripIt Services give you social-media options to interact with buttons or widgets that let you “like” information or post information about your activities publicly from the TripIt Services to third-party sites and platforms or privately within your network. By connecting your TripIt Services account with third-party services, you enable third-party services to access the TripIt Services API and gain access to your itinerary information, as well as your profile information. Their use of this information is governed by their user terms with you and their privacy policies.


You can manage your email preferences through the selections within the Site or the App by updating your email subscription settings. You can also unsubscribe from promotional emails by: (1) following the unsubscribe instructions in our emails; or (2) emailing us。您可以不时更新电子邮件首选项。请注意,即使您取消订阅促销电子邮件,我们仍然需要与您联系,以与您的帐户和您的服务使用有关的重要交易信息。例如,即使您已从我们的电子邮件中取消订阅,我们仍然会向您发送有关安全性,计费或帐户服务(例如密码重置)的电子邮件。


You may manage the push message alerts regarding flight delays, gate changes, and other alert information specific to your itinerary sent by the TripIt Services to your mobile device through the settings page in the Site or within the App. Similarly, you may manage text message alerts through the settings page in the Site or within the App, and you may always opt out of text message alerts by replying STOP to any text message sent by TripIt.


The TripIt Services enable you to keep in touch with your contacts and other members of the TripIt Services when you travel, such as by importing your contacts as described above. You may search for and join groups of TripIt Services users so that you can more easily coordinate travel and share travel information. In your settings menu, you may configure certain privacy controls that enable the sharing of profile information, traveler information, and itinerary information and statistics with other users or with the general public (including external search engines). You can share specific itineraries with both TripIt Services users and non-users. If we send an email itinerary on your behalf to a non-user, you represent that you have permission to direct us to email such person.

Cookies, Analytics, and Tracking

You also have choices regarding some of the technologies used to track your use of the TripIt Services. You may find out more about the various tracking tools used on the Site and adjust your preferences for the Site in the TrustArc Cookie Consent Manager, which you can access at any time by clicking on the链接网站的页脚。注意,洞穴ings are limited to the particular browser installed on a particular device. So if you use TripIt Services with different browsers or different devices, including a mobile device, you may have to disable the tracking cookies in the browsers of all relevant devices. It may not always be possible to disable cookies in the App, and disabling cookies on the Site will not disable tracking technologies on the App. We may not recognize or respond to every type of "do not track" signal or other mechanisms that provide consumers the ability to exercise choice regarding the collection of Personal Data about an individual consumer’s online activities over time and across third-party websites or online services, but we give you certain choices about how we collect Personal Data as described in this Policy. For more information on how we collect Personal Data for these purposes, see the “Cookies, Analytics and Tracking” sectionabove

How TripIt Shares Personal Data

The TripIt Services may share your Personal Data as described in this Policy and as follows:

How Personal Data May Be Transferred to the United States

The TripIt Services operate from data centers in multiple locations globally, including in the United States. Using the TripIt Services may result in the transfer, use, processing, or storage of Personal Data in the United States or any other country/region where TripIt operates or maintains facilities or service centers, including jurisdictions that may not have data privacy laws that provide protections equivalent to those provided in your home country/region. TripIt takes steps designed to ensure that the Personal Data is processed according to applicable law wherever the data is located and the provisions of our agreements, including any intercompany data-processing agreements among corporate affiliates.

By providing your information to us through your use of the TripIt Services, you agree to that transfer, storage, and processing of your Personal Data in the United States.

Rights for Certain Users


Concur Technologies, Inc., is the controller of your Personal Data for the TripIt Services. The data protection officer for SAP group companies may be reached

You can request from TripIt access at any time to information about which Personal Data TripIt processes about you and the correction or deletion of such Personal Data. Please note, however, that TripIt can or will delete your Personal Data only if there is no statutory obligation or prevailing right of TripIt to retain it. Kindly note further that if you request that TripIt deletes your Personal Data, you will not be able to continue to use any TripIt Services that require TripIt’s use of your Personal Data.

If TripIt uses your Personal Data based on your consent or to perform a contract with you, you can further request from TripIt a copy of the Personal Data that you have provided to TripIt. In this case, please contactprivacy-request@concur.comand specify the information or processing activities to which your request relates, the format in which you would like to receive this information, and whether the Personal Data should be sent to you or another recipient. TripIt will carefully consider your request and discuss with you how it can best fulfill it.

Furthermore, you can request from TripIt that TripIt restricts your Personal Data from any further processing in any of the following events: (i) you state that the Personal Data TripIt has about you is incorrect, subject to the time TripIt requires to check the accuracy of the relevant Personal Data, (ii) there is no legal basis for TripIt processing your Personal Data and you demand that TripIt restricts your Personal Data from further processing, (iii) TripIt no longer requires your Personal Data but you state that you require TripIt to retain such data in order to claim or exercise legal rights or to defend against third party claims, or (iv) in case you object to the processing of your Personal Data by TripIt based on TripIt’s legitimate interest, subject to the time required for TripIt to determine whether it has a prevailing interest or legal obligation in processing your Personal Data.

