Privacy Notice

1. Who we are

Show Trekker is operated by GK Consulting LLC (trading as “Show Trekker”). We are the data controller for the personal data described in this notice — we decide what data is collected and why. Privacy questions and rights requests go to support@showtrekker.com.

2. Data we collect and why

• Account data (name, email address, Google account identifier, profile image) — to create and authenticate your account. Legal basis: performance of our contract with you.
• Trip and preference data (saved trips and favourites, home city, travel assumptions and presets, group trip membership) — to provide the planning features and sync them across your devices. Legal basis: performance of our contract.
• Subscription and entitlement data (plan status, renewal state, and the transaction identifiers Paddle returns to us) — to grant Pro access and support you. Legal basis: performance of our contract and legal obligation. Card and billing details are collected and stored by Paddle, not by us.
• Usage and telemetry (pages and shows viewed, searches, ticket and booking link clicks, share clicks, trip builds per day, error reports) — to operate usage limits, measure affiliate referrals, diagnose faults and improve the product. Legal basis: legitimate interests in running and improving the Service.
• Technical data (IP address, device and browser type, approximate location derived from IP, timestamps) — to serve the site, detect abuse and prevent fraud. Legal basis: legitimate interests in security.
• Support messages you send us — to answer you. Legal basis: legitimate interests and contract performance.

Where we rely on consent (for example, optional marketing email), you can withdraw it at any time without affecting processing carried out beforehand.

3. Who we share data with

• Merchant of Record. Paddle.com acts as reseller and Merchant of Record for all our orders, handling checkout, subscription management, payments, tax compliance and invoicing, and providing customer service for purchases.
• Service providers / subprocessors that host and run the Service: hosting and application infrastructure, our managed database and authentication provider, email delivery, and error monitoring. They process data on our instructions only.
• Event, ticketing and travel data sources we query to populate listings and price estimates. When you click through to a ticketing or travel partner, that partner receives your request under its own privacy policy.
• Professional advisers (legal, accounting) where necessary, and authorities where we are required by law or to defend legal claims.

We do not sell your personal data.

4. International transfers

We are based in the United States, and our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary safeguards.

5. Retention

We keep account, trip and entitlement data for as long as your account is active and for up to 12 months afterwards so you can return without losing your trips. Transaction records are kept for as long as tax and accounting law requires (typically 7 years). Usage, telemetry and error logs are kept for up to 24 months in identifiable form. After those periods we delete or anonymise the data. You can ask us to delete your account sooner at any time.

6. Your rights

Subject to your local law, you have the right to access your data, correct it, delete it, restrict or object to its processing (including profiling for usage analytics), receive it in a portable format, and withdraw consent. Residents of the UK and EEA have these rights under the UK GDPR / GDPR and may complain to their supervisory authority (in the UK, the Information Commissioner’s Office). California residents may exercise access, deletion and opt-out rights under the CCPA/CPRA; we do not sell or share personal information for cross-context behavioural advertising.

Email support@showtrekker.com to exercise a right. We respond within one month and will not discriminate against you for making a request.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS), encryption at rest for our database, row-level access controls scoped to your account, least-privilege access for staff, and audited server-side handling of secrets. No system is perfectly secure, but we review these controls regularly.

8. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember your home city, travel assumptions, trip presets and in-progress trip. We use a small amount of first-party analytics to count feature usage and enforce free-plan limits. We do not run third-party advertising or cross-site tracking cookies. Paddle sets its own cookies during checkout, described in Paddle’s privacy policy. You can clear or block cookies and local storage in your browser settings; doing so may sign you out and reset your saved preferences.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this notice

We will update this notice when our practices change and revise the “last updated” date above. Material changes will be highlighted in the app.