Privacy Policy

Who is responsible

For the accounts of organizers and for this website, GroupArrivals decides how personal data is used (we are the controller).

For travelers' details that an organizer adds to a group, the organizer decides how they are used and GroupArrivals processes them on the organizer's behalf (we are the processor). If you are a traveler, please contact the organizer of your trip first; we will help them answer you.

What we collect

Organizers: name, email address, workspace name, language, time zone, sign-in details, and billing details handled by Stripe (we do not store card numbers).

Travelers: name, and where the organizer adds them, email, phone, party or group, notes, flight numbers and dates, and check-in times (checked in, boarded).

Website visitors: the contact form's contents, and, only if you accept analytics cookies, usage data collected by Google Analytics.

Why we use it

To run the service: track flights, show boards, send alerts and summaries to the organizer's team, and enable check-in. To bill for passes and plans. To answer messages. To keep the service secure and fix problems.

We do not sell personal data, and we do not use travelers' data for advertising.

How long we keep it

Travelers' personal data is deleted automatically 60 days after a group's last day. An organizer can change this for their workspace or delete a group sooner.

Organizer accounts are kept while the account is active and deleted when the workspace is deleted, except billing records we must keep by law. Contact form messages are kept for up to 24 months.

Who helps us (subprocessors)

Supabase: database, sign-in and file storage. Vercel: hosting of the website and the app. Resend: sending email. Stripe: payments and invoices. FlightAware: live flight status; it receives flight numbers and dates only, never names.

We will update this list before adding a new subprocessor that handles travelers' data, and tell organizers on a monthly plan by email.

International transfers

Our providers are based in the United States. Where data from the European Economic Area, the United Kingdom or another region with transfer rules is sent to the United States, we rely on the safeguards our providers offer, such as the EU Standard Contractual Clauses.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to its use. Organizers can do most of this in the app. Anyone can write to hello@grouparrivals.com. Travelers should contact their organizer first. You can also complain to your local data protection authority.

Security

Data is encrypted in transit and at rest, each workspace's data is kept apart in the database, and public links store only a hash of their token. More on the Security and privacy page.

Cookie Notice

This website sets no cookies unless you accept analytics. If you accept, Google Analytics sets cookies (named _ga) to count visits; advertising features are turned off. Your choice is kept in your browser's local storage for one year. You can change it at any time with the button below.

The app at app.grouparrivals.com uses cookies that are needed to keep you signed in. They are not used for tracking.

Change cookie choice

Children

Organizers may add minors as travelers, for example on a family trip or a school trip, and are responsible for having the right to do so. GroupArrivals is not meant for use by children.

Changes and contact

We will post changes here and update the date at the top. For important changes we will tell organizers by email. Questions: hello@grouparrivals.com.