Privacy Policy

1. Overview

Designed to Roam (“we,” “us,” or “the Company”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

We collect the following personal data when you apply or create an account:

• First and last name
• Email address
• Phone number
• Travel preferences (budget, regions, travel party type)
• Business stage and goals (provided voluntarily)
• Location information (city/country, provided voluntarily)
• Social media links (provided voluntarily)

We also automatically collect technical data when you use our website:

• IP address
• Browser type and version (user agent)
• Pages visited and actions taken
• Cookies (see Section 4)

3. How We Use Your Data

• To process your application and match you with a travel cohort
• To communicate with you about your membership and upcoming trips
• To process subscription payments via Stripe
• To measure the effectiveness of our advertising (see Section 5)
• To improve our platform and user experience

4. Cookies

We use the following cookies on our website:

• _fbp — Set by Meta (Facebook) to identify your browser for advertising measurement. This is a first-party cookie stored by your browser.
• _fbc — Set by Meta when you click a Facebook/Instagram ad that links to our site. Used to associate your visit with the ad you clicked.
• _ga / _gid — Set by Google Analytics to measure site traffic and usage patterns anonymously.

5. Meta Conversions API (Advertising)

We use the Meta Conversions API to send conversion events (such as application submissions) directly from our server to Meta for advertising measurement and optimization. This helps us understand which ads lead to signups and improve our ad targeting.

When you submit an application, we send the following data to Meta:

• Email address — hashed with SHA-256 before transmission
• Phone number — hashed with SHA-256 before transmission
• IP address — sent as-is (not hashed)
• Browser user agent — sent as-is (not hashed)
• _fbc cookie value — sent as-is (not hashed), if present
• _fbp cookie value — sent as-is (not hashed), if present

Hashing means your email and phone are converted to an irreversible fingerprint before leaving our server — Meta cannot reverse these to get the original values. This data is used solely for advertising measurement and is subject to Meta's Privacy Policy.

6. Data Sharing

We share your data with the following third parties:

• Supabase — our database and authentication provider
• Stripe — payment processing
• Loops.so — transactional email delivery
• Meta (Facebook) — advertising measurement via Conversions API
• Google — analytics (Google Analytics 4, anonymized)
• Mapbox — map rendering for the community map feature

We do not sell your personal data to any third party.

7. Data Retention

We retain your personal data for as long as your account is active. If you cancel your membership, we may retain certain data for up to 12 months for legal and accounting purposes, after which it will be deleted or anonymized.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of advertising tracking by disabling cookies in your browser
• Opt out of Meta ad personalization via Meta's Ad Preferences

To exercise any of these rights, contact us at hello@designedtoroam.io.

9. Security

We use industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and role-based access controls. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Email us at hello@designedtoroam.io.