Privacy Policy
Last updated: February 25, 2026
1. Information We Collect
When you use LFG, we collect the following types of information:
- Account Information: Name, email address, profile photo, and travel preferences you provide during registration.
- Trip Data: Destinations, itineraries, dates, and content you create or share within the platform.
- Usage Data: Pages visited, features used, and interactions with other users to improve our services.
- Payment Information: Billing details processed securely through Stripe. We do not store full credit card numbers.
- Location Data: Approximate location when you use map features, with your permission.
2. How We Use Your Information
- To provide and maintain the LFG travel coordination platform.
- To personalize your experience with relevant trip suggestions and content.
- To facilitate communication between trip members and advisors.
- To process payments and manage subscriptions.
- To send service-related notifications and, with your consent, marketing communications.
- To detect and prevent fraud, abuse, and security incidents.
3. Data Sharing
We do not sell your personal data. We share information only in the following circumstances:
- With Trip Members: Profile information and trip details are shared with members of your trips.
- Service Providers: We use trusted third-party services including Supabase (database), Stripe (payments), Google Maps (mapping), and Vercel (hosting).
- Legal Requirements: When required by law, regulation, or legal process.
- With Your Consent: When you explicitly agree to share data with partners or advisors.
4. Data Security
We implement industry-standard security measures including encryption in transit (TLS), row-level security policies on our database, secure authentication through Supabase Auth, and regular security audits. Payment data is handled exclusively by Stripe, a PCI DSS Level 1 certified processor.
5. Your Rights
You have the right to:
- Access and download your personal data.
- Correct inaccurate information in your profile.
- Delete your account and associated data.
- Opt out of marketing communications at any time.
- Withdraw consent for data processing.
- Lodge a complaint with a data protection authority.
6. Cookies and Analytics
We use Vercel Analytics and Google Analytics to understand how users interact with our platform. These tools collect anonymized usage data. You can opt out of analytics tracking through your browser settings.
7. Data Retention
We retain your data for as long as your account is active. After account deletion, we remove personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.
8. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our platform. Continued use after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at privacy@lfgetaway.com.