TripIt may decline to process requests that are manifestly unfounded, excessive, or fraudulent, or are not otherwise required by local law.

If you take the view that TripIt is not processing your Personal Data in accordance with the requirements in this Privacy Policy or under applicable EEA data protection laws, you can at any time lodge a complaint with the data protection authority of the EEA country/region where you live or with the data protection authority of the country/region or state where TripIt has its registered seat.

If applicable under French law, you can also send us specific instructions regarding the use of your personal information after your death by contacting us




Please direct any requests to exercise your rights。You can also designate another person to submit requests to exercise your data protection rights to TripIt. You can give authorization to such person by granting them a limited power of attorney to exercise your data protection rights on your behalf. TripIt may decline to process requests that are manifestly unfounded, excessive, or fraudulent, or are not otherwise required by local law.



In accordance with the verification process set forth in the California Consumer Privacy Act (“CCPA”), TripIt will require a more stringent verification process for deletion requests, or for Personal Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Personal Data. If TripIt must request additional information from you outside of information that is already maintained by TripIt, TripIt will only use it for the purposes of verifying your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes.

We do not sell personal information to third parties. We do share personal information with third parties for the business purposes described in this Privacy Policy.


The services hereunder are not intended for use by the citizens of the Russian Federation who reside in Russia. If you are a Russian citizen residing in Russia, you are hereby notified that any Personal Data that you input into the services will be solely at your own risk and responsibility. You explicitly agree that we may accumulate your Personal Data and will process this data in the United States and in other countries/regions, and that you will not hold TripIt accountable for any potential nonobservance of the Russian Federation legislation.

The TripIt Services are not directed to users below the age of 16 years, or equivalent minimum age in the relevant jurisdiction. If you are younger than 16, you cannot register with and use the TripIt Services. TripIt does not knowingly collect the Personal Data of children under the age of 13. If you are a parent or guardian and believe TripIt collected information about a child, please contact TripIt as described in this Privacy Policy. TripIt will take steps to delete the information as soon as possible. Given that the TripIt Services are not directed to users under 16 years of age, and in accordance with the disclosure requirements of the CCPA, SAP does not sell the Personal Data of any minors under 16 years of age.

TripIt和其产品、技术和服务s are subject to the export laws of various countries/regions including, without limitation, those of the European Union and its member states, and of the United States of America. You acknowledge that, pursuant to the applicable export laws, trade sanctions, and embargoes issued by these countries/regions, TripIt is required to take measures to prevent entities, organizations, and parties listed on government-issued sanctioned-party lists from accessing certain products, technologies, and services through TripIt’s websites or other delivery channels controlled by TripIt. This may include (i) automated checks of any user registration data as set out herein and other information a user provides about his or her identity against applicable sanctioned-party lists; (ii) regular repetition of such checks whenever a sanctioned-party list is updated or when a user updates his or her information; (iii) blocking of access to TripIt’s services and systems in case of a potential match; and (iv) contacting a user to confirm his or her identity in case of a potential match.

Security and Retention of Personal Data

We maintain data handling and storage practices and procedures that are designed to promote the integrity and confidentiality of the personally identifiable information. No method of transmission over the Internet or method of electronic storage is completely secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We retain your Personal Data for as long as necessary to provide the TripIt Services and for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly. The criteria used to determine retention include (1) the length of time Personal Data is needed to provide the applicable services (such as maintaining and improving the performance of the TripIt Services, enabling system security measures, and maintaining appropriate business and financial records); (2) if users have provided, created, or maintained Personal Data with the expectation that we will retain it until they affirmatively remove it (in which case we may maintain the data until actively deleted by the user); (3) whether the Personal Data is of a sensitive type (a shortened retention time may be appropriate); and (4) whether we are subject to a legal, contractual, or similar obligation to retain the data (such as mandatory data retention laws in the applicable jurisdiction, government orders to preserve data, or data that must be retained for the purposes of litigation).

Updates and Questions

我们可能会不时去更新这个政策t notice to you other than posting the revised policy on the TripIt Services or by providing such notice about or obtaining consent to changes as may be required by applicable law. If we change our Policy, we will post those changes to this Policy and change the effective date above. We encourage you to periodically review this page for the latest information on our privacy practices.

If you have any questions about this Policy, or to file any complaint regarding this policy, please contact us at the following address:

Concur Technologies, Inc.
601 108th Avenue NE, Suite 1000
Bellevue, WA 98004
Attention: Privacy Manager/TripIt
Telephone: (888) 883-8411

TripIt will investigate and attempt to resolve complaints and disputes regarding the collection, use, and disclosure of personal information by referencing the privacy principles stated in this Policy. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, pleasecontactour U.S.-based third-party dispute resolution provider (free of charge).

Translations of this Policy

This Policy is written in the English language. If any translated versions of this Policy conflict with the English language version, the English language version of this Policy shall control.