Privacy policy

1.The short version

We collect what the product needs to work: your account details, the trips you build, and basic technical logs. We do not sell personal data, we do not run advertising, and we do not track you across other websites.

2.What we collect

Three categories, nothing hidden.

• Account: name, email, password hash, plan, and the preferences you set.
• Trips: the countries, dates, party, budget and routes you create, plus any notes you write.
• Technical: IP address, browser, and error logs, kept short and used to fix things.

3.Why we are allowed to

Contract, for anything needed to give you the service you asked for. Legitimate interest, for security and fixing faults. Consent, for optional analytics and marketing email — you can withdraw it any time.

4.Who else sees it

A small number of processors, each bound by contract and none of them permitted to use your data for their own purposes.

• Payment processor: handles cards. We never receive your card number.
• Email provider: sends account and deadline emails.
• Map and photography providers: receive coordinates and image requests, never who you are.
• Hosting in the EU. Where any transfer leaves the EEA it uses Standard Contractual Clauses.

5.How long we keep it

Trips stay until you delete them or close the account. Technical logs are deleted after 90 days. Invoices are kept for 7 years because tax law requires it. A closed account is erased within 30 days, except those invoices.

6.Your rights

Access, correct, delete, export, restrict, object, and withdraw consent. Export is one click in Account; the rest we handle within 30 days of you asking at privacy@outrouted.com. You can also complain to the Lithuanian State Data Protection Inspectorate.

7.Children

The service is not intended for under-16s. If you believe a child has an account, write to us and we will remove it.

8.Changes

If we change how we use your data we will email you before it takes effect, not after.