Legal

Privacy Policy

Last updated: March 23, 2026

1. Information We Collect

We collect the following types of information to provide and improve the PointPath service:

  • Account information — your email address, name, and authentication credentials.
  • Point balances — the credit card programs and point balances you enter into the platform.
  • Search history — routes, dates, and cabin classes you search for within the platform.
  • Payment information — handled entirely by Stripe. We do not store your credit card numbers or bank details on our servers.
  • Usage data — basic analytics such as pages visited and feature usage to help us improve the product.

2. How We Use Your Information

We use the information we collect to:

  • Provide the PointPath service, including generating personalized transfer recommendations based on your point balances.
  • Optimize search results and improve the accuracy of our recommendations over time.
  • Process your subscription payments and manage your account.
  • Send transactional emails related to your account and subscription.

3. Third-Party Services

We rely on the following third-party services to operate the platform:

Stripe

Payment processing and subscription billing

Authentication Provider

Secure login and user management

Cloud Database

Encrypted data hosting and storage

Flight Data Partners

Award flight availability data

Each of these providers has their own privacy policies governing how they handle your data. We encourage you to review them.

4. Data Sharing and Sales

We do not sell your personal data. We do not share your information with third parties for their marketing purposes.

We may share data with the third-party services listed above solely to provide the PointPath service. We may also disclose information if required by law or to protect our legal rights.

5. Data Retention

We retain your account data and search history for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required by law to retain it.

6. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. Our authentication and payment providers maintain SOC 2 compliance.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can also export your data or delete your account through your account settings.

8. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or through the platform. Your continued use of PointPath after changes take effect constitutes acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or how we handle your data, please reach out at help@pointpath.io.

PointPath is operated by Convergence Engineering.