Legal
Privacy Policy
Last updated: March 23, 2026
1. Information We Collect
We collect the following types of information to provide and improve the PointPath service:
- Account information — your email address, name, and authentication credentials.
- Point balances — the credit card programs and point balances you enter into the platform.
- Search history — routes, dates, and cabin classes you search for within the platform.
- Payment information — handled entirely by Stripe. We do not store your credit card numbers or bank details on our servers.
- Usage data — basic analytics such as pages visited and feature usage to help us improve the product.
2. How We Use Your Information
We use the information we collect to:
- Provide the PointPath service, including generating personalized transfer recommendations based on your point balances.
- Optimize search results and improve the accuracy of our recommendations over time.
- Process your subscription payments and manage your account.
- Send transactional emails related to your account and subscription.
3. Third-Party Services
We rely on the following third-party services to operate the platform:
Stripe
Payment processing and subscription billing
Authentication Provider
Secure login and user management
Cloud Database
Encrypted data hosting and storage
Flight Data Partners
Award flight availability data
Each of these providers has their own privacy policies governing how they handle your data. We encourage you to review them.
4. Data Sharing and Sales
We do not sell your personal data. We do not share your information with third parties for their marketing purposes.
We may share data with the third-party services listed above solely to provide the PointPath service. We may also disclose information if required by law or to protect our legal rights.
5. Data Retention
We retain your account data and search history for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required by law to retain it.
6. Security
We implement industry-standard security measures to protect your data, including encryption in transit and at rest. Our authentication and payment providers maintain SOC 2 compliance.
7. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can also export your data or delete your account through your account settings.
8. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or through the platform. Your continued use of PointPath after changes take effect constitutes acceptance of the updated policy.
9. Contact
If you have questions about this privacy policy or how we handle your data, please reach out at help@pointpath.io.
PointPath is operated by Convergence Engineering.