Privacy & Cookie Policy

For clarity, here are key terms used in this Policy:

• Personal Data: Any information that identifies or relates to you as an individual, such as name, email, passport details, or relocation preferences.
• Sensitive Personal Data: Categories of Personal Data that require extra protection, including visa/immigration history, financial information, health data (if provided for relocation purposes), or other sensitive details.
• Processing: Any operation performed on Personal Data, such as collection, use, storage, or sharing.
• Controller: The entity that determines how and why Personal Data is processed (we act as Controller for most data).
• Processor: An entity that processes Personal Data on behalf of a Controller (e.g., our service providers).
• B2C User: An individual using the Services for personal relocation.
• B2B User: An individual using the Services through a Corporate Client's account.
• Corporate Client: A business entity with an Enterprise Master Agreement.

We collect information to provide and improve the Services, including matching countries/visas, creating relocation plans, and connecting you with Third-Party Providers.

2.1 Information You Provide

• Account and Profile Data: Name, email, password, location, nationality, age, family details, employment status, and preferences for relocation.
• Relocation Data: Visa/immigration details, financial information, education history, pet information, and other details you input for matchers, plans, or dashboards.
• Sensitive Personal Data: We may collect visa histories, health-related needs (e.g., for accessibility), or other sensitive info if you provide it. We only collect what's necessary and with your consent where required.
• Payment Data: For paid features, billing details (processed by third-party payment providers; we don't store full card info).
• Communications: Messages with us or Third-Party Providers via the platform.
• B2B-Specific: Corporate Clients may provide employee data (e.g., rosters, relocation needs) under an Enterprise Master Agreement, which includes a Data Processing Agreement (DPA).

2.2 Information We Collect Automatically

• Usage Data: IP address, browser type, device info, pages visited, time spent, and interactions with features like matchers.
• Tracking Technologies: We use cookies, pixels, and similar tools to track behavior for algorithms (e.g., improving matchers) and analytics.
• Location Data: Inferred from IP or provided by you for relocation matching (not precise geolocation unless consented).

2.3 Information from Third Parties

• Third-Party Providers: Details shared during connections (e.g., service quotes).
• Corporate Clients: For B2B Users, data from your employer.
• Analytics Partners: Aggregated usage stats.

We do not collect Personal Data from children under 13 (or 16 in some jurisdictions); see Section 10.

We use your information to:

We share information as follows:

• Third-Party Providers: To facilitate connections; they are independent controllers. We shift liability to them per the Terms.
• Service Providers: Processors like cloud hosts (e.g., AWS), analytics (e.g., Google Analytics), or payment processors, bound by contracts ensuring compliance.
• Corporate Clients: For B2B Users, we share with your employer (e.g., progress reports) under the DPA.
• Affiliates: For internal operations.
• Legal Requirements: If required by law, subpoena, or to protect rights.
• Business Transfers: In mergers/acquisitions, your data may transfer.

We do not share Sensitive Personal Data without consent, except as needed for Services.

Notify us of breaches at contact@borderpilot.com.

Your data is stored in the US and may be transferred globally. For EEA/UK users, we use EU-approved Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements (IDTAs). For other regions, we ensure adequate safeguards. Contact us for details.

We use cookies and similar tools for essential functions, analytics, and personalization.

You can manage cookies via browser settings, but disabling may limit Services. We honor "Do Not Track" signals where feasible.

Depending on your location, you may have specific rights regarding your personal data:

• Access/Update/Delete: Request your data, corrections, or deletion (subject to legal retention).
• Opt-Out: From marketing emails or tracking (e.g., via footer links).
• CCPA Rights (California Residents): Know categories collected/sold/shared; delete; opt-out of sales/sharing; limit sensitive data use.
• GDPR Rights (EEA/UK Residents): Access, rectify, erase, restrict, object, portability, withdraw consent. We respond within one month.
• B2B Users: Rights may be exercised via your Corporate Client; we process as directed.

To exercise rights, email contact@borderpilot.com with verification. We do not discriminate based on rights exercises.

We retain Personal Data as needed for Services, legal obligations (e.g., 7 years for tax), or disputes. Anonymized data may be kept indefinitely. Upon deletion request, we remove identifiable info unless required to retain.

The Services are not for children under 13 (or 16 under GDPR). We do not knowingly collect their data. If discovered, we delete it. Parents: contact us if concerned.

The Services may link to third-party sites (e.g., government portals). We are not responsible for their privacy practices.

We may update this Policy; changes are posted here with the "Last Updated" date. Material changes (e.g., new uses) will be notified via email or in-app. Continued use constitutes acceptance.