Privacy Policy

Everything below is collected directly from you, or generated while running the Service for you. There is no third-party data enrichment.

• Account data. Your email address, and your first and last name if you provide them during signup. Sign-in is passwordless, so we never store a password.
• Travel preferences. Your home airport (a metro area, not a precise location), the destination regions you want alerts for, the points and miles currencies you hold, and any regions or airports you have joined a waitlist for. These exist only to decide which deals to send you.
• Email and consent records. Whether you confirmed your email subscription and when, whether and when you unsubscribed, and records of the deal emails we sent you. Our email provider also processes standard delivery information such as whether a message was delivered, bounced, or reported as spam.
• Billing data. Your subscription status, plan, price, trial end date, renewal date, and whether a cancellation is pending, mirrored from Stripe. Your payment card details go directly to Stripe and Link — we never see or store card numbers. They also collect the billing address needed to process your payment and determine tax; it can appear in the event notifications Stripe sends our server, but we do not store it.
• Technical records. Our hosting and database providers keep standard server and security logs, which include IP addresses and browser user-agent strings. We also use your IP address transiently to rate-limit our signup endpoint against abuse; that check is not written to our database.
• Usage, device, and advertising data. Pages viewed and actions taken on our site, device and browser type, approximate location derived from your IP address, and identifiers set by cookies and similar technologies — collected through analytics tools (including Google Analytics) and advertising pixels, subject to the choices described in Section 4.

We do not collect precise GPS location, biometric data, government identifiers, health data, or information about your finances beyond your subscription status. We do not ask for your loyalty-program account numbers, logins, or points balances, and you should never send them to us — Point Finder never needs them, and nobody legitimately acting for us will ask.

• decide which award deals match your airport, regions, and points, and email them to you;
• send account emails — sign-in links, subscription confirmations, and billing notices;
• process your subscription and payments, and keep billing and tax records;
• prove that you opted in to email, and honor it when you opt out;
• secure the Service, prevent fraud and abuse, and debug problems;
• understand in aggregate how the Service performs, so we can improve which deals we send;
• understand how Point Finder is used, and measure and improve our marketing and advertising;
• comply with legal obligations and enforce our Terms.

No AI training, and your travel data stays out of advertising. Your personal information is not used to train any machine learning model, ours or anyone else’s, and we do not build profiles about you beyond the preferences you set yourself. Which deals get sent is decided by automated scoring plus human editorial review of the deals themselves — that process reads route and fare data, not you. Advertising and analytics partners receive only the usage data and cookie identifiers described in Sections 3 and 4 — never your travel preferences or the deals we send you.

We share personal information only with service providers acting on our instructions to run Point Finder, under contracts that limit what they may do with it, and only what each one needs:

• Hosting and application infrastructure — runs the website and its server-side code, and keeps the associated request and security logs.
• Database and authentication — where your account, preferences, and subscription state are stored, and what issues your passwordless sign-in links.
• Email delivery — sends your deal emails, sign-in links, and account notices, and maintains the contact list your address sits in so unsubscribes are honored.
• Stripe and Link — Point Finder subscriptions are sold through Stripe’s Managed Payments, with Link (a Stripe company) acting as merchant of record: it processes your payment, appears on your statement, collects and remits applicable taxes, and provides transaction support. Your card details and billing address go to them, never to us, and their own privacy policy covers what they do with payment data.
• Analytics and advertising partners (including Google Analytics) — receive usage data, device information, and cookie identifiers to help us measure how Point Finder is used and how our marketing performs. They never receive your travel preferences, your deal history, or the contents of any email we send you.

Where the deals come from. We find award availability through third-party flight-data sources and our own monitoring. Those sources receive search parameters — routes, dates, cabins — and never your identity, your email, or your preferences. No airline, hotel, loyalty program, or credit-card issuer receives anything about you from us.

We do not sell personal information for money, and we never give your travel preferences or deal history to advertisers or data brokers. Like most companies that advertise online, we do share limited identifiers and usage data (cookies, device information) with advertising and analytics partners; some US state laws treat this as “sharing” for cross-context behavioral advertising, and you can opt out at any time (Section 6). We may disclose information if required by law or legal process, to protect the rights, safety, or property of users or the company, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply and we will notify you of any successor.

