Privacy Policy

Last Updated: December 14, 2024

Finding Ur Way ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered travel planning service.

1. Information We Collect

Information You Provide

• Account Information: Email address, name, and password (encrypted)
• Travel Preferences: Destinations, budget, travel dates, and interests you share with our AI assistant
• Payment Information: Processed securely through Stripe (we don't store card details)
• Chat History: Your conversations with our AI travel assistant

Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies to keep you logged in and remember preferences

2. How We Use Your Information

We use your information to:

• Provide personalized travel recommendations through our AI assistant
• Process your premium subscription payments
• Improve our AI models and service quality
• Send you important updates about your account or service changes
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Third-Party Services

AI Processing

We use Groq API to power our AI travel assistant. Your chat messages are sent to Groq for processing but are not used to train their models.

Payment Processing

Payments are processed by Stripe. We don't store your credit card information. Stripe's privacy policy governs their handling of payment data.

Database Storage

User data is stored securely in Supabase (hosted PostgreSQL database) with encryption at rest and in transit.

Affiliate Partners

We provide links to:

• GetYourGuide (tours and activities)
• Booking.com (accommodation)
• Trip.com (travel packages)

When you click these links, you'll be directed to their websites where their privacy policies apply. We may earn a commission at no extra cost to you.

4. Data Sharing and Disclosure

We do NOT sell your personal information.

We may share your information only in these limited circumstances:

• Service Providers: Groq (AI), Stripe (payments), Supabase (database) - only to provide our services
• Legal Requirements: If required by law, court order, or government request
• Business Transfers: In case of merger, acquisition, or sale of assets
• With Your Consent: Any other sharing will require your explicit permission

5. Data Security

We implement industry-standard security measures:

• Passwords are encrypted using SHA-256 hashing
• HTTPS encryption for all data transmission
• Secure database with encryption at rest
• Regular security updates and monitoring
• Limited employee access to personal data

Note: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-Out: Unsubscribe from marketing emails
• Data Portability: Receive your data in a machine-readable format

To exercise these rights, contact us at the email below.

7. Data Retention

• Account Data: Retained while your account is active
• Chat History: Stored for 12 months unless you delete it earlier
• Payment Records: Retained for 7 years for tax and legal compliance
• After Deletion: Most data deleted within 30 days; some may be retained in backups for up to 90 days

8. Cookies and Tracking

We use essential cookies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze site usage (anonymized)

You can disable cookies in your browser settings, but this may affect functionality.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Email notification to registered users
• Prominent notice on our website
• Updating the "Last Updated" date above

12. GDPR Compliance (EU Users)

If you're in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to object to data processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Data protection officer contact information (upon request)

13. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or shared
• Say no to the sale of personal information
• Access their personal information
• Request deletion of personal information
• Not be discriminated against for exercising these rights

By using Finding Ur Way, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.