Privacy Notice

Depart operates Depart and is the data controller for the personal data described here. This page is maintained by us to explain what we collect, why, and what you can ask us to do about it.

What we collect and why

• Account data — email address, display name and login credentials (or your Google account identifier if you sign in with Google). Used to create and secure your account. Legal basis: performance of our contract with you.
• Travel preferences — home airport, budget, dates, climate and interests, places you've been and want to go. Used to generate your recommendations. Legal basis: performance of our contract.
• Generated content — the trip recommendations and saved trips associated with your account, so you can return to them.
• Subscription and billing records — plan, status, renewal dates and payment outcomes. Card details are never seen or stored by us. Legal basis: contract and legal obligation.
• Technical and usage data — IP address, device and browser information, and error logs. Used for security, fraud prevention and improving the service. Legal basis: our legitimate interest in running a secure, working product.
• Support messages — anything you send us, used to answer you.

Who we share it with

• Paddle, our reseller and Merchant of Record, for the sale of subscriptions, payments, invoicing, subscription management and tax compliance.
• Service providers that host our application and database, deliver email, and provide the AI models that draft recommendations from your preferences.
• Professional advisers such as legal and accounting, where necessary.
• Authorities, where we are legally required to disclose.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Retention

We keep account and preference data for as long as your account is active, and delete or anonymise it within 90 days of account closure. Billing records are retained for as long as tax and accounting law requires.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database rules that restrict each account to its own data.

Cookies

Depart uses essential cookies and local storage to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. Contact support@depart.app and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.