Privacy Policy

Last updated: 23 October 2026

This policy explains what personal data TripleWin collects, why, who we share it with and what you can do about it. It covers the website triplewin.am, the TripleWin mobile app and the TripleWin connector for AI assistants such as Claude.

1. Who we are

TripleWin is operated by "TripleWin" LLC, Yerevan, Armenia ("TripleWin", "we", "us"). We are responsible for the personal data described in this policy.

Contact: info@triplewin.am, +374 98 921 551.

2. What we collect

Data you give us

• Account: first and last name, email address, phone number, city, date of birth and a password (stored only as a secure hash). We ask for your date of birth to check that you are 18 or older.
• Profile: if you choose to add them, a profile photo and links to your Instagram and LinkedIn profiles. Our team may also record your profession and add tags to your profile.
• Google sign-in: if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.
• Bids and bookings: destination, dates, number of guests and children's ages, room type, breakfast and amenity preferences, the price you offer, and the offers and bookings that follow.
• Reviews: the reviews you write about hotels, and the reviews hotels write about you as a guest after a stay.
• Payments: card payments are made on the payment page of our bank's card processing service. We receive the payment result and amount, not your full card number.
• Messages: what you send us through the contact form or by email.

Data collected automatically

• Technical data: IP address, browser and device type, pages visited and server logs, used to run, secure and fix the service.
• Cookies: a sign-in cookie that keeps you logged in, and cookies that remember your language. These are needed for the site to work.
• Analytics and advertising: we use Google Analytics to understand how the site is used and the Meta Pixel to measure our advertising. They set their own cookies and receive data about your visit, such as the pages you view.

3. How we use it

• To create and run your account and sign you in.
• To send your bids to hotels, show you their offers and manage the bookings you accept.
• To process payments and keep the records the law requires.
• To email you about your bids, offers, bookings and account (for example, confirming your email or resetting your password).
• To answer your messages and support requests.
• To keep the service secure, prevent fraud and abuse, and improve it.

We use your data because it is needed to provide the service you asked for, to meet legal obligations, for our legitimate interest in running and improving TripleWin, or with your consent where it is required (for example, analytics and advertising cookies).

4. Who we share it with

• Hotels. Hotels in the destination you choose receive the details of your bid (dates, guests, room, preferences and price) so they can respond. With it they see a short guest profile: your rating from earlier hotels' reviews, your profession and your profile tags. They do not see your name or contact details at this stage. When you accept an offer and book, that hotel also sees your name, age, email address and phone number, and whether your email address is verified, so it can prepare and manage your stay.
• Service providers who process data for us under contract: Microsoft Azure (hosting, database and file storage), Mailgun (sending email), Google (sign-in, analytics and reCAPTCHA spam protection on our forms), Meta (advertising measurement) and our bank's card processing service (payments).
• AI assistants you connect, as described in section 5.
• Authorities, when the law requires it.

We do not sell your personal data.

5. AI assistants (Claude)

You can use TripleWin from an AI assistant such as Claude through our connector at https://triplewin.am/api/mcp. See TripleWin for AI assistants for how it works.

• Without signing in, the assistant can read public information: what TripleWin is, the destinations you can bid for and our blog. We do not receive any personal data from you for this.
• When you connect your account, you sign in on triplewin.am itself and approve the connection. The assistant never sees your password. It receives a token that lets it act for your account in only these ways: get price guidance for a bid, prepare a bid and place a bid you have confirmed in the chat. It cannot see or change your profile, payments or other bookings, and only traveller accounts can be connected.
• What we receive from the assistant is the bid details it sends (destination, dates, guests, room and price) and technical data about the request. We store a bid placed this way like any other bid on your account.
• What the assistant receives from us is the tool results: destination information, the smallest bid worth sending and confirmation of the bids you place. Hotel names and listed prices are never sent.
• Your conversation with the assistant is handled by its provider (for Claude, Anthropic) under that provider's own privacy policy. We do not receive your chat history.
• Tokens last 1 hour and are renewed for up to 30 days of inactivity. You can end the connection at any time by removing TripleWin from your assistant's connectors, changing your password or deleting your account.

6. How long we keep it

We keep your account data for as long as your account is open. When you delete your account, it is closed at once: you can no longer sign in, and you are signed out everywhere, including the mobile app and any AI assistant you connected. Your profile and the bids, bookings, payments and reviews linked to it are kept, marked as deleted, so that bookings and payments can be accounted for and disputes resolved. You can ask us to erase anything we are not required to keep (see section 7).

7. Your rights

You can ask us to:

• give you a copy of your personal data;
• correct data that is wrong;
• delete your data (you can also delete your account yourself from your profile page);
• stop or limit some uses of your data, and withdraw consent you have given.

Email info@triplewin.am from the address on your account. We answer within 30 days. You can also complain to the data protection authority in your country; in Armenia, the Personal Data Protection Agency.

8. Security

Data is sent over encrypted connections (HTTPS) and stored with Microsoft Azure. Passwords are stored as secure hashes, access to data is limited to people who need it, and staff accounts are protected separately. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

9. International transfers

Some of our service providers process data outside Armenia, including in the European Union and the United States. We use providers that protect data with appropriate safeguards.

10. Children

TripleWin is for adults. You must be 18 or older to create an account or place a bid.

11. Changes

We may update this policy. The date at the top shows the latest version, and we will tell you by email or on the site before an important change takes effect.

12. Contact

Questions about this policy or your data: info@triplewin.am, +374 98 921 551, or our contact page.