Privacy Policy

Last updated 2 July 2026

Who we are

NomadPilot Inc. ("NomadPilot", "we") is the data controller. Registered address: NomadPilot Inc., 16192 Coastal Highway, Lewes, Delaware 19958, USA. Contact: maya@nomadpilot.app.

What we collect

We collect only what we need to run our travel-compliance tools:

• Email address — when you use a readiness checker or join the waitlist, so we can send your result and (with consent) rule-change alerts.
• Passport nationality & destination — the inputs you give a checker, used to compute your result.
• Marketing consent — whether you opted in to alerts, and when.
• Anonymous usage events — page/tool interactions, referrer, and UTM campaign tags, tied to a random session identifier, not to your name.

We do not ask for, or intentionally store, passport numbers, dates of birth, or payment card details on our checker tools.

Why we use it (legal bases)

• To provide the result you asked for — performance of a service you requested.
• To send rule-change alerts — only with your consent, which you can withdraw anytime.
• To improve our tools and understand demand — our legitimate interest in operating and improving the service, using aggregate, non-identifying data.

How long we keep it

We keep your email while you remain on our list. If you unsubscribe we suppress future sends; if you request erasure we delete your record. Anonymous usage events are retained in aggregate for analytics.

Who processes it for us

We share data only with service providers that help us operate, under their own terms: Supabase (database), Resend (email delivery), Vercel (hosting), and AI providers (Groq, Google Gemini) used to generate guidance. Some of these process data outside your country; where required we rely on appropriate safeguards.

Your rights

Depending on where you live (GDPR, UK GDPR, India's DPDP Act, CCPA and others), you may have the right to access, correct, delete, or port your data, and to withdraw consent. Exercise any of these here: nomadpilot.app/privacy/request. We verify it's you via an emailed link, then act within 30 days. You may also complain to your local data protection authority.

Cookies

See our Cookie Policy.

Changes

We'll update this page and the date above when our practices change.