Privacy Policy

1. Who We Are

Departo (“we”, “us”, “our”) is the operator of departo.world — a platform that generates professional travel documents (onward flight tickets, hotel confirmations, and travel itineraries) for planning and administrative purposes. Our contact email is support@departo.world.

2. Data We Collect

When you use Departo, we may collect:

• Account data — email address, full name, and phone number when you register or sign in (including via Google or Facebook OAuth).
• Document data — passenger names, travel dates, airport/city names, and other details you enter to generate a document.
• Payment data — payment is processed entirely by Stripe. We receive a confirmation of payment and a reference ID; we never see or store your full card number, CVC, or expiry date.
• Usage logs — IP address, browser type, pages visited, and timestamps, collected automatically by our hosting infrastructure (Vercel) for security and performance purposes.
• Contact messages — name, email, subject, and message content when you submit our contact form.

3. How We Use Your Data

• To generate and deliver the travel documents you requested.
• To send you a PDF via email upon successful payment.
• To manage your account and enable you to access past documents.
• To process refund requests and respond to support enquiries.
• To detect and prevent fraud and abuse of our platform.
• To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use it for advertising or profiling purposes.

4. Third-Party Services

We rely on the following trusted third parties to operate our service:

• Stripe (stripe.com) — secure payment processing. Your card details are handled exclusively by Stripe. See Stripe’s privacy policy at stripe.com/privacy.
• Supabase (supabase.com) — authentication, user database, and document records. Data is stored in EU-region servers. See supabase.com/privacy.
• Vercel (vercel.com) — website hosting and serverless functions. Request logs (IP, headers) may be retained by Vercel for up to 30 days. See vercel.com/legal/privacy-policy.
• Resend (resend.com) — transactional email delivery (document PDFs, confirmation emails).

5. Data Retention

• Accounts — your account data is retained for as long as your account remains active. You may request deletion at any time (see Section 6).
• Generated documents — document records and associated passenger data are retained for 90 days after generation, after which they are permanently deleted.
• Payment records — Stripe retains payment records in accordance with their own retention policies and applicable financial regulations.
• Contact messages — messages submitted via our contact form are retained for up to 12 months for support purposes.

6. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, please email us at support@departo.world with the subject line “Data Request”. We will respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request that your account and associated data be permanently deleted.
• Portability — request your data in a machine-readable format.

7. Cookies

We use session cookies that are strictly necessary to keep you logged in. We do not use tracking cookies, advertising cookies, or analytics cookies. See our Cookie Policy for full details.

8. Security

We take reasonable technical and organizational measures to protect your data, including HTTPS encryption in transit, database-level access controls, and row-level security policies. No system is completely secure, so please contact us immediately if you believe there has been any unauthorized access to your account.

9. Children

Departo is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of Departo after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

Email: support@departo.world
Response time: We respond within 24 hours on business days.