Privacy Policy

1. Who we are

Belta (“we”, “us”) operates the travel planning service at belta.app. We are the data controller for personal data processed through the service, except where a third party acts as an independent controller (see Payments below).

Privacy enquiries: privacy@belta.app

2. Data we collect

We process the following categories of personal data:

• Account data — email address, authentication identifiers, and subscription plan status, stored via Supabase (EU-hosted PostgreSQL).
• Trip data — destinations, dates, budgets, costs, activities, and sharing settings you enter while planning. This is stored to provide the core service.
• Technical data — essential session cookies required to keep you signed in (see Cookie table below).

We do not sell personal information to third parties.

3. Analytics

With your consent, we use PostHog (EU cloud) to collect product analytics: page views, feature usage, and funnel events. This helps us understand how the product is used and where to improve it.

• Analytics only runs if you click “Accept all” on the cookie banner.
• Data is processed in the EU (PostHog EU cloud).
• We do not sell analytics data.
• You can withdraw consent at any time by clearing site data or contacting us — see Your rights below.

4. Session recordings

With your consent, PostHog may record anonymised session replays of your interactions with Belta. Recordings help us diagnose usability issues and improve the product.

• Session recording only activates when you accept analytics cookies.
• All form inputs are masked by default (budgets, activity names, costs, and other typed content).
• Additional sensitive text can be masked by applying the .ph-mask CSS class in the UI.

5. Payments

Paid subscriptions are processed by Stripe, which acts as an independent data controller for payment card data and billing records. We receive limited billing metadata (subscription status, plan tier) to enable Pro features. See Stripe's privacy policy.

6. Your rights under GDPR

If you are in the UK or EEA, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Erasure — request deletion of your account and associated trip data.
• Portability — request an export of your data in a machine-readable format.
• Withdraw consent — stop analytics and session recording by choosing “Essential only” (clear site data to reset your choice) or contacting us.
• Object / restrict — object to processing or request restriction in certain circumstances.

To exercise any of these rights, email privacy@belta.app. We respond within one month. You may also lodge a complaint with your local supervisory authority.

7. Cookies

8. Contact & DPA requests

For privacy questions, data subject requests, or Data Processing Agreement (DPA) enquiries, contact privacy@belta.app.