Privacy Notice

This is a placeholder notice for OUTSTAY's Phase 1 build, pending legal review — it describes what the system actually does today, not final legal copy.

What we collect and why

Name, email, phone, and password (hashed) — to create and secure your account.
Saved traveler details (passport number, date of birth, nationality) — to pre-fill your bookings; passport numbers are encrypted.
Search queries (routes, dates, cities) — to return and briefly cache your search results.
Booking and payment records — to fulfil your booking, support you if something goes wrong, and meet tax/audit requirements.

We never collect or store your card number, CVV, or expiry — card entry happens only inside our payment provider's own secure fields.

How long we keep it

Search results and temporary holds are deleted within days. Saved traveler details are kept until you delete your account. Booking and payment records are kept as required for support and legal/audit purposes.

Cookies & analytics

We use first-party analytics to understand how you search, browse, and book — page views, clicks, form activity, and scroll behavior on this site. Nothing is sent until you accept the cookie banner, and you can change your mind at any time below.

Your rights

You have the right to access, correct, or request deletion of your personal data. Self-service tools for this are not available yet in this build — contact support in the meantime.