Privacy Policy

Faro is the data controller for the information described here. For any privacy request, contact us at privacy@example.com.

• Account data — your email, name, password (hashed, never stored in plain text), and optional profile details (city, country, nationality, preferred languages, travel style, currency, and profile photo).
• Content you create — trips, destinations, budgets, to-dos, checklists, wishlists, reviews, and uploaded images.
• Usage analytics — events about how the app is used (pages viewed, features clicked), linked to your account when you're signed in. This product analytics is collected only with your consent. We do not capture the text you type or your input values.
• Request counts — our servers count how many API requests your account makes each hour, so we can size and operate the service. This runs without consent on our legitimate interest, is a count only (no page, feature, or content details), and is stored on our servers — nothing is stored on or read from your device.
• Error logs — technical details when something fails (error message, stack trace, the page it happened on), linked to your account when you're signed in, so we can fix it. We do not capture the text you type or your input values.

• To provide the service (performance of a contract) — your account and content.
• To keep it working and secure (legitimate interest) — error logs, rate limiting, fraud/abuse prevention, and per-account request counts so we can measure load and size the service. You can object to processing based on legitimate interest at any time by emailing us at privacy@example.com.
• To improve the product (consent) — usage analytics. You can withdraw consent at any time.
• To process payments (performance of a contract) — if you subscribe to a paid plan.

We keep this short because we use very little:

• Necessary — a sign-in token and a language preference. Required for the app to function; no consent needed.
• Analytics — a stored record of your consent choice.No product analytics run until you opt in, and we honor your browser's Global Privacy Control / Do Not Track signal as an opt-out.

• Account and content: until you delete them or close your account.
• Error logs and analytics events: automatically deleted after 90 days.
• Request counts: automatically deleted after 30 days.
• Payment records: as required by tax and accounting law.
• Backups: database backups are kept on a rolling 10-day cycle and then overwritten.

We share data only with the processors needed to run the service:

• Stripe — payment processing.
• Railway — application hosting.
• MongoDB Atlas — database hosting; this is where your account and trip data is stored.
• Amazon Web Services (S3 & CloudFront) — image storage and delivery.
• Resend — transactional email (e.g. password resets).
• Unsplash — when you search their image library.
• Open-Meteo — weather data for your destinations.
• OpenAI — when you use AI suggestions, the destination name and any extra instructions you type are sent to generate ideas.
• RapidAPI (Rakuten) — routes flight-status lookups to the AeroDataBox data service; the flight number you enter passes through RapidAPI.
• Mapbox — place names, to look up map coordinates for your destinations.

Advertising & affiliate partners. Some destination pages show sponsored or affiliate links. We don't share your data with them in the background — only when you click a link are you taken to that partner, and the link may include the destination name so the partner can show relevant results. Current partners:

• Booking.com — accommodation.
• GetYourGuide — tours, tickets & activities.
• TheFork — restaurants.
• Omio — transport.

Once you follow one of these links, that partner's own privacy policy governs what it collects.

We never sell your personal data. Some processors may be located outside your country; where that happens, transfers are covered by appropriate safeguards.

You can, at any time:

• Access & export — download a copy of your data from your profile.
• Rectify — edit your profile and content directly.
• Erase — delete your account. This removes your data from the live service immediately; any copies in backups are gone within 10 days.
• Withdraw consent — turn off product analytics from your profile.
• Object or complain — contact us, or your local data protection authority.

Manage most of this from your profile.

Faro is not directed at children under 16, and we do not knowingly collect their data.

If we make material changes, we'll update the date above and ask for your consent again where required.

Questions or requests: privacy@example.com.