Point Finder uses three kinds of cookies and similar technologies:

• Essential — keep the Service working. Our own sign-in session cookie (set when you sign in and in your account area), and Stripe’s fraud-prevention cookies (with names like __stripe_mid and __stripe_sid), which Stripe’s script sets if you open checkout to detect and block payment fraud — that data goes to Stripe, not to us, and Stripe’s privacy policy governs it. Essential cookies always run.
• Analytics (including Google Analytics) — help us understand how the site and product are used so we can improve them.
• Advertising — measure whether our marketing works and help us reach people looking for a service like Point Finder.

Where the law requires consent (for example in the EEA and UK), non-essential cookies run only after you agree, and you can change your choices at any time through the cookie controls. Everywhere, you can opt out of advertising-related sharing: we honor the Global Privacy Control browser signal as an opt-out, you can block or clear cookies in your browser, or you can email privacy@point-finder.com (see Section 6). We run no session recording, and we never put your travel preferences or deal history in any analytics or advertising event.

• While your account exists, we keep your email, preferences, consent record, and subscription state so the Service works.
• If you unsubscribe, we keep your account but stop sending deal emails. We retain the unsubscribe record itself so we can prove we honored it and never mail you again by accident.
• If you ask us to delete your account (email privacy@point-finder.com), we cancel any active subscription — refunding the prorated unused portion of any paid period — remove you from our email lists, and delete your profile and preferences. Deletion is handled by request rather than a self-serve button today; we act on requests within 30 days and confirm when it is done.
• Billing, tax, and consent records are retained as long as the law requires and as needed to defend legal claims, even after account deletion. Stripe retains its own transaction records under its own policy.
• Server logs are retained on our providers’ standard schedules, which are short, and are used only for security and debugging.

• Access and correction. Your home airport, regions, and points currencies are visible and editable any time in your account, which also shows the email address we have for you. To change your email address, or for a copy of everything else we hold about you, email privacy@point-finder.com.
• Deletion and portability. Email privacy@point-finder.com and we will delete your account, or send you your data in a portable format, within 30 days.
• Email. Every deal email includes a one-click unsubscribe that works immediately and needs no login. Sign-in links and billing notices are transactional and are sent only in response to something you did.
• Opt out of targeted advertising (“Do Not Sell or Share”). Use the cookie controls where shown, turn on the Global Privacy Control signal in your browser (we honor it as an opt-out of sharing), or email privacy@point-finder.com with the subject “Do Not Sell or Share.” The advertising-related sharing described in Section 3 is the only processing subject to an opt-out.

US state privacy rights. Depending on where you live — for example California, Virginia, Colorado, Connecticut, or Texas — you may have statutory rights to know, access, correct, delete, and port your personal information, and to opt out of sales, sharing, targeted advertising, and profiling. Point Finder honors these requests for everyone regardless of where they live. We will not discriminate against you for exercising any right. You may use an authorized agent by giving them signed permission; we verify requests through your account email. We respond to requests within 45 days (extendable once where the law allows, and we will tell you if so). If we deny a request, you may appeal by replying to our decision within 45 days, and we will answer your appeal within 60 days with an explanation. If your appeal is denied, you can contact your state’s Attorney General, and California residents may also contact the California Privacy Protection Agency.

If you are outside the United States. Point Finder is operated from the United States and your information is stored and processed there, including by the providers listed in Section 3. Paid subscriptions are offered to US billing addresses only, but anyone can subscribe to the free email. Wherever you live, you may ask us to access, correct, delete, or export your information, and to stop emailing you, by writing to privacy@point-finder.com — we apply the rights in this section to everyone rather than checking which law covers you.

We protect your data with encryption in transit, row-level security in our database so an account can only ever read its own row, and credentials scoped so that sensitive fields — subscription tier, admin status, and your email consent flag — can be written only by our server, never by a signed-in browser. Payment card data never touches our systems. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as required by law.

The Service is for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact privacy@point-finder.com and we will delete it.

If we make material changes we will notify you by email or an in-product notice before they take effect, and update the version and effective date above. Earlier versions are available on request.

Ventana Global LLC dba Point Finder · 330 N Wabash Ave, Chicago, IL 60611, United States

Privacy requests: privacy@point-finder.com · General support: support@point-finder.com · See also our Terms of Service.