Privacy Policy

Cabo (“we”, “us”, or “our”) operates a collaborative trip planning platform at getcabo.app. This Privacy Policy explains what personal information we collect, how we use it, and your rights in relation to it.

By creating an account or using Cabo, you agree to the collection and use of information in accordance with this policy.

Account information. When you sign up, we collect your email address and, if you use Google OAuth, your Google profile name and profile photo.

Trip data. We store the trips you create, including destination names, locations (latitude/longitude), travel dates, itinerary notes, stop descriptions, and any annotations you add to the map canvas.

Collaborative data. We store chat messages you send within a trip, poll votes, and real-time cursor positions while you are active in a shared trip.

Usage data. We collect log data including your IP address, browser type, pages visited, and actions taken within the app. This data is used to diagnose errors, improve performance, and understand how the product is used.

Cookies and sessions. We use cookies to maintain your authenticated session. We do not use third-party advertising cookies.

To provide the service. Your account information and trip data are used to operate Cabo — creating and displaying your trips, enabling collaboration with invited members, and personalising your experience.

AI-powered features. When you use Cabo’s AI trip assistant, your trip context (destinations, dates, stops) is sent to Anthropic’s API to generate suggestions. Anthropic’s privacy policy governs their handling of this data.

Photo search. When you search for destination photos, your query is sent to the Pexels API. Pexels’ privacy policy governs their handling of search queries.

Product improvement. Aggregated, anonymised usage data may be used to improve Cabo’s features and performance.

Communications. We may send you transactional emails (account confirmation, password reset, trip invitations). We will not send you marketing emails without your explicit consent.

Cabo relies on the following third-party services to operate:

• Supabase — database, authentication, and real-time infrastructure. Data is stored in the Asia-Pacific (Singapore) region.
• Vercel — hosting and serverless functions. Deployed to global edge infrastructure.
• Google APIs — Google OAuth for sign-in, and Google Maps APIs for routing and geocoding.
• Anthropic AI — large language model API powering the AI trip assistant.
• Pexels — stock photography API for destination images.

Each service operates under its own privacy policy. We recommend reviewing them if you have concerns about how your data is handled downstream.

Your data is stored on Supabase servers located in Singapore (ap-southeast-1). We use Row Level Security (RLS) policies to ensure that trip data is only accessible to authorised users. Connections to Cabo are encrypted via HTTPS/TLS.

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

You have the following rights regarding your personal data:

• Access. You may request a copy of the personal data we hold about you.
• Correction. You may update your account information at any time from your profile settings.
• Deletion. You may request deletion of your account and all associated data by contacting us at the email below. Trip data shared with other collaborators may be retained in their trip history.
• Export. You may request an export of your trip data in a machine-readable format.
• Objection. You may object to certain processing of your data. We will respond within 30 days.

To exercise any of these rights, contact us at hello@getcabo.app.

Cabo uses strictly necessary cookies to keep you logged in across sessions. These cookies are essential to the service and cannot be disabled without logging out.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

Cabo is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you believe this has occurred, please contact us at hello@getcabo.app.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you via email or an in-app notice. Your continued use of Cabo after changes take effect constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us at:

Email: hello@getcabo.app

You may also review our Terms & Conditions.