Roamzy

Privacy Policy

Last updated: 2026-07-18

This is a starting draft. Have it reviewed by a lawyer before public launch and replace […] placeholders with your controller details.

1. Who we are

The controller responsible for the processing of your personal data on Roamzy is [operator name, address from Impressum]. Contact: [contact email].

2. What we collect

  • Account data: email, name (if you provide it), authentication identifiers.
  • Trip content: trips, itinerary items, uploaded documents, notes, comments and collaboration activity — created by you.
  • AI usage: the prompts you send to the assistant, the model's responses, and aggregated usage counters (for cost and abuse protection).
  • Technical data: IP address, browser, and error logs, kept only as long as needed for security and debugging.

3. Why we process it (legal basis)

  • Contract performance (Art. 6(1)(b) GDPR) — to deliver the service.
  • Legitimate interests (Art. 6(1)(f) GDPR) — security, abuse prevention, product improvement.
  • Consent (Art. 6(1)(a) GDPR) — for non-essential cookies / analytics, if enabled.

4. Processors we use

  • Supabase (database, auth, storage) — data processing agreement in place.
  • Lovable Cloud / hosting provider.
  • Google Maps Platform — when you use maps or place search.
  • AI model providers (via the Lovable AI gateway) — prompts are sent for inference.

5. Retention

We keep your account and trip data until you delete it or your account. Backups are rotated regularly. AI usage logs are retained for up to 12 months for security and billing.

6. Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interests. To exercise any of these, email [contact email]. You may also lodge a complaint with your supervisory authority.

7. Cookies

Roamzy uses only essential cookies required to sign you in and maintain your session. We do not currently use advertising or third-party analytics cookies. If that changes, we will ask for your consent first.

8. Contact

Privacy questions: [contact email].