Board owners
We hold your name, email and business name. We use them to sign you in and to show guests who sent the link. We keep them until you delete your account. Paddle takes your payment and holds your card details. We receive only payment status and invoice records, and we keep those for as long as tax law requires.
What a guest types in the check
This is your name, an email if you choose to give one, whether you ticked the box for reminders, each passport's nationality and issue and expiry dates, which passport you travel on, your route and dates, any authorisations you hold with their expiry dates, and any confirmation that you opened the official page for a leg we don't check. We use it only to check you for that trip and, if you ticked the box, to remind you. All of it, name and email included, is deleted 30 days after the trip ends.
Imported guest names and emails
A board owner may import names and emails for guests who may never check. We use them only to match guests and to send that owner's invitations. They are deleted with the board or 30 days after the trip ends, whichever comes first. Imported guests can remove themselves through the link in an invitation or by writing to support.
Opt-out list
When an address opts out of invitations, we keep only a one-way fingerprint of it, not the address itself, so no board can invite that address again. We keep it for as long as it is needed to honour the opt-out. If you ask us to delete it, you could be invited again.
The dated record
For each guest, the board owner's record holds the guest's name, when they checked, which rule versions they were shown, the status they got and any leg they confirmed as not checked here. It holds no passport facts. We keep it for 3 years after the trip ends, for disputes, unless the owner deletes the board or the guest withdraws first. A guest who withdraws appears only as a guest who withdrew.
An invited advisor's email
When a couple invites their advisor, we hold the advisor's email to send that invitation. We keep it until the advisor accepts, or delete it after 30 days.
Error reports
We keep error reports for 30 days to find and fix faults.
Who processes your data
Cloudflare provides hosting and storage. Resend sends email. Sentry monitors errors. Paddle takes payments as merchant of record.
What we never collect or do
We never collect a passport number or a passport image. We do not sell your data, and we do not reuse it for any purpose you did not sign up for.
Deleting your data
A guest can delete their check from their result page, and their name, email, passport facts and route are removed at once. A board owner can delete a board, or their whole account and every board in it. Guest check data is deleted 30 days after the trip ends, and the dated record 3 years after.
Business address
Standard Computing LLC, 5441 S Macadam Ave., Ste. N, Portland, OR 97239, USA.