Privacy Policy

1. Scope of this policy

2. Data we may collect

• Identity and contact data, such as name, email, country, language, role, or company, when you fill out forms, subscribe to updates, or contact us.
• Account data, such as credentials, access history, language preferences, and security settings, when authenticated areas are available.
• Travel planning and finance data, such as destinations, dates, budgets, installment purchases, savings goals, reminders, and notes, when you use product features.
• Technical and usage data, such as IP address, device type, browser, operating system, pages viewed, traffic source, cookie identifiers, and navigation events.
• Transactional data, such as subscription plan, billing status, charges, currency, invoices, and metadata returned by payment processors, when paid services are enabled.

3. How we use data

• Create and manage accounts, authenticate logins, and remember preferences.
• Run travel planning, financial projection, alert, and reporting features.
• Respond to messages, support requests, business inquiries, and communications you asked for.
• Measure website performance, fix errors, and prevent abuse, fraud, malicious scraping, and security incidents.
• Comply with legal, regulatory, tax, and recordkeeping obligations and respond to valid authority requests.
• Send updates, invitations, and promotional content only on a lawful basis and with opt-out options where required.

4. Legal bases for processing

• Contract performance or pre-contractual steps, for example to create an account, provide the service, or process a subscription.
• Consent, for example for newsletters, certain cookies, and opt-in promotional communications.
• Legitimate interests, for example for security, abuse prevention, product improvement, and aggregated analytics consistent with user expectations.
• Compliance with legal or regulatory obligations, including record retention and responses to competent authorities.
• Establishment, exercise, or defense of legal claims in administrative, arbitration, or court proceedings.

5. Data sharing

• Infrastructure, hosting, analytics, monitoring, authentication, email, customer support, and workflow vendors.
• Billing and payment partners when you subscribe to a paid plan or complete a transaction.
• Providers helping with security, fraud prevention, audits, legal support, and compliance.
• Public authorities, courts, and regulators when there is a valid legal obligation, lawful request, or need to defend rights.
• Buyers, investors, or successors in a corporate transaction, subject to confidentiality and applicable law.

6. International transfers

7. Data retention

• Account and product data are generally kept while the account remains active and for a reasonable additional period for backup, auditing, and fraud prevention.
• Tax, financial, and security records may be kept longer when required by law or justified by clearly identified legitimate interests.
• Deletion requests are reviewed case by case, taking into account mandatory retention periods and the need to defend legal rights.

8. Information security

9. Your rights

• Confirmation that we process your data and access to that data.
• Correction of incomplete, inaccurate, or outdated information.
• Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
• Portability, where technically feasible and subject to trade secret protections.
• Information about data sharing and about the option to withhold consent.
• Withdrawal of consent, objection to certain processing, and review of automated decisions where applicable.
• The right to lodge a complaint with the ANPD or the competent authority where you live.

To exercise these rights, email contact@compassoonline.app. We may ask for additional information to confirm your identity before completing the request.

10. Children, updates, and contact