Privacy Policy

Last updated July 13, 2026 · Draft

What we collect

Your email and display name; the content you add (places, votes, comments, photos, videos, trip plans, expenses); and product analytics events (which screens are used — never the content of your posts). Photos are stripped of EXIF location data on upload.

What we never do

We don't sell your data. We don't show ads. Your Grove's content is visible only to its members — every table in our database enforces that isolation, and it is tested on every code change.

Who processes data for us

Supabase (database, auth, storage) · Vercel (hosting) · Mux (video) · Sentry (error reports) · PostHog (analytics) · Anthropic (server-side AI features like town summaries; your media is not used to train models).

Sharing you control

Trip one-pager share links are optional, show first names only, and die the moment you turn them off. Invitation links show a preview (trip name, first-name momentum) to the invitee.

Deletion

Delete your account any time from your profile. It removes your account and everything you added, permanently. Backups age out within 30 days.

Children

Pando is for people 13 and older. We don't knowingly collect data from children under 13.

Contact

Privacy questions: privacy@pandotravel.app · Copyright: dmca@pandotravel.app