Privacy Policy

Information we collect

We collect three kinds of information: what you give us, what we record automatically as you use Compass, and what we receive from services you connect.

How we use it

• To run the platform: create your account, build and update journeys, save stays and activities, and keep plans in sync across everyone on a trip.
• To generate plans. Compass uses AI models to turn what you describe into an itinerary, so the details of a journey you are planning are processed to produce it.
• To power location-based features such as nearby activities and travelers near you, when you have allowed location access.
• To coordinate groups and split expenses, which means showing the parts of a shared plan and shared costs to the other people on that trip.
• To communicate with you: service messages, access invitations, replies to your questions, and product updates you can unsubscribe from at any time.
• To keep Compass safe: preventing fraud, abuse, spam and unauthorised access, and enforcing our terms.
• To improve the product by understanding, in aggregate, which parts of Compass are used and where they fail.
• To meet legal, tax and accounting obligations.

The legal basis for using it

Where data protection law requires a legal basis, we rely on: performance of our contract with you, for the features you ask us to provide; your consent, for location access, marketing email and optional integrations, which you can withdraw at any time; our legitimate interests in securing, measuring and improving the platform, balanced against your rights; and compliance with legal obligations.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

• Other travelers, as you direct: people you add to a journey see that shared plan and the expenses logged against it, and anything you publish to the feed is visible according to the audience you choose.
• Service providers who work on our behalf under contract: hosting and infrastructure, analytics, email delivery, error monitoring, AI model providers and payment processing. They may use your information only to provide their service to us.
• Booking partners, when you book a stay or activity through Compass and the details are needed to fulfil that booking.
• Authorities or third parties where we are legally required to, or where it is necessary to protect the rights, safety or property of Compass, our users or the public.
• A successor entity, if Compass is involved in a merger, acquisition or sale of assets. We will tell you before your information moves to a new controller.

AI and your journey data

Compass is built on AI models rather than retrofitted onto search, so the prompts and journey details you provide are sent to model providers to generate your plan.

We use those providers under agreements that restrict them to processing your data on our behalf. We do not sell journey content, and we do not hand it to third parties to train their public models without your consent. Where we use aggregated or de-identified data to improve Compass itself, it is stripped of anything that identifies you.

Cookies and analytics

We use a small number of essential cookies to keep you signed in and to keep the site secure. These cannot be turned off without breaking the platform.

We also use Google Analytics to measure how the site and app are used, in aggregate. It sets cookies and collects device and usage data as described above. You can block cookies in your browser settings or install Google's opt-out browser add-on. Where required, we ask for your consent before any non-essential cookie is set.

How long we keep it

We keep your account information for as long as your account is open. Journey, group and expense data is kept while it is needed for the trips it belongs to and for any settlement still outstanding.

When you delete your account we delete or anonymise your personal information within 30 days, except where we must keep records for legal, tax or fraud-prevention reasons. Residual copies may persist in encrypted backups for a limited period before they roll off.

How we protect it

Data is encrypted in transit and at rest, access to production systems is restricted to the people who need it and logged, and passwords are stored using industry-standard hashing.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant regulator within the timeframes the law requires.

Your rights and choices

Wherever you are, you can ask us to do the following, and we will respond within 30 days:

• Access a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete your account and the data attached to it.
• Export your journeys and travel data in a portable format.
• Object to or restrict certain processing, including profiling used to personalise recommendations.
• Withdraw a consent you previously gave, such as location access or marketing email, without affecting what was done before you withdrew it.

Email hi@compasss.xyz to exercise any of these. If you are in the EEA or UK you also have the right to complain to your local data protection authority. If you are in California, you have the rights described above and we will not discriminate against you for using them.

International transfers

Compass is built and operated remotely, and our providers run infrastructure in several countries, so your information may be processed outside the country you live in. Where information leaves the EEA or UK, we rely on approved transfer mechanisms such as the European Commission's standard contractual clauses, together with the technical protections described above.

Children

Compass is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has given us personal information, email hi@compasss.xyz and we will delete it.

Changes to this policy

We update this policy as the platform changes. The date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you by email or in the app before it takes effect.

Contact us

Questions about this policy, or about anything Compass holds on you, go to hi@compasss.xyz and reach a person, not a queue.