Tripadvisor
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Tripadvisor collects travel, location, and browsing data and shares it for ads, with a Do Not Sell opt-out.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and booking info, browsing history, device IDs, photos, and sometimes location or ID numbers.
Read the exact line
Privacy policy
“This may include information related to your browsing history (including pages you have visited, content reviewed, and apps reviewed), search history, and access to and use of our Services”
Training
They personalize the site, send offers, and use your activity to customize ads on and off Tripadvisor.
Read the exact line
Privacy policy
“Tailor your experience, including by making inferences about your interests and preferences based on your activity and customize the ads shown to you both on and off our website”
Sharing
Service providers, group companies, business partners, social networks, and ad networks may get your data.
Read the exact line
Privacy policy
“We may “sell” or “share” the following categories of personal information to business partners, social media websites, advertising networks, data aggregators, and other third parties”
Kept
They keep it while your account is open and as long as they say they need it for legal or business reasons.
Read the exact line
Privacy policy
“We will retain copies of your information for as long as you maintain your account or as necessary in connection with the purposes set out in the Statement, unless applicable law requires a longer retention period.”
Controls
You can close your account in Member Profile and opt out of sale/sharing on the homepage or with GPC.
Read the exact line
Privacy policy
“If you would like to opt out of the sale or sharing of your personal information, you may do so by clicking on the “Do Not Sell or Share My Personal Information” link on our homepage/app.”
Fine print
Privacy updates may be posted online; the widget terms are as-is and you must cover their legal costs.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale or sharing
“Do Not Sell or Share My Personal Information” link on the homepage/app, or enable Global Privacy Control
Close your account
Member Profile section on the website or app
Request access or deletion
Dedicated privacy portal linked from Section 11 of the Privacy and Cookies Statement
Adjust cookies
“Cookie consent” link at the bottom of every page
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They treat some of your data as sold or shared with advertisers and data companies.
Read the exact line
Privacy policy
“We may “sell” or “share” the following categories of personal information to business partners, social media websites, advertising networks, data aggregators, and other third parties”
For example, your browsing and booking patterns can be used so other sites show you hotel ads.
Third-party ad companies get information about what you look at so they can target you.
Read the exact line
Privacy policy
“We sometimes collect and share information about your interests with advertising networks and data aggregators.”
For example, looking at beach resorts can lead to cruise ads on other websites.
If location is on, they can collect where your phone is, not just a city.
Read the exact line
Privacy policy
“Precise Geolocation Data: This may include the location of your Device when you have agreed to share your location information via privacy settings on your Device”
For example, opening the app near a restaurant could record that exact spot.
Sensitive details you type in a profile or form can be stored.
Read the exact line
Privacy policy
“We may also collect race, ethnicity, sexual orientation, or religion where you voluntarily disclose it to us, including, for example, in the context of diversity and inclusivity disclosures you choose to make.”
For example, if you mention your religion in a review or survey, they may keep that.
Phone calls with support can be recorded and kept.
Read the exact line
Privacy policy
“In addition, we collect communications when you contact our customer service team, including inbound and outbound calls.”
For example, calling about a booking problem can mean the whole call is stored.
Closing your account does not wipe everything they have on you.
Read the exact line
Privacy policy
“We may retain some information associated with your account (including past transactions) for internal purposes including backups, fraud prevention, dispute resolution, investigations, our own , and legal compliance”
For example, old hotel bookings may stay in their systems after you delete the profile.
They say they will try to tell you about big privacy changes, but posting on the site may be enough.
Read the exact line
Privacy policy
“If we believe any changes are material, we will let you know by doing one or more of the following: sending you a communication about the changes, placing a notice on the website and/or posting an updated Statement on the website.”
For example, a new ad-sharing practice might appear as a date change at the top of the policy.
They describe basic security like encryption and firewalls, but they do not promise no breaches.
Read the exact line
Privacy policy
“We use encryption when transmitting your information between your system and ours, and between our system and those of the parties with whom we share information.”
For example, payment details are supposed to be encrypted in transit.
Words to know
Legal words from the lines above, in plain English.
- profiling
- Building a picture of who you are, what you like and what you might do next from your data. For example, an app may guess your income, health or politics from what you watch and tap.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- data broker
- A company that buys, collects and resells information about people, usually without ever meeting them. For example, your phone number and shopping habits can be sold as part of a list to a company you never heard of.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
How we got here · grade F · score 33/100 · 13 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect more than bookings: browsing history, device and ad IDs, precise location if enabled, photos, and sometimes passport or other ID numbers.
Does it record your voice, face or body, and what happens to that?
They collect photos, videos, and customer-service calls, including inbound and outbound calls, and do not say those recordings are deleted after the call.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They share interests and identifiers with advertising networks, data aggregators, LiveRamp, and The Trade Desk for targeted ads.
Do they sell or share your data, and can you opt out?
They say they may sell or share identifiers, browsing, commercial data, and inferences, and you can opt out via a homepage link or GPC.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can close an account in Member Profile and request deletion via a privacy portal, but they may keep transaction and other data for legal and business reasons.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They draw inferences about your interests and preferences from activity; they do not describe viewing or turning that profile off.
Do they commit to basic security, and have they leaked data?
They describe encryption in transit, access limits, firewalls, and intrusion detection, and say they cannot guarantee security.
Is there a real age gate, and are teens protected?
Services are not intended for children 13 or under (or local consent age); they rely on not collecting kids’ data except with a parent for a booking.
Will they tell you when the rules change, and is the policy specific?
The privacy statement is dated July 7, 2025. For material changes they may email, post a notice, or just update the page.
Can they close your account without warning, and can you get your data out first?
Widget terms let Tripadvisor end access at any time with or without reason. The privacy policy lets you close your own member account.
If something goes wrong, who pays?
Widget terms are as-is with a broad damage waiver, and you must defend and indemnify Tripadvisor for claims tied to your use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 9,862 words at a college graduate level (Flesch reading ease 31.6); the terms are 1,785 words at a professional or legal expert level.
