Privacy Policy

1. Introduction

Roamly, Inc. (“Roamly,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our travel planning platform and related services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (profile photo, travel preferences)
• Trip data (destinations, itineraries, travel dates, notes)
• Communications you send to us (support requests, feedback)

We also automatically collect certain information, including:

• Device information (browser type, operating system)
• Usage data (pages viewed, features used, interactions)
• Log data (IP address, access times, referring URLs)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Generate personalized travel recommendations
• Send you service-related communications
• Respond to your requests and provide customer support
• Analyze usage patterns to improve user experience
• Protect against fraud and unauthorized access

4. Sharing of Information

We do not sell your personal information. We may share your information in the following circumstances:

AI and Machine Learning Providers

To power features like our travel companion, itinerary suggestions, and destination recommendations, we send relevant context (such as your trip details, preferences, and conversation messages) to third-party AI providers, including Google (Gemini) and Anthropic (Claude). These providers process your data solely to generate responses and do not use it to train their models. We only share the minimum data necessary for each request.

Travel and Location Services

To provide place details, maps, directions, flight search, and hotel availability, we share relevant query data with:

• Google Maps and Places API — for location search, place details, photos, reviews, and routing
• Amadeus — for flight and hotel search results
• AviationStack — for flight status and tracking
• Yelp — for restaurant and business recommendations

These services receive search queries and location data, not your account information or personal profile.

Content Discovery

Our Discover feature aggregates travel content from public platforms including YouTube, Instagram, TikTok, and Reddit. We query these platforms using destination and topic keywords, not your personal data.

Other Sharing

• Other users — when you choose to share trips, invite collaborators, or publish itineraries
• Email providers — we use Resend to deliver transactional emails such as trip invitations
• Authentication — if you sign in with Google, we receive your name and email from Google OAuth; we do not share your Roamly data back to Google
• Law enforcement — when required by law, court order, or to protect our rights and the safety of our users

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time.

7. Your Privacy Choices

Depending on where you live, you may have specific rights under privacy laws such as the California Consumer Privacy Act (CCPA), the Colorado Privacy Act, the Virginia Consumer Data Protection Act, or the EU/UK General Data Protection Regulation (GDPR).

Your Rights

• Right to Know / Access: Request a copy of the personal data we have collected about you, including the categories of data, sources, purposes, and third parties with whom we share it
• Right to Correct: Request that we correct inaccurate personal data
• Right to Delete: Request that we delete your personal data, subject to certain legal exceptions
• Right to Portability: Receive your data in a structured, machine-readable format (e.g., JSON or CSV export of your trips and account data)
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights

Categories of Personal Information

Under CCPA, the categories of personal information we collect include: identifiers (name, email), internet activity (usage data, browsing history within our Service), geolocation data (trip destinations you add), and inferences (travel preferences derived from your activity).

How to Submit a Request

To exercise any of these rights, email us at privacy@roamly.io with the subject line “Privacy Request.” Please include your account email address so we can verify your identity. You may also designate an authorized agent to submit a request on your behalf.

We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need additional time, we will notify you of the extension and the reason.

Managing Your Preferences

• Marketing emails: Unsubscribe using the link at the bottom of any marketing email, or update your preferences in your account settings
• Account deletion: You can delete your account from your profile settings page. This will permanently remove your trips, conversations, and personal data within 30 days
• Cookie preferences: See Section 8 below for cookie management options

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Service, remember your preferences, and understand how you use Roamly. Below are the categories of cookies we use:

Managing Cookies

Most browsers allow you to block or delete cookies through their settings. Note that blocking essential cookies may prevent you from using the Service. You can typically find cookie controls under “Privacy” or “Security” in your browser’s settings menu.

We do not use cookies for cross-site tracking or targeted advertising.

9. Children’s Privacy

Roamly is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@roamly.io.